search

suifei / fridare

强大的 Frida 重打包工具，用于 iOS 和 Android。轻松修改 Frida 特征，增强隐蔽性，绕过检测。简化逆向工程和安全测试。Powerful Frida repackaging tool for iOS and Android. Easily modify Frida servers to enhance stealth and bypass detection. Streamlines reverse engineering and security testing.
MIT License
256 stars 60 forks source link

android patch frida-server 成功后无法在android机上运行 #10

Closed seanchan closed 1 month ago

seanchan commented 1 month ago

按文档./fridare.sh patch -m frida-server -latest -os android -arch arm64 -o ./patched进行魔改。 生成对应的魔改fridaserver后台push到安卓机上，运行直接抛出一堆二进制信息 使用命令file查看文件格式，提示： $ file frida-server_xxxxx frida-server_xxxxx: Mach-O 64-bit x86-64 executable

并非安卓arm64

seanchan commented 1 month ago

应该是-os -arch没生效导致的。

seanchan commented 1 month ago

./fridare.sh patch -m frida-server -latest -os android -arch arm64 -o ./patched （直接下载了所有os，arch）后--->这一步我看也不应该？我多次运行，本地应该是有缓存的，脚本里的patch_frida_module 中存在重复下载 下载完后，有如下日志输出：

[SUCC] 解压 frida-server-16.5.5-windows-x86_64.exe.xz 完成 [SUCC] 所有下载和解压操作完成 [INFO] 正在修补文件: ./patched/16.5.5/frida-server/macos/64/frida-server-16.5.5-macos-x86_64 [INFO] 使用指定的 Frida 魔改名: mtsvr Detected file format: 1 MachO: CPU: x86_64, Byte Order: Little Endian, File Type: Exec Replaced 17 occurrences Successfully patched cstring section Replaced 9 occurrences Successfully patched const section Patch success Password: [SUCC] 模块修补完成: ./patched/frida-server_mtsvr mt:fridare $ file patched/frida-server_mtsvr patched/frida-server_mtsvr: Mach-O 64-bit executable x86_64