4 ms·
This looks revolutionary! Two questions... 1. All the examples show attaching to an already running process. Is there a way to inject into a process from the
by pmorici 13y ago
This looks revolutionary! Two questions...
1. All the examples show attaching to an already running process. Is there a way to inject into a process from the moment it starts? I've got something I've been wanting to look at that is packed and the part I want to analyze happens right after unpacking but before UI comes up.
2. It looks like this would work even with software that uses some of the anti-debugging techniques like checking for an attached debugger etc... Is that right?
- oleavr 13y ago1. This is supported through frida.spawn() and frida.resume(). This is however only implemented in the Mac backend for now. 2. Yes this is indeed the case - and using Frida's Stalker (code tracer) you can even trace code without software/hardware breakpoints or any modifications to the original code.