Unlocking secrets of proprietary software using Frida
summary
Frida hooks live functions inside a process and demonstrates concrete results: attach via Python/JS bindings, log and mutate an integer argument, replace sleep to speed up a loop, call native functions, and dump decrypted network payloads by intercepting SSL_read/SSL_write. The demo shows tracing file opens on macOS/iOS, a practical jailbreak detection bypass, and two tools built for exploration (a geo-IP "globe" visualizer and a Chrome thread tracer called CryptoShark). Cross‑platform support and a short feedback loop with hot-reload make rapid prototyping effective.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 5:05Demonstration
- 13:03args
- 16:21call function
- 17:26script exports
- 26:25iOS
- 31:00Demo
- 31:56Looking at registers
- 36:23Jailbreak detection
- 37:29Android API
- 37:49Android Java API
- 38:23Fault Injection
- 40:04Receiving
- 41:49Proof of concept
- 45:37QA
related talks
51mAnalysis of Real World Apps with Frida
25mFoundations of Dynamic Analysis and Hooking of Android Apps with Frida
44m Meticulously Modern Mobile Manipulations
28mBuilding a Security Module for Android
53mD1T1 - Brida: When Burp Suite meets Frida
01h 01mInstrumenting machine code over WebRTC
40mIntroduction into Reverse Engineering and iOS Security
29mInstrumenting binaries with Frida