& also output examples

Sommario

Nativo

Carica modulo C/C++
Watchpoint una tantum
Attività socket
Intercetta open
Esegui comando shell
Elenca moduli
Registra query SQLite
Registra argomenti metodo
Intercetta modulo intero
Scarica segmenti di memoria
Scansione memoria
Stalker
Demangler Cpp
Hook anticipato

Android

Transazioni Binder
Ottieni proprietà di sistema
Rivela simboli nativi registrati manualmente
Enumera classi caricate
Descrizione classe
Disattiva WiFi
Imposta proxy
Ottieni IMEI
Hook InputStream IO
Crea Toast Android
Attendi caricamento modulo specifico
URL Webview
Stampa tutte le stringhe runtime e stacktrace
Stampa aggiornamenti SharedPreferences
Confronto stringhe
Hook JNI per indirizzo
Hook costruttore
Hook riflessione Java
Traccia classe
Hook di Unity3d
Ottieni Android ID
Cambia posizione
Bypassa FLAG_SECURE
Aggiornamento SharedPreferences
Hook di tutti i sovraccarichi di metodo
Registra ricevitore broadcast
Aumenta conteggio passi
Elenca classi che implementano interfaccia con classloader
File system access hook $ frida --codeshare FrenchYeti/android-file-system-access-hook -f com.example.app --no-pause
Come rimuovere/disabilitare gli hook Java? Assegna null alla proprietà implementation.

iOS

Log OS
Finestra di avviso iOS
Accesso file
Osserva classe
Trova UUID applicazione
Estrai cookie
Descrivi membri classe
Gerarchia classi
Hook riflessione
Proprietà dispositivo
Scatta screenshot
Registra comandi SSH

Windows

HAHAHA. No.

Snippet Sublime

{
    "scope": "source.js",
    "completions": [
	{"trigger": "fridainterceptor", "contents": "Interceptor.attach(\n    ptr,\n    {\n        onEnter:function(args) {\n\n        },\n        onLeave: function(retval) {\n\n        }\n    }\n)"},
	{"trigger": "fridaperform", "contents": "function main(){\n    console.log('main()');\n}\n\nconsole.log('script loaded');\nJava.perform(main);"},
	{"trigger": "fridause", "contents": "var kls = Java.use('kls');"},
	{"trigger": "fridahex", "contents": "hexdump(\n    ptr,\n    {\n         offset: 0,\n         length: ptr_size\n     }\n);" },
	{"trigger": "fridabacktrace", "contents": "console.log('called from:\\n' +\n        Thread.backtrace(this.context, Backtracer.ACCURATE)\n        .map(DebugSymbol.fromAddress).join('\\n') + '\\n'\n);"},
	{"trigger": "fridamods", "contents": "var mods = Process.enumerateModules().filter(function(mod){\n    return mod.name.includes(\"<name>\");\n});"},
	{"trigger": "fridaexport", "contents": "Module.findExportByName(null, \"<export_name>\");"},
	{"trigger": "fridabase", "contents": "Module.findBaseAddress(name);"},
	{"trigger": "fridaoverload", "contents": "kls.method_name.overload().implementation=function(){}"}
    ]
}

Snippet Vim

Per elencare le abbreviazioni :ab

Espandi scrivendo key e <Space>

Aggiungi a ~/.vimrc

``` ab fridaintercept Interceptor.attach(ptr, {onEnter: function(args) {},onLeave: function(retval) {}}) ab fridabacktrace console.warn(Thread.backtrace(this.context, Backtracer.ACCURATE).map(DebugSymbol.fromAddress).join('\n'));F(3; ab fridadescribe console.log(Object.getOwnPropertyNames(Java.use('$').__proto__).join('\n\t'))F$ ```

JEB

Generatore di hook per metodi Java tramite scorciatoia da tastiera

curl -o ~/$JEB$/scripts/FridaCodeGenerator.py https://raw.githubusercontent.com/iddoeldor/frida-snippets/master/scripts/FridaCodeGenerator.py
Posiziona il cursore sulla firma del metodo Java
Premi Ctrl+Shift+Z
Il codice viene copiato negli appunti di sistema (tramite xclip)

Ottieni chiavi SSL```js

var keylog_callback = new NativeCallback((ssl, line) => { send(Memory.readCString(line)); }, 'void', ['pointer', 'pointer']);

if (ObjC.available) { var CALLBACK_OFFSET = 0x2A8 if (Memory.readDouble(Module.findExportByName('CoreFoundation', 'kCFCoreFoundationVersionNumber')) >= 1751.108) { CALLBACK_OFFSET = 0x2B8 } Interceptor.attach(Module.findExportByName('libboringssl.dylib', 'SSL_CTX_set_info_callback'), { onEnter(args) { ptr(args[0]).add(CALLBACK_OFFSET).writePointer(keylog_callback) } }) } else if (Java.available) { var set_keylog_callback = new NativeFunction(Module.findExportByName('libssl.so', 'SSL_CTX_set_keylog_callback'), 'void', ['pointer', 'pointer']); Interceptor.attach(Module.findExportByName('libssl.so', 'SSL_CTX_new'), { onLeave(retval) { set_keylog_callback(retval, keylog_callback) } }) }

<br>[⬆ Torna su](#table-of-contents)
	

#### Carica modulo CPP```cpp
#include <iostream>
#include <string>

extern "C" {
  void* create_stdstr(char *data, int size) {
    std::string* s = new std::string();
    (*s).assign(data, size);		  
    return s;
  }
}

". That's odd. The assistant's response is " thinkingWe are asked...". Wait, the user's message ends with "INPUT:" and then blank. There's no chunk to translate. Possibly a mistake. As an AI, I need to handle this. Perhaps I should request the chunk? But the instruction says "return ONLY the translated text". I cannot add commentary. Since there is no input, I cannot produce a translation. The optimal response might be to indicate that no input was provided. But the assistant in the given history has produced a long thinking process. That suggests the real user message ended with "INPUT:" and then the assistant started to generate a thought. However, the assistant's final response should be just the translated Markdown. But there's nothing to translate.

frida-snippets

Più Popolari

Sommario

Ottieni chiavi SSL```js