Questions tagged [frida]

FRIDA is a free dynamic instrumentation toolkit which lets you inject your own scripts into black box processes. Works on Windows, macOS, GNU/Linux, iOS, Android, and QNX.

It’s Greasemonkey for native apps, or, put in more technical terms, it’s a dynamic code instrumentation toolkit. It lets you inject snippets of JavaScript or your own library into native apps on Windows, macOS, GNU/Linux, iOS, Android, and QNX. Frida also provides you with some simple tools built on top of the Frida API. These can be used as-is, tweaked to your needs, or serve as examples of how to use the API.

328 questions
7
votes
2 answers

Find manually registered (obfuscated) native function address

I'm trying to understand an Android app which contains a native method named foo in class com.app.Bar Inside class Bar there is a static clause that loads a shared object System.loadLibrary("libfoo.so") which I assume is build with…
whoopdedoo
  • 2,815
  • 23
  • 46
6
votes
1 answer

How can my Android application scan its own memory map for known bad keywords such as “Xposed” or “Frida”?

An app I am working on at work was recently pen tested. One of the risks that came back in the report was that it has no proper Hook detection. I had implemented the RootBeer library but that was easily avoided. A Frida script was created by the…
Shannon
  • 63
  • 7
5
votes
0 answers

SSL_get_fd return -1

I have tried to debug android application to print out SSL_write and SSL_read data with that project and print out the file descriptor (to get src&dst ip ) with SSL_get_fd But for some SSL* the function SSL_get_fd always return -1 instead of return…
vtable
  • 302
  • 2
  • 15
5
votes
2 answers

How to capture print statements from iOS app installed on iOS device?

I'm reading about some good practices for developing iOS apps and looking at the possibility of monitoring logs of an iOS app installed from App Store using Console.app. So, I was testing here, but I noticed that print statements didn't show up in…
5
votes
2 answers

expected return value compatible with java.lang.Boolean

I'm trying to bypass rootDetection in an android app using Frida. I've found the class and method which is checking if the device is rooted or not and tried to change the return value of this method, but I'm getting a confusing error : Error:…
Mahdi
  • 144
  • 2
  • 13
5
votes
2 answers

Frida server not enough privileges

Im running Android within an Anbox setup, I downloaded the frida-server version for Anbox the android-x86_64. I followed this steps adb push frida-server-12.11.18-android-x86_64 /data/local/tmp/ adb shell "chmod 755…
Te come Ramon
  • 51
  • 1
  • 1
  • 2
5
votes
0 answers

What does it mean, when SSL_get_fd returns -1?

I am analysing a programm with frida that definitely connects to some server via SSL. When I call SSL_get_fd, it returns -1. From the documentation I see that this means that ssl doesnt wrap a socket (BIO is definitely configured, as I can access it…
He1n
  • 51
  • 1
5
votes
2 answers

How to import multiple Frida JS files/functions into the runtime CLI?

I'm putting together a Frida test bench for co-workers, and am unfamiliar with JavaScript and Node.JS. I would like to create a single JS file that imports several other JS files, each with several functions. But when I use frida-compile against…
wetfeet2000
  • 53
  • 1
  • 4
4
votes
2 answers

Unable to connect to the frida server: need Gadget to attach on jailed Android

I am using objection to bypass ssl pining on injured android apk. After I ran this command successfully objection patchapk --source injured.apk and uninstall and reinstall the patched apk again, I tried objection explore but always get this error. I…
ELMO
  • 581
  • 2
  • 5
  • 7
4
votes
2 answers

Unable to retrieve value from interface using frida

After almost going bald from attempting to find a solution, I have decided to ask my fellow programmers who are most likely better at Java than I. I have a method that looks like this i.l.a.i.m.a.e public class e extends Object { public final…
john4826
  • 55
  • 1
  • 6
4
votes
1 answer

Read value from frida hooked native method basic_string parameter

Recently I started using Frida and playing with some native methods. But i have a problem with reading value of basic_string Here is method which I'm hooking: Here is JavaScript code which I'm using to hook…
Kaspek
  • 159
  • 1
  • 11
4
votes
1 answer

Calling a method of a Java object passed as argument to hooked function in Frida

I am trying to obtain the SecretKey passed to the decryptAesCipherText function. I hooked the function in Frida to try to print out the arguments when the method is called but since SecretKey is an object, all attempts to print it out give output as…
Abin K Paul
  • 163
  • 2
  • 10
4
votes
1 answer

Frida - Function to dump/inspect object

I'm trying to write a function using Frida that takes a Java object instance as an argument and returns a JS object with all the values and types of the Java object fields, possibly recursively. For instance, if we have something like: public class…
mme76
  • 41
  • 1
  • 3
4
votes
0 answers

Viewing decompiled code of an Android function in Frida

I'm trying to use Frida (Android 7 device - rooted emulator) according to the JavaScript API. This is the current code: Java.perform(function() { var x = Java.use('com.x.myCustomClass.util') console.log(x.functionIKnowExists) // will return…
user11527868
4
votes
2 answers

(FRIDA) Failed to spawn: unable to access zygote64 while preparing for app launch; try disabling Magisk Hide in case it is active

Im running Frida Server (frida-server-12.5.8-android-arm64.xz) in Android 8 (Oreo) as root: -rwxrwxrwx 1 root root 38152536 2019-05-26 23:34 irwan ./irwan & and then I try this to unpinning ssl in apk : C:\Users\irwan>frida -U -f xxx.xxxxx -l…
Irwan Kusuma
  • 41
  • 1
  • 1
  • 3
1
2 3
21 22