Frida on Security Notes

Frida on Security Notes https://blog.omiilgo.com/tags/frida/ Recent content in Frida on Security Notes Hugo en-us Mon, 04 Sep 2023 11:00:00 +0800 Frida: Java Wrapper vs JNI Interceptor on the Same Call https://blog.omiilgo.com/posts/android-frida-jni-trace-lab/ Mon, 04 Sep 2023 11:00:00 +0800 https://blog.omiilgo.com/posts/android-frida-jni-trace-lab/ Lab APK com.lab.jni.trace. Hook NativeBridge.nInit in Java.perform and the Java_* export with Interceptor.attach, then compare argument length and prefix. Console output redacted. Finding Hidden JNI Methods: RegisterNatives in a Lab APK https://blog.omiilgo.com/posts/android-jni-registernatives-lab/ Wed, 09 Jun 2021 14:10:00 +0800 https://blog.omiilgo.com/posts/android-jni-registernatives-lab/ APK where nm -D shows no Java_* exports. Walk JNI_OnLoad, recover the JNINativeMethod table, map Java names to ARM64 IMPs, Frida-trace the native with arguments redacted.