Android反调试之 AntiEmulator 检测安卓模拟器

来源：互联网发布：绝对领域知乎编辑：程序博客网时间：2024/04/26 13:48

这个文章来自 http://0nly3nd.sinaapp.com/?p=368 很感谢他的启发，不然我都没想到原来还能这样子的

八种方法检测是否存在模拟器

检查特定的几个关键点

0×1

检测“/dev/socket/qemud”，“/dev/qemu_pipe”这两个通道

代码demo：

Java
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
private static String[] known_pipes =
    {
    "/dev/socket/qemud",
    "/dev/qemu_pipe"
    };
public boolean checkPipes()
{
    for (int i = 0; i < known_pipes.length; i++) {
        String pipes = known_pipes[i];
        File qemu_socket = new File(pipes);
        if (qemu_socket.exists()) {
            Log.v("Result:", "Find pipes!");
            return true;
        }
    }
    Log.v("Result:", "Not Find pipes!");
    return false;
}

0×2

// 检测驱动文件内容

// 读取文件内容，然后检查已知QEmu的驱动程序的列表

代码demo：

Java
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
privatestaticString[]known_qemu_drivers={"goldfish"};
publicstaticBooleanCheckQEmuDriverFile(){
    Filedriver_file=newFile("/proc/tty/drivers");
    if(driver_file.exists()&&driver_file.canRead()){
        byte[]data=newbyte[(int)driver_file.length()];
        try{
            InputStreaminStream=newFileInputStream(driver_file);
            inStream.read(data);
            inStream.close();
        }catch(FileNotFoundExceptione){
            // TODO 自动生成的 catch 块
            e.printStackTrace();
        }catch(IOExceptione){
            // TODO 自动生成的 catch 块
            e.printStackTrace();
        }
        Stringdriver_data=newString(data);
        for(Stringknown_qemu_driver:FindEmulatorDemo.known_qemu_drivers){
            if(driver_data.indexOf(known_qemu_driver)!=-1){
                Log.v("Result:","Find known_qemu_drivers!");
                returntrue;
            }
        }
    }
    Log.v("Result:","Not Find known_qemu_drivers!");
    returnfalse;
}

0×3

//检测模拟器上特有的几个文件

代码demo：

Java
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
private static String[] known_files = {
    "/system/lib/libc_malloc_debug_qemu.so",
    "/sys/qemu_trace",
    "/system/bin/qemu-props"
};
public static Boolean CheckEmulatorFiles() {
    for (int i = 0; i < known_files.length; i++) {
        String file_name = known_files[i];
        File qemu_file = new File(file_name);
        if (qemu_file.exists()) {
            Log.v("Result:", "Find Emulator Files!");
            return true;
        }
    }
    Log.v("Result:", "Not Find Emulator Files!");
    return false;
}

检查模拟器系统的一些信息

0×4

// 检测模拟器默认的电话号码

代码demo：

Java
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
privatestaticString[]known_numbers={"15555215554","15555215556",
        "15555215558","15555215560","15555215562","15555215564",
        "15555215566","15555215568","15555215570","15555215572",
        "15555215574","15555215576","15555215578","15555215580",
        "15555215582","15555215584",};
 
publicstaticBooleanCheckPhoneNumber(Contextcontext){
    TelephonyManagertelephonyManager=(TelephonyManager)context
            .getSystemService(Context.TELEPHONY_SERVICE);
 
    Stringphonenumber=telephonyManager.getLine1Number();
 
    for(Stringnumber:known_numbers){
        if(number.equalsIgnoreCase(phonenumber)){
            Log.v("Result:","Find PhoneNumber!");
            returntrue;
        }
    }
    Log.v("Result:","Not Find PhoneNumber!");
    returnfalse;
}

0×5

//检测设备IDS 是不是 “000000000000000”

代码demo：

Java
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
private static String[] known_device_ids = { "000000000000000" // 默认ID
};
 
public static Boolean CheckDeviceIDS(Context context) {
    TelephonyManager telephonyManager = (TelephonyManager) context
            .getSystemService(Context.TELEPHONY_SERVICE);
 
    String device_ids = telephonyManager.getDeviceId();
 
    for (String know_deviceid : known_device_ids) {
        if (know_deviceid.equalsIgnoreCase(device_ids)) {
            Log.v("Result:", "Find ids: 000000000000000!");
            return true;
        }
    }
    Log.v("Result:", "Not Find ids: 000000000000000!");
    return false;
}

0×6

// 检测imsi id是不是“310260000000000”

代码demo：

Java
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
privatestaticString[]known_imsi_ids={"310260000000000"// 默认的 imsi id
};
publicstaticBooleanCheckImsiIDS(Contextcontext){
    TelephonyManagertelephonyManager=(TelephonyManager)
            context.getSystemService(Context.TELEPHONY_SERVICE);
 
    Stringimsi_ids=telephonyManager.getSubscriberId();
 
    for(Stringknow_imsi:known_imsi_ids){
        if(know_imsi.equalsIgnoreCase(imsi_ids)){
            Log.v("Result:","Find imsi ids: 310260000000000!");
            returntrue;
        }
    }
    Log.v("Result:","Not Find imsi ids: 310260000000000!");
    returnfalse;
}

0×7

//检测手机上的一些硬件信息

代码demo：

Java
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
public static Boolean CheckEmulatorBuild(Context context){
    String BOARD = android.os.Build.BOARD;
    String BOOTLOADER = android.os.Build.BOOTLOADER;
    String BRAND = android.os.Build.BRAND;
    String DEVICE = android.os.Build.DEVICE;
    String HARDWARE = android.os.Build.HARDWARE;
    String MODEL = android.os.Build.MODEL;
    String PRODUCT = android.os.Build.PRODUCT;
    if (BOARD == "unknown" || BOOTLOADER == "unknown"
            || BRAND == "generic" || DEVICE == "generic"
            || MODEL == "sdk" || PRODUCT == "sdk"
            || HARDWARE == "goldfish")
    {
        Log.v("Result:", "Find Emulator by EmulatorBuild!");
        return true;
    }
    Log.v("Result:", "Not Find Emulator by EmulatorBuild!");
    return false;
}

0×8

//检测手机运营商家

代码demo：

Java
1
2
3
4
5
6
7
8
9
10
11
publicstaticbooleanCheckOperatorNameAndroid(Contextcontext){
    StringszOperatorName=((TelephonyManager)
            context.getSystemService("phone")).getNetworkOperatorName();
 
    if(szOperatorName.toLowerCase().equals("android")==true){
        Log.v("Result:","Find Emulator by OperatorName!");
        returntrue;
    }
    Log.v("Result:","Not Find Emulator by OperatorName!");
    returnfalse;
}

我自己模拟器上的测试结果：

1 0