VirtualHook

Introduction

VirtualHook is a tool for hooking application without root permission. It is based on two projects:

• VirtualApp. It's a plugin framework which allows running applications in its virtual space.
• YAHFA. It's a hook framework for ART which allows hooking Java method of the application.

Currently VirtualHook supports:

• Android 5.0(API 21)
• Android 5.1(API 22)
• Android 6.0(API 23)
• EXPERIMENTAL Android 7.0(API 24)
• EXPERIMENTAL Android 7.1(API 25)

Build

Import and build the project in Android Studio(with Instant Run disabled). There are four modules:

• app. This is the VirtualApp application module.
• lib. This is the VirtualApp library module.
• YAHFA. This is the YAHFA hook module.
• demoHookPlugin. This is a demo hook plugin which compiles to an APK.

After building the APKs, push the demoHookPlugin APK to device at /sdcard/io.virtualhook/patch.apk and run the main application. The hook plugin would be applied to all applications running in VirtualApp.

Please refer to demoHookPlugin for more details.

Example Hook Plugins

• CertUnpinning: HTTPS certificate unpinning.

License

Both VirtualApp and YAHFA are distributed under GNU GPL V3.