Frida Tutorial
Learn & practice AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Learn & practice GCP Hacking:
HackTricks Training GCP Red Team Expert (GRTE)
![](https://book.hacktricks.xyz/~gitbook/image?url=https%3A%2F%2F3850298721-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252Fs712eRnz5qRNRafWqq3N%252Fuploads%252Fgit-blob-ce4fbfd491ab398bd58639023728b416b0758bc1%252Fi3.png%3Falt%3Dmedia&width=768&dpr=4&quality=100&sign=9df8f797&sv=1)
Bug bounty tip: prijavite se za Intigriti, premium bug bounty platformu koju su kreirali hakeri, za hakere! Pridružite nam se na https://go.intigriti.com/hacktricks danas, i počnite da zarađujete nagrade do $100,000!
Installation
Install frida tools:
Preuzmite i instalirajte u android frida server (Preuzmite najnovije izdanje). Jedna linija za restartovanje adb u root modu, povezivanje na njega, upload frida-server, davanje exec dozvola i pokretanje u pozadini:
Proverite da li radi:
Tutorials
From: https://medium.com/infosec-adventures/introduction-to-frida-5a3f51595ca1 APK: https://github.com/t0thkr1s/frida-demo/releases Source Code: https://github.com/t0thkr1s/frida-demo
Follow the link to read it.
From: https://11x256.github.io/Frida-hooking-android-part-2/ (Delovi 2, 3 & 4) APKs and Source code: https://github.com/11x256/frida-android-examples
Follow the link to read it.
From: https://joshspicer.com/android-frida-1 APK: https://github.com/OWASP/owasp-mstg/blob/master/Crackmes/Android/Level_01/UnCrackable-Level1.apk
Follow the link to read it.
You can find more Awesome Frida scripts here: https://codeshare.frida.re/
Quick Examples
Calling Frida from command line
Osnovni Python Skript
Hooking functions without parameters
Hookujte funkciju a()
klase sg.vantagepoint.a.c
Hook java exit()
Hook MainActivity .onStart()
& .onCreate()
Hook android .onCreate()
Hooking functions with parameters and retrieving the value
Hooking funkcije za dekripciju. Ispisati ulaz, pozvati originalnu funkciju za dekripciju ulaza i konačno, ispisati obične podatke:
Hooking functions and calling them with our input
Hook-ujte funkciju koja prima string i pozovite je sa drugim stringom (iz ovde)
Dobijanje već kreiranog objekta klase
Ako želite da izvučete neki atribut kreiranog objekta, možete koristiti ovo.
U ovom primeru ćete videti kako da dobijete objekat klase my_activity i kako da pozovete funkciju .secret() koja će odštampati privatni atribut objekta:
Ostali Frida tutorijali
![](https://book.hacktricks.xyz/~gitbook/image?url=https%3A%2F%2F3850298721-files.gitbook.io%2F%7E%2Ffiles%2Fv0%2Fb%2Fgitbook-x-prod.appspot.com%2Fo%2Fspaces%252Fs712eRnz5qRNRafWqq3N%252Fuploads%252Fgit-blob-ce4fbfd491ab398bd58639023728b416b0758bc1%252Fi3.png%3Falt%3Dmedia&width=768&dpr=4&quality=100&sign=9df8f797&sv=1)
Savjet za bug bounty: prijavite se za Intigriti, premium bug bounty platformu koju su kreirali hakeri, za hakere! Pridružite nam se na https://go.intigriti.com/hacktricks danas, i počnite zarađivati nagrade do $100,000!
Učite i vežbajte AWS Hacking:HackTricks Training AWS Red Team Expert (ARTE)
Učite i vežbajte GCP Hacking:
HackTricks Training GCP Red Team Expert (GRTE)
Last updated