Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
oleavr
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
10 ms
·
61.
▲
by
oleavr
13y ago
1. This is supported through frida.spawn() and frida.resume(). This is however only implemented in the Mac backend for now. 2. Yes this is indeed the case - and using Frida's Stalker (code tracer) you can even trace code without softwa
62.
▲
by
oleavr
13y ago
That's spot on. Regarding license protection logic that is also true, but maybe this could help with further nails in the DRM coffin — software running on the end-user's hardware is never safe against tampering. :)
63.
▲
by
oleavr
13y ago
This is unfortunate but no secret (have a look at frida-website's README), it was the best I could do with my non-existant design skills. :/ This is one area where I hope someone with such skills could help us out (it's menti
64.
▲
by
oleavr
13y ago
Ok, I'll try to make it happen as soon as possible.
65.
▲
by
oleavr
13y ago
Ahh yes, exposing registers is planned and very trivial to implement, as it's available at the C code level, just needs to be exposed to the script runtime (V8). Future versions may also allow specifying an ABI, so args[0] maps to ecx
66.
▲
by
oleavr
13y ago
Oops, that's a silly bug in frida-gum (sorry!), it should strip off the "L" suffix when calling toString() on a NativePointer object. As a band-aid you can either try with a 32-bit target process or locally hack it in your in
67.
▲
by
oleavr
13y ago
frida-gum is LGPL and the rest of the code is GPLv3+. This is subject to change - if it's an issue for someone I'm all for changing to a more liberal license (Frida has very few authors so relicensing is trivial).
68.
▲
by
oleavr
13y ago
No worries, the Frida website could definitely have explained things better! Regarding the number of function arguments it doesn't know that, so that's something you need to know at the higher level. It is however safe to access a
69.
▲
by
oleavr
13y ago
Awesome! I'll try to get a tutorial on that written tomorrow evening. By the way, feel free to drop by #frida on FreeNode if you have any questions or would like to bounce ideas. :)
70.
▲
by
oleavr
13y ago
It sounds like Frida and Cycript have similar goals - REPL and other cool applications are planned and meant to be built on top of the core that is currently exposed to Python, .NET and a browser plugin (I built a cheesy WebGL network sniff
71.
▲
by
oleavr
13y ago
Documentation is coming soon, I'm sorry the website was a bit rushed. If you want a head start just add http://ospy.org/ as a Source in Cydia and install the Frida package on your jailbroken device. Then from Python us
72.
▲
by
oleavr
13y ago
Frida's core is written in C and injects Google's V8 engine into the target processes, where your JS gets executed with full access to memory, hooking functions and even calling native functions inside the process. There's a
73.
▲
by
oleavr
13y ago
You're definitely right about that. I'm afraid the website was rushed due to lack of time. :/ I'll try to clarify here with some use-cases: - There's this new hot app everybody's so excited about, but it's
74.
▲
Inject JavaScript to explore native apps on Windows, Mac, Linux and iOS
(frida.re)
178 points
by
oleavr
13y ago
|
50 comments
75.
▲
Frida.github.io: scriptable reverse engineering for Windows, Mac, Linux and iOS
(github.com)
4 points
by
oleavr
13y ago
|
0 comments
76.
▲
by
oleavr
13y ago
Here's an in-depth example for the curious: https://github.com/frida/frida-python/wiki/Tutorial:-Inspect...
77.
▲
Frida: cross-platform process inspection and manipulation with JavaScript
(frida.github.io)
3 points
by
oleavr
13y ago
|
1 comments