Hot answers tagged

4

Frida was split into two PIP packages. The package frida only contains the python bindings, while frida-tools also contains the familiar command line tools from earlier releases. This is explained in the news post for the 12.0 release: CLI tools One thing that caused a bit of confusion in the past was the fact that our Python bindings also came ...


2

One (rather ugly) solution to this is simply to crash the program by setting the thread's context's instruction pointer to unmapped memory or kernel memory. You can accomplish that with Frida's interceptor by using this.context: onLeave: function (result) { this.context.pc = 0 }


2

Heh, it's some kind of necroposting, but why not? Well, under hood unity3d use 2 variants: mono, that loads C# dlls and il2cpp, that convert it to C++ before build. For 2nd case u can use unity_metadata_loader or similar products, that takes C# metadata (description of classes mostly) with it's address offsets. Basically you could need to wait for ...


2

Try using Memory.patchCode to achieve this. Here's a short example. int test() { return 1024; } int main(int argc, char **argv) { printf("%d\n", test()); return 0; } When compiled this looks like [0x00400560]> s sym.test [0x00400656]> pdf ┌ (fcn) sym.test 11 │ sym.test (); │ ; CALL XREF from main @ 0x400670 │ ...


1

The Details are all available in the Javascript API documentation for Interceptor below is a small demo assuming you have a source code as below the adder function will be called from 3 places for a total of 26 times #include <stdio.h> int adder( int a , int b) { return a+b; } int addonce (int a, int b) { return adder(a,b); } int addtwice (...


1

There are plenty examples of using Frida on Windows: Windows example Huge collection of Awesome Frida links - link Windows example 2 in Chinese so use Google Translate. To your question, the general idea behind Frida is the same regardless of the platform where you have to make yourself familiar with Frida API and write scripts to analyzed hooked functions ...


1

You understand the situation incorrect. windows.getAll() is JavaScript which the client, in this case, Firefox browser, is evaluating. Using Frida is injecting JavaScript code into Firefox. $ cat script.js Interceptor.attach(Module.findExportByName(null, "PR_Write"), { onEnter: function (args) { console.log(Memory.readByteArray(args[1], args[...


Only top voted, non community-wiki answers of a minimum length are eligible