批量从/sdcard/files目录下载文件到电脑：adb shell ls /sdcard/files/* | tr “\n\r” " " | xargs -n1 adb pull 注意：如果permission denied，则先执行adb root，再执行adb remount,如果你不知道什么是root，那么就不要操作了。 将整个目录下的文件上传到手机：adb push . /sdcard/files

Class serviceManagerClass; try { serviceManagerClass = Class.forName("android.os.ServiceManager"); Method getService = serviceManagerClass.getMethod("getService", String.class); IBinder retbinder = (IBinder) getService.invoke( serviceManagerClass, "statusbar"); Class statusBarClass = Class.forName(retbinder .getInterfaceDescriptor()); Object statusBarObject = statusBarClass.getClasses()[0].getMethod( "asInterface", IBinder.class).invoke(null, new Object[]{retbinder}); Method clearAll = statusBarClass.getMethod("toggleRecentApps"); clearAll.setAccessible(true); clearAll.invoke(statusBarObject); } catch (Exception e) { e.printStackTrace(); }

import android.content.ComponentName; import android.content.Context; import android.content.Intent; import android.os.Bundle; import android.os.Handler; import android.os.Message; import android.util.Log; import java.lang.reflect.Field; import java.lang.reflect.InvocationHandler; import java.lang.reflect.Method; import java.lang.reflect.Proxy; public class HookUtil { private Class proxyActivity; private Context context; public HookUtil(Context context) { try { this.proxyActivity = Class.forName("class"); } catch (ClassNotFoundException e) { e.printStackTrace(); } this.context = context; } public void hookSystemHandler() { try { Class activityThreadClass = Class.forName("android.app.ActivityThread"); Method currentActivityThreadMethod = activityThreadClass.getDeclaredMethod("currentActivityThread"); currentActivityThreadMethod.setAccessible(true); //获取主线程对象 Object activityThread = currentActivityThreadMethod.invoke(null); //获取mH字段 Field mH = activityThreadClass.getDeclaredField("mH"); mH.setAccessible(true); //获取Handler Handler handler = (Handler) mH.get(activityThread); //获取原始的mCallBack字段 Field mCallBack = Handler.class.getDeclaredField("mCallback"); mCallBack.setAccessible(true); //这里设置了我们自己实现了接口的CallBack对象 mCallBack.set(handler, new ActivityThreadHandlerCallback(handler)); } catch (Exception e) { e.printStackTrace(); } } public void hookAms() { //一路反射，直到拿到IActivityManager的对象 try { Class ActivityManagerNativeClss = Class.forName("android.app.ActivityManagerNative"); Field defaultFiled = ActivityManagerNativeClss.getDeclaredField("gDefault"); defaultFiled.setAccessible(true); Object defaultValue = defaultFiled.get(null); //反射SingleTon Class SingletonClass = Class.forName("android.util.Singleton"); Field mInstance = SingletonClass.getDeclaredField("mInstance"); mInstance.setAccessible(true); //到这里已经拿到ActivityManager对象 Object iActivityManagerObject = mInstance.get(defaultValue); //开始动态代理，用代理对象替换掉真实的ActivityManager，瞒天过海 Class IActivityManagerIntercept = Class.forName("android.app.IActivityManager"); AmsInvocationHandler handler = new AmsInvocationHandler(iActivityManagerObject); Object proxy = Proxy.newProxyInstance(Thread.currentThread().getContextClassLoader(), new Class[]{IActivityManagerIntercept}, handler); //现在替换掉这个对象 mInstance.set(defaultValue, proxy); } catch (Exception e) { e.printStackTrace(); } } private class ActivityThreadHandlerCallback implements Handler.Callback { private Handler handler; private ActivityThreadHandlerCallback(Handler handler) { this.handler = handler; } @Override public boolean handleMessage(Message msg) { Log.i("HookAmsUtil", "handleMessage"); //替换之前的Intent if (msg.what == 100) { Log.i("HookAmsUtil", "lauchActivity"); handleLauchActivity(msg); } handler.handleMessage(msg); return true; } private void handleLauchActivity(Message msg) { Object obj = msg.obj;//ActivityClientRecord try { Field intentField = obj.getClass().getDeclaredField("intent"); intentField.setAccessible(true); Intent proxyInent = (Intent) intentField.get(obj); Intent realIntent = proxyInent.getParcelableExtra("oldIntent"); if (realIntent != null) { proxyInent.setComponent(realIntent.getComponent()); } } catch (Exception e) { Log.i("HookAmsUtil", "lauchActivity falied"); } } } public class AmsInvocationHandler implements InvocationHandler { private Object iActivityManagerObject; public AmsInvocationHandler(Object iActivityManagerObject) { this.iActivityManagerObject = iActivityManagerObject; } @Override public Object invoke(Object proxy, Method method, Object[] args) throws Throwable { Log.i("HookUtil", method.getName()); if ("startActivity".contains(method.getName())) { Log.e("HookUtil", "Activity已经开始启动"); //换掉 Intent intent = null; int index = 0; for (int i = 0; i < args.length; i++) { Object arg = args[i]; if (arg instanceof Intent) { //说明找到了startActivity的Intent参数 intent = (Intent) args[i]; //这个意图是不能被启动的，因为Acitivity没有在清单文件中注册 index = i; if (intent != null) { Bundle extras = intent.getExtras(); if (extras != null && extras.keySet() != null) { for (String key : extras.keySet()) { Log.d("HookUtil", "intent.extras.key=" + key + ",value=" + extras.get(key)); } } Log.d("HookUtil", extras + ""); } } } //伪造一个代理的Intent，代理Intent启动的是proxyActivity if (context != null && proxyActivity != null) { Intent proxyIntent = new Intent(); ComponentName componentName = new ComponentName(context, proxyActivity); proxyIntent.setComponent(componentName); proxyIntent.putExtra("oldIntent", intent); args[index] = proxyIntent; } } return method.invoke(iActivityManagerObject, args); } } } 在Application中的onCreate函数中插桩

学习RX的原因各有不同，但是目的都一样，就是学会使用RX。想要学会使用RX，最好理解Rx的编程思想。 官方网站：http://reactivex.io/ 官方对RX的解释：ReactiveX is a library for composing asynchronous and event-based programs by using observable sequences. RxJava文档的中文翻译 https://mcxiaoke.gitbooks.io/rxdocs 比较精华的文章 《给Android开发者的RxJava详解》 by:扔物线 《深入浅出RxJava》 by:大头鬼 《谜之RxJava》 by:Gemini 《RxJava之旅》 by:Chuckiefan 《给初学者的RxJava2.0教程》系列 by:Season_zlc RX官方解释为响应式编程。而Chuckiefan指出理解响应式编程首先要养成一切皆数据流的编程思维、理解异步编程和观察者模式，并将响应式编程与面向过程编程和面向对象编程并列。可见，如果不理解其编程思想，很难熟练运用RX。 Season_zlc的水管理论通俗易懂，建议认真阅读。

查阅catalina.out日志，发现以下信息，分析为网络爬虫携带的请求头不标准导致解析错误。 Mar 29, 2017 11:58:18 AM org.apache.coyote.http11.AbstractHttp11Processor process INFO: Error parsing HTTP request header 解决方案： 在server.xml中,将所有的Connector都添加以下参数： maxHttpHeaderSize="81920" 别忘了重启tomcat哦。 结果： 目前运行良好。