hluwa / frida-dexdump

A frida tool to dump dex in memory to support security engineers analyzing malware.
GNU General Public License v3.0
3.98k stars 899 forks source link

Dynamically loaded classes #73

Open xlokk73 opened 1 year ago

xlokk73 commented 1 year ago

Is it possible to dump dynamically loaded classes with this tool? I tested this by dumping memory from an app that dynamically loads a class but it did not work. The way I tested it was by using a static string from the loaded class and searching for the string in the dumped classes.dex using grep. The string was not found.

Any help, please?