6
votes
Frida command not available after installing Frida PIP Python package
Frida was split into two PIP packages.
The package frida only contains the python bindings, while frida-tools also contains the familiar command line tools from earlier releases.
This is explained ...
- 191
4
votes
Hooking function with frida
Try using Memory.patchCode to achieve this. Here's a short example.
int test() { return 1024; }
int main(int argc, char **argv) {
printf("%d\n", test());
return 0;
}
When compiled this ...
- 2,345
3
votes
android unity intercept w/ Frida
Heh, it's some kind of necroposting, but why not?
Well, under hood unity3d use 2 variants: mono, that loads C# dlls and il2cpp, that convert it to C++ before build.
For 2nd case u can use ...
- 31
3
votes
Accepted
Unable to attach into mysterious PID
It's not a malware. It's cygwin's ssh-agent and it uses non existent PID as parent. I was able figure this out using a new version of ProcessHacker.
- 161
2
votes
Accepted
Killing thread/process from Frida trace
One (rather ugly) solution to this is simply to crash the program by setting the thread's context's instruction pointer to unmapped memory or kernel memory. You can accomplish that with Frida's ...
- 96
2
votes
Accepted
Dynamic analysis (Frida) reveals instance of a class that doesn't exist in the source code (dex2jar)
There are multiple possibilities how this might happen.
The code is loaded dynamically at run-time, e.g. for an [obfuscated/encrypted] dex file that is present in the APK file but does not follow the ...
- 525
2
votes
hooking libhoudini on x86 emulator
Yes, it's true. So far, Frida 12.11.14 does not support it.
You can check https://www.slideshare.net/cisoplatform7/one-step-ahead-of-cheaters-instrumenting-android-emulators
not sure if it's working......
- 41
2
votes
Accepted
Load a *.dylib or *.so object into the Javascript V8 runtime?
I was misinterpreting the context of the comment in the original link, it seems. I was under the impression that Module.load was a v8-ism, while it in fact appears to be a Frida-API.
https://frida.re/...
- 183
2
votes
Accepted
Create instance of iOS class that contains a . with frida
ObjC.classes.TestClass is just a shorthand in JavaScript for
ObjC.classes['TestClass'].
Therefore you should be able to access an Test.Class instance this way:
var instance = ObjC.chooseSync(ObjC....
- 525
2
votes
Frida reading files is slow
The reason why your code is slow is not Frida but your code. Your code would be also slow when executed in plain J2SE Java.
The simple reason is because you are reading the file byte by byte using an ...
- 525
1
vote
Decode lua scripts for cocos2d based game / frida, android
use ida pro or ghidra to find the decryption function.
if you attach to the process on a real phone you can hook the xxtea function and the 16 bytes at the 3rd argument pointer will be the key.
- 11
1
vote
Accepted
Debug shared library in Android application
What you see is possible if the APK files uses the mode extractNativeLibs="false". If that attribute is set in the <application tag in AndroidManifest.xml then Android loads the .so files ...
- 525
1
vote
Accepted
Log input data and resulting hash for CC_MD5 calls in an iOS app with Frida
The main problem of your code is that you expect the md parameter to be a string. In C the unsigned char * is not an indicator for a string. Instead it is often for storing binary data.
In this case ...
- 525
1
vote
Accepted
Read and write to register with Frida
The issue was that w9 is a 32-bit register and I was using a 64 bit device. By calling this.context.x9 for the 64 bit register the Frida script worked perfectly. Many thanks to @whoopdedoo, their ...
- 95
1
vote
Calling a method of a Java object passed as argument to hooked function in Frida
It's very likely you need to access the .value of the object. Alternatively you could also "stringfy" this which is an easy was to understand all the properties of the Object. Also, you do ...
- 338
1
vote
Is frida-server latest version compatible with old Android versions
Very well functional, in my projects, when using for Android version 4.0
- 316
1
vote
Is frida-server latest version compatible with old Android versions
I'm currently using the newest Frida to tinker around with a Galaxy S4 running Android 5.1 - works just fine for me!
- 111
1
vote
Accepted
Dump value of register using frida
The Details are all available in the Javascript API documentation for Interceptor
below is a small demo
assuming you have a source code as below the adder function will be called from 3 places
for ...
- 14.8k
1
vote
Accepted
android unity intercept w/ Frida
Answer
// Constants
const kIgnoreArg = '-';
// Utils
function pmalloc() {
return Memory.alloc(Process.pointerSize);
}
function debug() {
send({ event: 'DEBUG'...
- 263
1
vote
How to inject JavaScript into a browser with Frida?
There are plenty examples of using Frida on Windows:
Windows example
Huge collection of Awesome Frida links - link
Windows example 2 in Chinese so use Google Translate.
To your question, the general ...
- 2,832
1
vote
How to inject JavaScript into a browser with Frida?
You understand the situation incorrect.
windows.getAll() is JavaScript which the client, in this case, Firefox browser, is evaluating.
Using Frida is injecting JavaScript code into Firefox.
$ cat ...
- 263
1
vote
What functions (in which modules) can be hooked by Frida to access unencrypted data of SSL connections in Java programs running under Windows?
That requires some research on your end.
Find out what API functions (not Java level) are used on a system level to deal with SSL. I could imagine that the Java runtime on Windows uses the Internet ...
- 1,331
Only top scored, non community-wiki answers of a minimum length are eligible