XposedFridaBridge

Introduction

A frida script implement XposedBridge & load xposed modules, without installing xposed framwork.

Use Xposed modules through Frida without installing the Xposed Framework.

Usage

Preparation

1. Push XposedBridge.jar into the device
2. Install modules or push module APKs into the device
3. Configure the modules list

adb push XposedBridge.jar /data/local/tmp/XposedBridge.jar
adb install module.apk
adb shell 'echo "/data/app/demo.xposedmodule-1/base.apk" > /data/local/tmp/conf/modules.list' 

/data/local/tmp/conf/modules.list is the same as /conf/modules.list under the XposedInstaller sandbox. Its format is one APK path per line. The module APK may or may not be installed. Paths pointing to APKs in /data/local/tmp are also acceptable.

Load Modules

frida -U [target app process] -l XposedFridaBridge.js

Known Issues

Tested on Nexus5 device, plugins like JustTrustMe can be used, but some emulators may have compatibility issues, such as Nox Player, where checkServerTrusted in com.android.org.conscrypt.TrustManagerImpl cannot be hooked by Frida, and will crash after hooking.