Welcome to Jianqing's Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Fridump ======

  * https://github.com/Nightbringer21/fridump
  * https://www.frida.re/docs/android/
  * http://pentestcorner.com/introduction-to-fridump/

====== Install ======

  pip install frida
  pip install frida-tools
  git clone https://github.com/Nightbringer21/fridump.git    
  python fridump.py -h


===== Install android server =====
Download Android server
  * https://github.com/frida/frida/releases

Find the frida server android
  * https://github.com/frida/frida/releases/download/12.4.8/frida-server-12.4.8-android-x86_64.xz

==== Start android server ====
  adb root
  adb push frida-server-12.4.8-android-x86_64 /data/local/frida-server
  adb shell chmod +x /data/local/frida-server
  adb shell /data/local/frida-server
Or just one put it one line:
  adb root && adb push frida-server-12.4.8-android-x86_64 /data/local/frida-server && adb shell chmod +x /data/local/frida-server && adb shell /data/local/frida-server
==== Start dump ====
Then you can use the script to dump the App you want
  python fridump.py --max-size 2097152 -U -s com.xxxx.android

Then it will generate the "dump/", and you can check dump/strings.txt
  grep "string2find" dump/*

Also the memory dump files are binary, you can convert to hex by `xxd`
  xxd dump/0x12c00000_dump.data >xxd.hex
==== frida commands ====
  frida-ps -U
  frida-trace -U -i "open*" com.xxx.android
  
==== frida scripts ====
  * https://github.com/0xdea/frida-scripts

Update raptor_frida_android_trace.js, and then run

  frida -l raptor_frida_android_trace.js -U -f com.xxxx.android --no-pause