frida 环境搭建

更新：2021-03-31 
1
2
3
4
kaime@kaime-vm:~|⇒  adb version
Android Debug Bridge version 1.0.41
Version 30.0.3-1
Installed as /usr/bin/adb
1
2
3
4
5
6
7
8
9
# 默认只监听 127.0.0.1
# 端口转发 注意防火墙放行
# window 使用下面的命令，夜神模拟器第一个设备端口 62001 开始
netsh interface portproxy add v4tov4 62001 127.0.0.1 62001

# adb 连接远程模拟器
adb connect 192.168.18.250:62001
# 多个设备时进入shell
adb -s 192.168.18.250:62002 shell

服务端安装

frida-server版本要和上面安装的frida版本对应

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
## 查看版本

adb shell
# getprop ro.product.cpu.abi
x86_64

下载对应版本 
https://github.com/frida/frida/releases/download/16.4.1/frida-server-16.4.1-android-x86_64.xz


## 上传到手机
adb push frida-server-16.4.1-android-x86_64 /data/local/tmp/frida-server

## 赋予执行权限
chmod 777 frida-server

## 启动服务
./frida-server

## 开启端口转发 （客户端）
adb forward tcp:27042 tcp:27042
adb forward tcp:27043 tcp:27043

客户端安装

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

pip install frida==16.4.1
或
pip3 install frida==16.4.1

pip3 install -i http://pypi.douban.com/simple/ --trusted-host pypi.douban.com frida==16.4.1

pip3 install -i https://pypi.tuna.tsinghua.edu.cn/simple frida==16.4.1
pip3 uninstall frida

这个时候frida的大多命令还是不能用的,需要安装frida-tools
pip3 install -i https://pypi.tuna.tsinghua.edu.cn/simple frida-tools==12.4.4

## 查看版本
C:\Users\node>frida --version
16.4.1

命令

frida client 有6个工具

1
2
3
# 连接到设备上的chrome应用进程上
$ frida -U com.android.chrome

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
attach后名称以frida-ps -U命令中显示为准，不一定是包名，可能是应用名称。

#列出设备上正在运行的进程
frida-ps -U

# 可以查看包名
C:\Users\node>frida-ps -Ua
 PID  Name    Identifier
----  ------  -------------------------------
6798  泉通      com.uama.smartcommunityforjngxy
5972  短信      com.android.messaging
5430  设置      com.android.settings
5912  通讯录     com.android.contacts
5782  雷电游戏中心  com.android.flysilkworm


frida 连接的远程的设备，还需要做端口转发

1
2
3
# 默认只监听 127.0.0.1
# 端口转发 注意防火墙放行
netsh interface portproxy add v4tov4 62001 127.0.0.1 62001
1
2
3
4
5
6
7
8
9
10
var cipher = Java.use('javax.crypto.Cipher');
cipher.doFinal.overload("[B").implementation = function (x) {
    console.log("\n================ doFinal() ======================");
    var ret = cipher.doFinal.overload("[B").call(this, x);
    console.log("doFinal :: data to encrypt/decrypt - base64 :: " + bytesToBase64(x));
    console.log("doFinal :: data ro encrypt/decrypt - string :: " + bytesToString(x));

    console.log("doFinal :: data ro encrypt/decrypt - return value :: " + ret);
    return ret;
}

Frida与Frida-tools对应关系

https://github.com/frida/frida/releases

在对应版本Frida中查找Frida-tools版本即可，16后貌似没有了

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
frida-tools==1.0.0 ------ 12.0.0<=frida<13.0.0
frida-tools==1.1.0 ------ 12.0.0<=frida<13.0.0
frida-tools==1.2.0 ------ 12.1.0<=frida<13.0.0
frida-tools==1.2.1 ------ 12.1.0<=frida<13.0.0
frida-tools==1.2.2 ------ 12.1.0<=frida<13.0.0
frida-tools==1.2.3 ------ 12.1.0<=frida<13.0.0
frida-tools==1.3.0 ------ 12.3.0<=frida<13.0.0
frida-tools==1.3.1 ------ 12.3.0<=frida<13.0.0
frida-tools==1.3.2 ------ 12.4.0<=frida<13.0.0
frida-tools==2.0.0 ------ 12.5.3<=frida<13.0.0
frida-tools==2.0.1 ------ 12.5.9<=frida<13.0.0
frida-tools==2.0.2 ------ 12.5.9<=frida<13.0.0
frida-tools==2.1.0 ------ 12.5.9<=frida<13.0.0
frida-tools==2.1.1 ------ 12.5.9<=frida<13.0.0
frida-tools==2.2.0 ------ 12.5.9<=frida<13.0.0
frida-tools==3.0.0 ------ 12.6.17<=frida<13.0.0
frida-tools==3.0.1 ------ 12.6.17<=frida<13.0.0
frida-tools==4.0.0 ------ 12.6.21<=frida<13.0.0
frida-tools==4.0.1 ------ 12.6.21<=frida<13.0.0
frida-tools==4.0.2 ------ 12.6.21<=frida<13.0.0
frida-tools==4.1.0 ------ 12.6.21<=frida<13.0.0
frida-tools==5.0.0 ------ 12.6.21<=frida<13.0.0
frida-tools==5.0.1 ------ 12.7.3<=frida<13.0.0
frida-tools==5.1.0 ------ 12.7.3<=frida<13.0.0
frida-tools==5.2.0 ------ 12.7.3<=frida<13.0.0
frida-tools==5.3.0 ------ 12.7.3<=frida<13.0.0
frida-tools==5.4.0 ------ 12.7.3<=frida<13.0.0
frida-tools==6.0.0 ------ 12.8.5<=frida<13.0.0
frida-tools==6.0.1 ------ 12.8.5<=frida<13.0.0
frida-tools==7.0.0 ------ 12.8.12<=frida<13.0.0
frida-tools==7.0.1 ------ 12.8.12<=frida<13.0.0
frida-tools==7.0.2 ------ 12.8.12<=frida<13.0.0
frida-tools==7.1.0 ------ 12.8.12<=frida<13.0.0
frida-tools==7.2.0 ------ 12.8.12<=frida<13.0.0
frida-tools==7.2.1 ------ 12.8.12<=frida<13.0.0
frida-tools==7.2.2 ------ 12.8.12<=frida<13.0.0
frida-tools==8.0.0 ------ 12.10.4<=frida<13.0.0
frida-tools==8.0.1 ------ 12.10.4<=frida<13.0.0
frida-tools==8.1.0 ------ 12.10.4<=frida<13.0.0
frida-tools==8.1.1 ------ 12.10.4<=frida<13.0.0
frida-tools==8.1.2 ------ 12.10.4<=frida<13.0.0
frida-tools==8.1.3 ------ 12.10.4<=frida<13.0.0
frida-tools==8.2.0 ------ 12.10.4<=frida<13.0.0
frida-tools==9.0.0 ------ 14.0.0<=frida<15.0.0
frida-tools==9.0.1 ------ 14.0.0<=frida<15.0.0
frida-tools==9.1.0 ------ 14.2.0<=frida<15.0.0
frida-tools==9.2.0 ------ 14.2.9<=frida<15.0.0
frida-tools==9.2.1 ------ 14.2.9<=frida<15.0.0
frida-tools==9.2.2 ------ 14.2.9<=frida<15.0.0
frida-tools==9.2.3 ------ 14.2.9<=frida<15.0.0
frida-tools==9.2.4 ------ 14.2.9<=frida<15.0.0
frida-tools==9.2.5 ------ 14.2.9<=frida<15.0.0
frida-tools==10.0.0 ------ 15.0.0<=frida<16.0.0
frida-tools==10.1.0 ------ 15.0.0<=frida<16.0.0
frida-tools==10.1.1 ------ 15.0.0<=frida<16.0.0
frida-tools==10.2.0 ------ 15.0.0<=frida<16.0.0
frida-tools==10.2.1 ------ 15.0.0<=frida<16.0.0
frida-tools==10.2.2 ------ 15.0.0<=frida<16.0.0
frida-tools==10.3.0 ------ 15.0.0<=frida<16.0.0
frida-tools==10.4.0 ------ 15.0.0<=frida<16.0.0
frida-tools==10.4.1 ------ 15.0.0<=frida<16.0.0
frida-tools==10.5.0 ------ 15.0.0<=frida<16.0.0
frida-tools==10.5.1 ------ 15.0.0<=frida<16.0.0
frida-tools==10.5.2 ------ 15.0.0<=frida<16.0.0
frida-tools==10.5.3 ------ 15.0.0<=frida<16.0.0
frida-tools==10.5.4 ------ 15.0.0<=frida<16.0.0
frida-tools==10.6.0 ------ 15.0.0<=frida<16.0.0
frida-tools==10.6.1 ------ 15.0.0<=frida<16.0.0
frida-tools==10.6.2 ------ 15.0.0<=frida<16.0.0
frida-tools==10.7.0 ------ 15.0.0<=frida<16.0.0
frida-tools==10.8.0 ------ 15.0.0<=frida<16.0.0
frida-tools==11.0.0 ------ 15.2.0<=frida<16.0.0
frida-tools==12.0.0 ------ 16.0.0<=frida<17.0.0
frida-tools==12.0.1 ------ 16.0.0<=frida<17.0.0
frida-tools==12.0.2 ------ 16.0.0<=frida<17.0.0
frida-tools==12.0.3 ------ 16.0.0<=frida<17.0.0
frida-tools==12.0.4 ------ 16.0.0<=frida<17.0.0
frida-tools==12.1.0 ------ 16.0.0<=frida<17.0.0
frida-tools==12.1.1 ------ 16.0.9<=frida<17.0.0
frida-tools==12.1.2 ------ 16.0.9<=frida<17.0.0
frida-tools==12.1.3 ------ 16.0.9<=frida<17.0.0
frida-tools==12.2.0 ------ 16.0.9<=frida<17.0.0
frida-tools==12.2.1 ------ 16.0.9<=frida<17.0.0
frida-tools==12.3.0 ------ 16.0.9<=frida<17.0.0

参考

https://github.com/frida/frida/releases

赏

谢谢你请我吃糖果

支付宝
微信
|阅读量()

扫一扫，分享到微信

微信分享二维码
本站总访问量次 |

tag:

    缺失模块。
    1、请确保node版本大于6.2
    2、在博客根目录（注意不是yilia根目录）执行以下命令：
    npm i hexo-generator-json-content --save

    3、在根目录_config.yml里添加配置： 

      jsonContent:
    meta: false
    pages: false
    posts:
      title: true
      date: true
      path: true
      text: false
      raw: false
      content: false
      slug: false
      updated: false
      comments: false
      link: false
      permalink: false
      excerpt: false
      categories: false
      tags: true

Java码农