Hooking Native Android Methods with Frida

Рет қаралды 24,236

Күн бұрын

Пікірлер: 56

@lxma Жыл бұрын

awesome video, thanks for sharing! all of your videos have great production quality and are really informative. you deserve way more subscribers!

@universaltoons Жыл бұрын

Hello, Do you know if it is possible to inject a WebView (or any other type of GUI) inside the Frida script so the user of the modified version will be able to change values of hooked functions when the APK is built using Objection?

@sudoalex Жыл бұрын

Underrated video 🎉

@PixelHamster Жыл бұрын

Thanks these videos were incredibly helpful

@duythanhvu836 14 күн бұрын

thanks for the video. one trick I learned: in recent version of jadx-gui you can generate frida code by placing the cursor on a function/field of a class and hit F.

@憂鬱な冒険家 Жыл бұрын

cool vid! can this be used for windows java applications/games to hook interpreted/compiled methods as well from a c++ dll? (using frida C api)

@brunoaduarte 7 ай бұрын

Hi Laurie! Can you demonstrate when and how to hook the native libraries by the enumerated export addresses you showed at 8:25 ? Love your content! Thanks!

@ameera999 13 күн бұрын

This girl is genius

@trifalgarh Жыл бұрын

Which emulator are you using? Is it Android Studio AVD or is it something else?

@rokis2011 10 ай бұрын

thanks for explaining, good vids. Keep up

@itshoitshoify Жыл бұрын

Great content. Thank you! 👍🏻

@katonurlap Жыл бұрын

Love your vids :3

@Pixalynx Жыл бұрын

What are those LED lights you have in the background, the ones that change different hues of pink, I want to buy them haha

@Me.n_n Жыл бұрын

Great ❤,,more videos like this 😊

@pavankrishna-v7g 11 ай бұрын

Hi laurie, thanks for the video. enumerateExports is not working(Showing an empty array) in my version frida 16.1.10, but it is showing results in your version 16.0.19,, any reason laurie behind this. the same code is not working for me in same 16.0.19 as well.

@hollowgroundxX 7 ай бұрын

Your reverse engineering videos are very informative. Ty 🙏

@paulabrudan7896 Жыл бұрын

Couldnt you just hook the constructor?

@lauriewired Жыл бұрын

Sure thing! You could hook many different functions and get similar results. Just preference by situation :)

@brunoaduarte 7 ай бұрын

And what if a native library is loaded in "stealth mode", I mean, it doesn't show as an enumerated module. But I can see it loaded in memory, how can I attach to it?

@swaren180 3 ай бұрын

I am not an expert - I have an application on my phone, and there is a file containing settings for the application, and I import the file into the application..... I want to use hook to extract those settings... How do I do that? Give me a simple example😭

@user-ex9ip7zw9e 11 ай бұрын

could you help me analyzing an app,it is very difficult

@Sj-ze5wk Жыл бұрын

Can u do ida native so debugging? I always get sig errors

@tientoan8157 Жыл бұрын

Can you give me link of your wallpaper? It's very cool

@tadasturonis Жыл бұрын

I think you slightly misplaced the mayo

@0xPanda1 8 ай бұрын

Thank u very informative

@mahdivazhir1834 9 ай бұрын

Very good thanks

@Mbro-dq2do 4 ай бұрын

Laurie should be a model on top of this. Very talented

@erilycus 8 ай бұрын

Love❤

@WorldTimeLineChannel1 9 ай бұрын

Great video Laurie. You are a really bright, smart, beautiful girl. Great stuff.

@2024paradigmshift 3 ай бұрын

I think being tech savvy is so last year

@BedrijvigeBij 7 ай бұрын

Smart and beautiful

@2024paradigmshift 3 ай бұрын

At least it's not an IBM server written in Apache

@DebbieMarieClassics Жыл бұрын

i really like your hair in this video. That's the most technical thing i can say.

@Giurigi123 9 ай бұрын

i dont understand anything this girl is just looking goood

@MrAnhell Жыл бұрын

Brains and Beauty plus easy to understand.

@Vasant8300 2 ай бұрын

wtf is frida and what is use of this??

@moviesynopsis001 10 ай бұрын

More like Laurie Hired!

@2024paradigmshift 3 ай бұрын

And don't get me started on Chromebooks

@gabrielmottadev 4 ай бұрын

I really tried to pay attention, but the eyes... catchs my soul Im sorry 😔

@EugeneM Жыл бұрын

Such approach works for some scenarios with very simple Android apps. In serious software this hooking gives us nothing as all of the hidden and secured app logic is implemented in native obfuscated code. Android app loads a native lib, then this lib opens some socket and communicates with Android app via that socket using encrypted strings. And when you want to change how native code works the only thing you can do is trying to trace and debug native lib via IDA. And this approach is much more complicated without any guarantee of success.

@lauriewired Жыл бұрын

Are you saying that native hooking never helps for real apps? Hard disagree. It won't work for certain apps, but it's super useful in a lot of real-world situations. For example, if you are trying to get by some native anti-emulation.

@still_alive02 6 ай бұрын

static disassembler like ida wont give much btw, needs to take backtrace by frida, if app have antidebugger you have to hook system calls and trace libc, for example hook functions that looks in proc/self/status

@Shinika01 5 ай бұрын

of course for advanced malware the approach wouldn't be "that easy"... Don't forget that this video is merely educative to help people understand and progress.

@wrathofainz 6 ай бұрын

Nerdy girls exist: confirmed. Now how to meet them... I'll bookmark this video as part of my research to crack apks. I've been poking one unity game with the intention of removing vendor-lock. The game doesn't work unless installed from (or spoofed) the Google play store. It also has some sort of signature check apart from the usual one. Bother.