https://github.com/Areizen/JNI-Frida-Hook

Script to quickly hook natives call to JNI in Android
https://github.com/Areizen/JNI-Frida-Hook

Last synced: 14 days ago
JSON representation

Script to quickly hook natives call to JNI in Android

• Host: GitHub
• URL: https://github.com/Areizen/JNI-Frida-Hook
• Owner: Areizen
• Created: 2019-02-26T06:33:45.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2023-08-03T11:44:13.000Z (over 1 year ago)
• Last Synced: 2024-08-01T17:35:39.176Z (3 months ago)
• Language: JavaScript
• Size: 9.77 KB
• Stars: 511
• Watchers: 18
• Forks: 114
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
## JNI Frida Hook

Here is a quick script to easily have an overview of JNI called by a function.

It also provide a way to easily hook them

## Requirements

```

pip install frida-tools --user

npm install frida-compile -g

npm install frida-compile

```

## Usage

Fill library name and function name in `agent.js`

```javascript

library_name = "" // ex: libsqlite.so

function_name = "" // ex: JNI_OnLoad

```

Add the functions you want to hook or simply hook all in the `hook_jni` function

```javascript

 /*

    Here you can choose which function to hook

    Either you hook all to have an overview of the function called

*/

    

jni.hook_all(jnienv_addr)

/*

Either you hook the one you want by precising what to do with it

*/

Interceptor.attach(jni.getJNIFunctionAdress(jnienv_addr,"FindClass"),{

    onEnter: function(args){

        console.log("env->FindClass(\"" + Memory.readCString(args[1]) + "\")")

    }

})

```

Once you've filled all the previous informations, compile it with :

```

frida-compile agent.js -o _agent.js

```

And launch it :

```

frida -U -l _agent.js --no-pause -f 

```

# Example of usage

[https://www.aperikube.fr/docs/aperictf_2019/my_backdoored_gallery/](https://www.aperikube.fr/docs/aperictf_2019/my_backdoored_gallery/)

# Contact

Feel free to contact me on Twitter : [Areizen](https://twitter.com/Areizen_)

or by email at :