firda基础API及语法

# 语法

# api

# Java.perform

# Java.choose

Java.perform(function () {
    Java.choose("com.bytedance.mobsec.metasec.ml.MSManager", {
        onMatch: function (instance) {
            instance_ = instance;
            Java.registerInstance(instance_)
            return "stop"
        },
        onComplete: function () {
            console.log("Done")
        }
    })
})

1
2
3
4
5
6
7
8
9
10
11
12

# Java.registerInstance

# 开源库

# fridaUiTools

https://github.com/dqzg12300/fridaUiTools

# hooker

https://github.com/CreditTone/hooker

# r0capture

https://github.com/r0ysue/r0capture

# r0tracer

https://github.com/r0ysue/r0tracer

# AndroidSecurityStudy

# 精选文章
https://github.com/r0ysue/AndroidSecurityStudy

1
2

# 常用函数

# map2str

var Map = Java.use('java.util.HashMap');
var args_x = Java.cast(result, Map);
console.log("result", args_x)

1
2
3
4

# mapToString

function mapToString(hash_map) {
    var result = "";
    var keyset = hash_map.keySet();
    var it = keyset.iterator();
    while (it.hasNext()) {
        var keystr = it.next().toString();
        var valuestr = hash_map.get(keystr).toString();
        result += keystr + "=" + valuestr + "&";
    }
    return result.substring(0, result.length - 1);
}

1
2
3
4
5
6
7
8
9
10
11

# bin2str

function bytesToString(bytes) {
    var javaString = Java.use('java.lang.String');
    return javaString.$new(bytes);
}

function stringToBytes(str) {
    var javaString = Java.use('java.lang.String');
    var bytes = [];
    bytes = javaString.$new(str).getBytes();
    return bytes;
}

1
2
3
4
5
6
7
8
9
10
11

# 参考

Frida常用方法 (opens new window)

上次更新: 2023-06-27 16:49:11

← frida精选资源 frida调试android→