nowsecure / r2frida

Radare2 and Frida better together.
MIT License
1.18k stars 121 forks source link

Add command to run syscalls directly #151

Closed trufae closed 8 months ago

trufae commented 5 years ago

Use r2 knowledge to resolve syscall numbers . Make it work like dxc but calling syscalls instead of functions.

We will ned to use the code generation apis to construct the snippet to call that and return from it

trufae commented 5 years ago

As an example https://github.com/nowsecure/r2frida/blob/master/plugins/inject-exit.js

trufae commented 4 years ago

On iOS and macOS we can just use dxc with the syscall symbol

[0x00000000]> \dxc syscall 0x2000001
DetachReason: FRIDA_SESSION_DETACH_REASON_PROCESS_TERMINATED
Target process terminated
[0x00000000]>
trufae commented 4 years ago

i have implemented dxs, but the list of syscalls is limited, it may use the ones defined in r2

trufae commented 4 years ago

Do we want to have \asl inside r2frida to enumaerte the target syscalls :?

trufae commented 8 months ago

closing because we have https://github.com/nowsecure/r2frida/issues/395