frida示例代码仓库
Go to file
2018-04-29 15:19:47 +03:00
check_for_native_calls.py get stack trace for native invokes 2018-04-23 19:06:53 +03:00
dump_dynamically_created_files.py dump dynamically created files to local 2018-04-23 19:00:54 +03:00
log_string_builders_and_string_compare.js log strings 2018-04-23 19:22:44 +03:00
README.md Update README.md 2018-04-29 15:19:47 +03:00

learn-frida-the-hard-way

TODOs:

  • Add GIFs & docs
  • SQLite hook example (+Native)

Interceptor.attach(Module.findExportByName('libsqlite.so', 'sqlite3_prepare16_v2'), { onEnter: function(args) { console.log('DB: ' + Memory.readUtf16String(args[0]) + '\tSQL: ' + Memory.readUtf16String(args[1])); } });

  • Hook example: java.lang.reflect.Method#invoke(Object obj, Object... args, boolean bool)

      Java.use('java.lang.reflect.Method').invoke.overload('java.lang.Object', '[Ljava.lang.Object;', 'boolean').implementation = function(a,b,c) {
          console.log('hooked!', a, b, c);
          return this.invoke(a,b,c);
      };
    
  • Hook constructor

      Java.use('java.lang.StringBuilder').$init.overload('java.lang.String').implementation = function(stringArgument) {
          console.log("c'tor");
          return this(stringArgument);
      };