https://github.com/enovella/fridroid-unpacker

Defeat Java packers via Frida instrumentation
https://github.com/enovella/fridroid-unpacker

Last synced: about 1 month ago
JSON representation

Defeat Java packers via Frida instrumentation

• Host: GitHub
• URL: https://github.com/enovella/fridroid-unpacker
• Owner: enovella
• Created: 2020-09-14T13:47:19.000Z (about 4 years ago)
• Default Branch: master
• Last Pushed: 2022-10-31T19:01:49.000Z (almost 2 years ago)
• Last Synced: 2024-04-30T13:35:06.180Z (5 months ago)
• Language: JavaScript
• Size: 10.7 KB
• Stars: 187
• Watchers: 11
• Forks: 37
• Open Issues: 4
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - enovella/fridroid-unpacker - Defeat Java packers via Frida instrumentation (JavaScript)

README

        
# fridroid-unpacker

Defeat Java packers via Frida instrumentation

Description

-----------

Use the method `OpenMemory` or `OpenCommon` (after Android N) in `libart.so`/`libdexfile.so` to get the address of the dex in memory, calculate the size of the dex file, and dump the dex from memory.

Usage

-----

```sh

$ frida -U -f com.package.target -l dexDump.js --no-pause

```

References

----------

- https://www.frida.re/docs/home/

- frida-unpack (dstmath) https://github.com/dstmath/frida-unpack

- Frida-Android-unpack (xiaokanghub) https://github.com/xiaokanghub/Frida-Android-unpack

Supported OS: Android 4.4 - Android 11

Tested Packers

---------------

- Jiagu

- DexProtector

- DexGuard

- Yidun

- Tencent Legu 

- Mobile Tencent Protect