Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
frida-il2cpp-datacollector — Frida-based tool that ports Cheat Engine's MonoDataCollector to Android and iOS, enabling runtime Mono/IL2CPP data collection and memory inspection of mobile apps. | Kitploit
Tools/GitHubGitHub/gmh5225/frida-il2cpp-datacollector
Android SecurityDynamic Analysis (Sandboxing)iOS SecurityMemory ForensicsReverse EngineeringDebuggersMobile SecurityBinary Analysis

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
GitHub
gmh5225/frida-il2cpp-datacollector

frida-il2cpp-datacollector

Frida-based tool that ports Cheat Engine's MonoDataCollector to Android and iOS, enabling runtime Mono/IL2CPP data collection and memory inspection of mobile apps.

View Repository
13153 years agoNot yet reviewed

frida-il2cpp-datacollector

Porting ce's monodatacollector to android/ios.

Operation has been confirmed with CEVersion 7.4.2 or later.

Usage

initial setting

Install python library.

root@kitploit:~
pip install pywin32

Fixing autorun/monoscript.lua(Setup for CE to recognize Mono as valid)

1)comment out

root@kitploit:~
  --[[local injectResult, injectError=injectLibrary(getAutorunPath()..libfolder..pathsep..dllname, skipsymbols)
  if not injectResult then
    if injectError then
      print(translate("Failure injecting the MonoDatacollector library"..":"..injectError))
    else
      print(translate("Failure injecting the MonoDatacollector library. No error given"))
    end
    return 0
  end

  if (getOperatingSystem()==0) and (getAddressSafe("MDC_ServerPipe")==nil) then
    waitForExports()
    if getAddressSafe("MDC_ServerPipe")==nil then
      print("DLL Injection failed or invalid DLL version")
      return 0
    end
  end]]

2)usermono=true

root@kitploit:~
function mono_OpenProcessMT()
 -- print("mono_OpenProcessMT")
  --enumModules is faster than getAddress at OpenProcess time (No waiting for all symbols to be loaded first)
  local usesmono=true--false

basic setting

Start frida-server on the device and spawn the application.

root@kitploit:~
python main.py com.DefaultCompany.Sample

Start ceserver and select the application you started.

root@kitploit:~
adb forward tcp:52736 tcp:52736
su -c ./ceserver

Setting up Mono in CE

root@kitploit:~
Mono => Activate mono features
mono

Config

target

If you specify it, you don't need to specify the name of the target app in the argument.

targetOS

android:Android
ios:iOS

mode

spawn:spawn mode
attach:attach mode

frida_server_ip

To connect to frida-server over the network.
example:
./frida-server -l 0.0.0.0:12345
frida_server_ip:"192.168.11.3:12345"

Download Tool