Questions tagged [frida]
A dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers.
85 questions
0 votes
0 answers
52 views
Why can't Frida function properly on Android 11?
I'm a beginner with Frida. When I first started using Frida, I encountered an error. Android version: 11 frida-server version: 17.0.7 └─$ pip list | grep frida frida 17.0.7 ...
- 31
0 votes
0 answers
22 views
How to disable Frida Protect on apps? cocos2d
Has anyone managed to disable Frida's protection in mobile games? I'm not using an emulator, just a mobile phone. I need to get information at the beginning of the game as soon as it opens, because ...
- 1
0 votes
0 answers
18 views
Kernel object code coverage?
I research kernel object (ko file that loaded into kernel) in Android aarch64 . Is there any way to make code coverage to kernel object? That ko don't print any log to kmesg. Maybe is there any way to ...
- 1
0 votes
0 answers
67 views
Hooking decryption functions in IL2CPP Unity game: Classes/methods not found at runtime despite dump.cs output
I've been working on reverse engineering a Unity game (IL2CPP) to analyze its encryption methods, but I've hit several roadblocks and would appreciate guidance from more experienced reversers. What I'...
- 1
0 votes
0 answers
58 views
Calculate size of memory region for dump
As the title says, I need to know the size of a memory region so I can dump it's contents. This is my firts RE project so I don't know if what I'm trying to do makes sense, at least it does for me, ...
- 1
0 votes
0 answers
75 views
How do I find the decryption key of an android app using Frida?
I've been reverse-engineering an Android app for a set of Bluetooth headphones, and my goal is to find the keys to decrypt the firmware. I obtained the firmware by intercepting the traffic between the ...
- 1
1 vote
1 answer
178 views
Datamining Unity based game with Frida/IdaPro
2 years ago i was able to pull config files in terms of datamining from Android unity based game. I was using tools like il2cpp dumper, idaPro and Frida to make this. After some time, i wanted to make ...
- 11
1 vote
1 answer
580 views
Convert string to byte array in frida js script
I am having an issue with a JavaScript script to be executed in Frida. In this case, I am intercepting an input from a function where I receive an array of bytes. I need to convert this array to a ...
- 11
0 votes
1 answer
239 views
Frida, Frida-tools, Android version Problems
I have this environment.. android : 9 version python : 2.7.12 I am not sure which version of Frida and Frida-tools I need to use to be compatible. I'm currently using 12.8.5, but an ascii codec ...
- 1
2 votes
1 answer
224 views
How to hook RuntimeException to prevent crashes?
I tried to find out how RuntimeException works internally in cs.android.com so I can understand how to prevent crashes but didn't find anything useful and I have no clue how to analyze components-...
- 137
0 votes
1 answer
155 views
Searching for a byte pattern and then hooking all instances of it using frida on iOS
I'm using a frida script to scan for a certain byte pattern when I launch an iOS app. I can log each offset and confirm these are correct by also printing out the instructions at those locations and ...
- 187
0 votes
1 answer
951 views
Pass Play integrity api when app is repacked with Frida-gadget
I have decompiled an app that uses the Play integrity API. I attach the Frida-gadget and rebuild/resign the apk. After installing it on an unrooted phone (that passes the Play integrity API), the ...
- 31
3 votes
1 answer
415 views
How does Play integrity api assures Genuine app binary
I discovered that we can use the Play integrity api instead of safetynet now to assure the integrity off an app that is running. I am wondering if people have a way of bypassing the "Genuine app ...
- 31
1 vote
0 answers
188 views
Frida: how to hook a synthetic class
When reverse engineering an APK I came across a class that was marked synthetic. I have used JADX decompiler. The simplified result I got was: package com; public final class zz6 extends B implements ...
1 vote
1 answer
860 views
How to decode lua files and resource files that are protected from Frida and IDA64?
I am trying to decrypt Lua files from an Android game "The Sea Road: Fate Assembly" (APK download link). It uses Cocos2d-x, but it's encrypted, maybe with AES encryption. With Frida, the ...
- 53