android.cheat

% Android and ADB Cheats

$ service: command -v frida-ps >/dev/null 2>&1 && frida-ps -U 2>/dev/null | awk '{print $2}' || printf '%s\n' com.example.app
$ script: find "$(pwd)" -maxdepth 1 -type f -name '*.js' 2>/dev/null | sort -u; printf '%s\n' ./script.js
$ apk: find "$(pwd)" -type f -name '*.apk' 2>/dev/null | sort -u
$ package_name: printf '%s\n' com.example.app
$ tag: printf '%s\n' '*'
$ device_ip: printf '%s\n' 127.0.0.1
$ local: find "$(pwd)" -type f 2>/dev/null | sort -u
$ remote: printf '%s\n' /sdcard/Download/
$ output_path_on_device: echo /sdcard/capture.pcap
$ device_port: echo 8080
$ host_port: echo 8080
$ url_or_path: echo http://www.google.com/to_for_example.mp4

# start the adb server as root (is needed)
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c sh -c 'sudo adb stop-server; sudo adb start-server'

# What android devices are available
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb devices

# Enter adb in root mode
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c sh -c 'pgrep -x adb >/dev/null || { echo "ADB daemon is not running; run the start ADB server cheat first and connect a device."; exit 1; }; adb get-state >/dev/null 2>&1 && adb root || { echo "No adb device/emulator connected."; exit 1; }'

# Decompile an android apk app
apktool d <apk>

# Fix the bug with `waiting for debugger`
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell am clear-debug-app

# -needs rooted device- downloads unzip push and run frida-server on Android device
wget "$(gron https://api.github.com/repos/frida/frida/releases/latest | grep -E 'https:\/\/(.*)-android-arm64.xz' | grep server | cut -d '"' -f2)" -O /tmp/frida-server.xz; unxz /tmp/frida-server.xz; adb push /tmp/frida-server /data/local/tmp/frida-server; adb shell "chmod 755 /data/local/tmp/frida-server"; adb shell "/data/local/tmp/frida-server &" &

# Start frida server
adb shell "/data/local/tmp/frida-server &"

# frida list all running processes
frida-ps -Uai

# frida list devices
frida-ls-devices

# frida-trace Launch SnapChat on your iPhone and trace crypto API calls
frida-trace -U -f <service> -I "libcommonCrypto*"

# frida-trace Trace recv* and send* APIs in Safari, insert library names in logging
frida-trace --decorate -i "recv*" -i "send*" Safari

# frida-trace Trace ObjC method calls in Safari
frida-trace -m "-[NSView drawRect:]" Safari

# frida-trace Launch SnapChat on your iPhone and trace crypto API calls
frida-trace -U -f <service> -I "libcommonCrypto*"

# frida-trace Launch YouTube (com.google.android.youtube) and trace Java methods with “certificate” in their signature (s), ignoring case (i) and only searching in user-defined classes (u)
frida-trace -U -f com.google.android.youtube --runtime=v8 -j '*!*certificate*/isu'

# frida-trace Trace all JNI functions in Samsung FaceService app on Android
frida-trace -U -i "Java_*" com.samsung.faceservice

# frida-trace Trace a Windows process's calls to "mem*" functions in msvcrt.dll
frida-trace -p 1372 -i "msvcrt.dll!*mem*"

# frida-trace Trace all functions matching "*open*" in the process except in msvcrt.dll
frida-trace -p 1372 -i "*open*" -x "msvcrt.dll!*open*"

# frida-trace Trace an unexported function in libjpeg.so
frida-trace -p 1372 -a "libjpeg.so!0x4793c"

# launch app with frida sideload a script in the app without a pause
frida -U -f <service> -l <script> --no-pause

# Start the ADB server (use sudo)
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c sudo adb start-server

# Start the ADB server (will prob fail without sudo)
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb start-server

# Stop the ADB server
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb kill-server

# Check connected devices
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb devices

# Enter ADB shell
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell

# Push a file to the device
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb push <local> <remote>
# Example: adb push myfile.txt /sdcard/

# Pull a file from the device
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb pull <remote> <local>
# Example: adb pull /sdcard/myfile.txt ./

# Install an APK
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb install <apk>
# Example: adb install myapp.apk

# Uninstall an app
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb uninstall <package_name>
# Example: adb uninstall com.example.myapp

# Reboot the device
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb reboot

# Reboot into bootloader
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb reboot bootloader

# Reboot into recovery mode
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb reboot recovery

# Remount system partition in read-write mode
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb remount

# Connect to a device over TCP/IP
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb connect <device_ip>:<device_port>

# Launch a browser
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell am start -a android.intent.action.VIEW -d <url_or_path>


# Play an MP4 video
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell am start -a android.intent.action.VIEW -d <url_or_path> -t video/mp4

# List installed packages
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell pm list packages

# List system packages
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell pm list packages -s

# List third-party packages
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell pm list packages -3

# Get APK location of a package
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell pm path <package_name>
# Example: adb shell pm path com.example.myapp

# View logcat output
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb logcat

# Save logcat output to a file
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb logcat -d > logcat.txt

# Clear logcat buffer
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb logcat -c

# View device logs for a specific tag
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb logcat -s <tag>
# Example: adb logcat -s MyAppTag

# Get device information
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell getprop

# Get battery status
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell dumpsys battery

# Get current running processes
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell ps

# Get disk usage
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell df

# Forward a port from the device to the host
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb forward tcp:<host_port> tcp:<device_port>

# Reverse a port from the host to the device
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb reverse tcp:<device_port> tcp:<host_port>

# Capture TCP dump on all adapters
nix shell --impure -I nixpkgs=channel:nixos-unstable --expr 'with import (builtins.findFile builtins.nixPath "nixpkgs") { config.allowUnfree = true; }; [ android-tools ]' -c adb shell tcpdump -i any -p -s 0 -w <output_path_on_device>