Frida 常用命令

1. 下载相关配置

# python 3.8 情况 安装 frida

pip install --upgrade  frida frida-tools

# 下载 frida 服务端 (firda-server-${version}-android-x86.xz)
# https://github.com/frida/frida/releases

2. adb 操作3

# 上传fs服务端到手机目录下
D:\Program Files\Nox\bin\nox_adb.exe  push E:\py\frida\fs /data/local/tmp/ 
# 给予读写权限
 .\nox_adb.exe shell chmod +x  /data/local/tmp/fs
# 启动服务  “-l 0.0.0.0:38089”  可以指定端口
 .\nox_adb.exe shell nohup ./data/local/tmp/fs &
 
# 测试是否连上frida-server
 frida-ps -H 127.0.0.1:38089 | findstr net
# 查看pid
 adb shell ps -C fs
 ps -e | grep frida-server

3. 脱壳

需要修改frida端口号使用clone

git clone https://github.com/hluwa/FRIDA-DEXDump
cd FRIDA-DEXDump/frida-dexdump
python3 main.py -h

pip 直接安装

pip3 install frida-dexdump
frida-dexdump -h

查看 pid

frida-ps -U

查看运行中的程序信息

frida-ps -Ua

查看安装程序的包名

frida-ps -Uia

启动并加载脚本

frida -U -f cn.soulapp.android --no-pause -l E:\py\frida\FridaContainer\_fcagent.js