Add files via upload

JaveleyQAQ · web-flow · commit 049003138d0e · 2024-01-17T10:19:42.000+08:00
diff --git a/WechatOpenDevTools/__init__.py b/WechatOpenDevTools/__init__.py
@@ -0,0 +1 @@
+# Licensed under the Apache License, Version 2.0 (the "License");
diff --git a/__init__.py b/__init__.py
@@ -0,0 +1 @@
+# Licensed under the Apache License, Version 2.0 (the "License");
diff --git a/__pycache__/__init__.cpython-312.pyc b/__pycache__/__init__.cpython-312.pyc
diff --git a/__pycache__/banner.cpython-312.pyc b/__pycache__/banner.cpython-312.pyc
diff --git a/__pycache__/extract.cpython-312.pyc b/__pycache__/extract.cpython-312.pyc
diff --git a/banner.py b/banner.py
@@ -0,0 +1,19 @@
+import pyfiglet
+import random
+
+def colored_print(text, color_code):
+    print(f"{color_code}{text}\033[0m")
+
+def generate_banner():
+    name="""
+        公众号: 一位不愿透露姓名的热心网友
+        Github：https://github.com/JaveleyQAQ
+    """
+    selected_fonts = ['standard', 'big', 'slant', 'small', 'shadow']
+    selected_font = random.choice(selected_fonts)
+    font = pyfiglet.Figlet(font=selected_font)
+    ascii_banner = font.renderText("WX DevTools")
+    color_codes = ['\033[91m', '\033[92m', '\033[93m', '\033[94m', '\033[95m', '\033[96m']
+    selected_color = random.choice(color_codes)
+    ascii_banner_with_author = ascii_banner.rstrip('\r\n') + f'\n\n\t'+name+f'\n'
+    colored_print(ascii_banner_with_author, selected_color)
diff --git a/configs/address_8447_x64.json b/configs/address_8447_x64.json
@@ -0,0 +1,6 @@
+{
+    "LaunchAppletBegin": "0x1B3FF48",
+    "WechatAppHtml":"0x2EC9FBD",
+    "WechatWebHtml":"0x7C0D6BD",
+    "WechatAppExLog":"0x2F20022"
+}
diff --git a/configs/address_8461_x64.json b/configs/address_8461_x64.json
@@ -0,0 +1,6 @@
+{
+    "LaunchAppletBegin": "0x1B4013F",
+    "WechatAppHtml":"0x2ECA1CD",
+    "WechatWebHtml":"0x7C0D7AD",
+    "WechatAppExLog":"0x2F20022"
+}
diff --git a/configs/address_8501_x64.json b/configs/address_8501_x64.json
@@ -0,0 +1,5 @@
+{
+    "LaunchAppletBegin": "0x2A4C18D",
+    "WechatAppHtml":"0x28E1D66",
+    "WechatWebHtml":"0x7A23D33"
+}
diff --git a/configs/address_8519_x64.json b/configs/address_8519_x64.json
@@ -0,0 +1,6 @@
+{
+  "LaunchAppletBegin": "0x02A4C21D",
+  "WechatAppHtml":"0x28E1D66",
+  "WechatWebHtml":"0x7A23D33",
+  "WechatAppExLog":"0x2F20022"
+}
diff --git a/configs/address_8529_x64.json b/configs/address_8529_x64.json
@@ -0,0 +1,6 @@
+{
+    "LaunchAppletBegin": "0x02A4D29D",
+    "WechatAppHtml":"0x28E1D66",
+    "WechatWebHtml":"0x7A2D533",
+    "WechatAppExLog":"0x2F20022"
+  }
diff --git a/configs/address_8531_x64.json b/configs/address_8531_x64.json
@@ -0,0 +1,6 @@
+{
+    "LaunchAppletBegin": "0x02A4D3ED",
+    "WechatAppHtml":"0x28E1DF6",
+    "WechatWebHtml":"0x7A2E563",
+    "WechatAppExLog":"0x2F20022"
+  }
diff --git a/configs/address_8555_x64.json b/configs/address_8555_x64.json
@@ -0,0 +1,6 @@
+{
+    "LaunchAppletBegin": "0x02A4D52D",
+    "WechatAppHtml":"0x28E1E36",
+    "WechatWebHtml":"0x7A2E563",
+    "WechatAppExLog":"0x2F20022"
+}
diff --git a/docs/api.md b/docs/api.md
@@ -0,0 +1 @@
+::: wechatminidevhook
diff --git a/docs/authors.md b/docs/authors.md
@@ -0,0 +1,3 @@
+{%
+  include-markdown "../AUTHORS.md"
+%}
diff --git a/docs/contributing.md b/docs/contributing.md
@@ -0,0 +1,3 @@
+{%
+  include-markdown "../CONTRIBUTING.md"
+%}
diff --git a/docs/history.md b/docs/history.md
@@ -0,0 +1,3 @@
+{%
+  include-markdown "../HISTORY.md"
+%}
diff --git a/docs/index.md b/docs/index.md
@@ -0,0 +1,3 @@
+{%
+    include-markdown "../README.md"
+%}
diff --git a/docs/installation.md b/docs/installation.md
@@ -0,0 +1,43 @@
+# Installation
+
+## Stable release
+
+To install WeChatMiniDevHook, run this command in your
+terminal:
+
+``` console
+pip install wechatminidevhook
+```
+
+This is the preferred method to install WeChatMiniDevHook, as it will always install the most recent stable release.
+
+If you don't have [pip][] installed, this [Python installation guide][]
+can guide you through the process.
+
+## From source
+
+The source for WeChatMiniDevHook can be downloaded from
+the [Github repo][].
+
+You can either clone the public repository:
+
+``` console
+git clone git://github.com/javeley/wechatminidevhook
+```
+
+Or download the [tarball][]:
+
+``` console
+curl -OJL https://github.com/javeley/wechatminidevhook/tarball/master
+```
+
+Once you have a copy of the source, you can install it with:
+
+``` console
+pip install .
+```
+
+  [pip]: https://pip.pypa.io
+  [Python installation guide]: http://docs.python-guide.org/en/latest/starting/installation/
+  [Github repo]: https://github.com/%7B%7B%20cookiecutter.github_username%20%7D%7D/%7B%7B%20cookiecutter.project_slug%20%7D%7D
+  [tarball]: https://github.com/%7B%7B%20cookiecutter.github_username%20%7D%7D/%7B%7B%20cookiecutter.project_slug%20%7D%7D/tarball/master
diff --git a/docs/usage.md b/docs/usage.md
@@ -0,0 +1,7 @@
+# Usage
+
+To use WeChatMiniDevHook in a project
+
+```
+    import wechatminidevhook
+```
diff --git a/getversion.py b/getversion.py
@@ -0,0 +1 @@
+# 
diff --git a/hook.js b/hook.js
@@ -0,0 +1,70 @@
+;;
+for(var addressname in address){
+    address[addressname] = parseInt(address[addressname]);
+	// console.log(address[addressname])
+};
+
+var base = Process.findModuleByName("WeChatAppEx.exe").base
+address.LaunchAppletBegin = base.add(address.LaunchAppletBegin);
+address.WechatAppHtml = base.add(address.WechatAppHtml);
+address.WechatWebHtml = base.add(address.WechatWebHtml);
+
+
+function readStdString(s) {
+
+    var flag = s.add(23).readU8()
+    if (flag == 0x80) {
+        // 从堆中读取
+        var size = s.add(8).readUInt()
+        return s.readPointer().readUtf8String(size)
+    } else {
+        // 从栈中读取
+        return s.readUtf8String(flag)
+    }
+}
+function writeStdString(s, content) {
+    var flag = s.add(23).readU8()
+    if (flag == 0x80) {
+        // 从堆中写入
+        var orisize = s.add(8).readUInt()
+        if (content.length > orisize) {
+            throw "must below orisize!"
+        }
+        s.readPointer().writeUtf8String(content)
+        s.add(8).writeUInt(content.length)
+    } else {
+        // 从栈中写入
+        if (content.length > 22) {
+            throw "max 23 for stack str"
+        }
+        s.writeUtf8String(content)
+        s.add(23).writeU8(content.length)
+    }
+}
+
+//HOOK 启动配置 
+Interceptor.attach(address.LaunchAppletBegin, {
+    onEnter(args) {
+        send("[+] HOOK到小程序加载! " + readStdString(args[1]))
+        for (var i = 0; i < 0x1000; i+=8) {
+            try {
+                var s = readStdString(args[2].add(i))
+                var s1 = s.replaceAll("md5", "md6").replaceAll('"enable_vconsole":false', '"enable_vconsole": true')
+                if (s !== s1) {
+                    writeStdString(args[2].add(i), s1)
+                } 
+            } catch (a) {
+            }
+        }
+    }
+})
+//HOOK F12配置 替换原本内容
+Interceptor.attach(address.WechatAppHtml, {
+    onEnter(args) {
+        this.context.rdx = address.WechatWebHtml;
+        send("[+] 已还原完整F12")
+    }
+})
+
+send("[+] WeChatAppEx.exe 注入成功!")
+
diff --git a/main.py b/main.py
@@ -0,0 +1,80 @@
+import  sys,re,os
+import psutil,frida
+from utils import banner
+from colorama import init, Fore, Style
+
+
+device = frida.get_local_device()
+process = device.enumerate_processes()
+pid = -1;
+version_list = []
+configs_path=""
+
+
+def get_version_list():
+
+    global configs_path 
+    current_path = os.path.abspath(__file__)
+    relative_path = 'configs'
+    configs_path = os.path.join(os.path.dirname(current_path), relative_path)
+    version_list = os.listdir(configs_path)
+    versions_list = [int(file.split('_')[1]) for file in version_list if file.startswith('address_')]
+  
+    return versions_list
+
+
+def onMessage(message, data):
+
+    if message['type'] == 'send':
+        print(Fore.GREEN + message['payload'] , Style.RESET_ALL)
+    elif message['type'] == 'error':
+        print(Fore.RED + message['stack'], Style.RESET_ALL)
+
+def is_wechat_process(cmdline):
+    process_name = "WeChatAppEx"
+    return cmdline and process_name in cmdline[0] and "--type=" not in ' '.join(cmdline)
+
+def extract_version_number(cmdline):
+    str = ' '.join(cmdline)
+    version_match = re.search(r'"version":(\d+)', str)
+    return int(version_match.group(1)) if version_match else None
+
+def get_wechat_pid_and_version():
+    processes = (proc.info for proc in psutil.process_iter(['pid', 'cmdline']))	
+    wechat_processes = (p for p in processes if is_wechat_process(p['cmdline']))
+    for process in wechat_processes:
+        pid = process['pid']
+        version = extract_version_number(process['cmdline'])
+        if version in version_list:
+            return pid, version
+    return None, None
+
+def inject_script(pid, address_file_path, script_code):
+    with open(address_file_path, 'r', encoding='utf-8') as file:
+        address_ = "var address=" + file.read() + script_code
+        
+        session = frida.attach(pid)
+        script = session.create_script(address_)
+        script.on("message", onMessage)
+        script.load()
+        sys.stdin.read()
+        session.detach()
+
+
+def print_process_not_found_message():
+    print(Fore.RED + "[-] 未找到匹配版本的微信进程或 微信未运行" + Style.RESET_ALL)
+
+if __name__ == '__main__':
+    banner.generate_banner()
+    path = os.path.dirname(os.path.abspath(__file__))+str("\\scripts\\hook.js")
+    version_list = get_version_list()
+    pid, version = get_wechat_pid_and_version()
+    script_code = open(path,"r",encoding="utf-8").read()
+    
+    if pid and version:
+        print(Fore.GREEN +"[+] 找到匹配版本号为:", version  , Style.RESET_ALL)
+        address_file_path = configs_path+"\\address_{}_x64.json".format(version)
+        inject_script(pid, address_file_path,script_code )
+    else:
+        print_process_not_found_message()
+        
diff --git a/scripts/hook.js b/scripts/hook.js
@@ -0,0 +1,70 @@
+;;
+for(var addressname in address){
+    address[addressname] = parseInt(address[addressname]);
+	// console.log(address[addressname])
+};
+
+var base = Process.findModuleByName("WeChatAppEx.exe").base
+address.LaunchAppletBegin = base.add(address.LaunchAppletBegin);
+address.WechatAppHtml = base.add(address.WechatAppHtml);
+address.WechatWebHtml = base.add(address.WechatWebHtml);
+
+
+function readStdString(s) {
+
+    var flag = s.add(23).readU8()
+    if (flag == 0x80) {
+        // 从堆中读取
+        var size = s.add(8).readUInt()
+        return s.readPointer().readUtf8String(size)
+    } else {
+        // 从栈中读取
+        return s.readUtf8String(flag)
+    }
+}
+function writeStdString(s, content) {
+    var flag = s.add(23).readU8()
+    if (flag == 0x80) {
+        // 从堆中写入
+        var orisize = s.add(8).readUInt()
+        if (content.length > orisize) {
+            throw "must below orisize!"
+        }
+        s.readPointer().writeUtf8String(content)
+        s.add(8).writeUInt(content.length)
+    } else {
+        // 从栈中写入
+        if (content.length > 22) {
+            throw "max 23 for stack str"
+        }
+        s.writeUtf8String(content)
+        s.add(23).writeU8(content.length)
+    }
+}
+
+//HOOK 启动配置 
+Interceptor.attach(address.LaunchAppletBegin, {
+    onEnter(args) {
+        send("[+] HOOK到小程序加载! " + readStdString(args[1]))
+        for (var i = 0; i < 0x1000; i+=8) {
+            try {
+                var s = readStdString(args[2].add(i))
+                var s1 = s.replaceAll("md5", "md6").replaceAll('"enable_vconsole":false', '"enable_vconsole": true')
+                if (s !== s1) {
+                    writeStdString(args[2].add(i), s1)
+                } 
+            } catch (a) {
+            }
+        }
+    }
+})
+//HOOK F12配置 替换原本内容
+Interceptor.attach(address.WechatAppHtml, {
+    onEnter(args) {
+        this.context.rdx = address.WechatWebHtml;
+        send("[+] 已还原完整F12")
+    }
+})
+
+send("[+] WeChatAppEx.exe 注入成功!")
+
diff --git a/utils/__init__.py b/utils/__init__.py
@@ -0,0 +1 @@
+# Licensed under the Apache License, Version 2.0 (the "License");
diff --git a/utils/__pycache__/__init__.cpython-312.pyc b/utils/__pycache__/__init__.cpython-312.pyc
diff --git a/utils/__pycache__/banner.cpython-312.pyc b/utils/__pycache__/banner.cpython-312.pyc
diff --git a/utils/__pycache__/extract.cpython-312.pyc b/utils/__pycache__/extract.cpython-312.pyc
diff --git a/utils/banner.py b/utils/banner.py
@@ -0,0 +1,19 @@
+import pyfiglet
+import random
+
+def colored_print(text, color_code):
+    print(f"{color_code}{text}\033[0m")
+
+def generate_banner():
+    name="""
+        公众号: 一位不愿透露姓名的热心网友
+        Github：https://github.com/JaveleyQAQ
+    """
+    selected_fonts = ['standard', 'big', 'slant', 'small', 'shadow']
+    selected_font = random.choice(selected_fonts)
+    font = pyfiglet.Figlet(font=selected_font)
+    ascii_banner = font.renderText("WX DevTools")
+    color_codes = ['\033[91m', '\033[92m', '\033[93m', '\033[94m', '\033[95m', '\033[96m']
+    selected_color = random.choice(color_codes)
+    ascii_banner_with_author = ascii_banner.rstrip('\r\n') + f'\n\n\t'+name+f'\n'
+    colored_print(ascii_banner_with_author, selected_color)
diff --git a/utils/getversion.py b/utils/getversion.py
diff --git a/workflows/dev.yml b/workflows/dev.yml
diff --git a/workflows/release.yml b/workflows/release.yml

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+# Licensed under the Apache License, Version 2.0 (the "License");`