4
Frida was split into two PIP packages.
The package frida only contains the python bindings, while frida-tools also contains the familiar command line tools from earlier releases.
This is explained in the news post for the 12.0 release:
CLI tools
One thing that caused a bit of confusion in the past was the fact that
our Python bindings also came ...
2
Try using Memory.patchCode to achieve this. Here's a short example.
int test() { return 1024; }
int main(int argc, char **argv) {
printf("%d\n", test());
return 0;
}
When compiled this looks like
[0x00400560]> s sym.test
[0x00400656]> pdf
┌ (fcn) sym.test 11
│ sym.test ();
│ ; CALL XREF from main @ 0x400670
│ ...
2
One (rather ugly) solution to this is simply to crash the program by setting the thread's context's instruction pointer to unmapped memory or kernel memory. You can accomplish that with Frida's interceptor by using this.context:
onLeave: function (result) {
this.context.pc = 0
}
2
Heh, it's some kind of necroposting, but why not?
Well, under hood unity3d use 2 variants: mono, that loads C# dlls and il2cpp, that convert it to C++ before build.
For 2nd case u can use unity_metadata_loader or similar products, that takes C# metadata (description of classes mostly) with it's address offsets.
Basically you could need to wait for ...
1
There are plenty examples of using Frida on Windows:
Windows example
Huge collection of Awesome Frida links - link
Windows example 2 in Chinese so use Google Translate.
To your question, the general idea behind Frida is the same regardless of the platform where you have to make yourself familiar with Frida API and write scripts to analyzed hooked functions ...
1
You understand the situation incorrect.
windows.getAll() is JavaScript which the client, in this case, Firefox browser, is evaluating.
Using Frida is injecting JavaScript code into Firefox.
$ cat script.js
Interceptor.attach(Module.findExportByName(null, "PR_Write"), {
onEnter: function (args) {
console.log(Memory.readByteArray(args[1], args[...
Only top voted, non community-wiki answers of a minimum length are eligible
