https://github.com/lasting-yang/frida_dump

frida dump dex, frida dump so
https://github.com/lasting-yang/frida_dump

Last synced: 5 days ago
JSON representation

frida dump dex, frida dump so

• Host: GitHub
• URL: https://github.com/lasting-yang/frida_dump
• Owner: lasting-yang
• Created: 2019-06-06T09:37:27.000Z (over 5 years ago)
• Default Branch: master
• Last Pushed: 2021-07-05T16:16:04.000Z (over 3 years ago)
• Last Synced: 2024-12-01T00:04:36.949Z (12 days ago)
• Language: JavaScript
• Homepage:
• Size: 119 KB
• Stars: 1,545
• Watchers: 29
• Forks: 470
• Open Issues: 10
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - lasting-yang/frida_dump - frida dump dex, frida dump so (JavaScript)

README

        
# frida_dump

## 1. dump android module

### usage:

​	**python dump_so.py**

​	**python dump_so.py so_name**

```

➜  frida_dump git:(master) ✗ python dump_so.py libc.so              

{'name': 'libc.so', 'base': '0xf2282000', 'size': 819200, 'path': '/apex/com.android.runtime/lib/bionic/libc.so'}

android/SoFixer32: 1 file pushed. 5.9 MB/s (91848 bytes in 0.015s)

libc.so.dump.so: 1 file pushed. 21.4 MB/s (819200 bytes in 0.036s)

adb shell /data/local/tmp/SoFixer -m 0xf2282000 -s /data/local/tmp/libc.so.dump.so -o /data/local/tmp/libc.so.dump.so.fix.so

[main_loop:87]start to rebuild elf file

[Load:69]dynamic segment have been found in loadable segment, argument baseso will be ignored.

[RebuildPhdr:25]=============LoadDynamicSectionFromBaseSource==========RebuildPhdr=========================

[RebuildPhdr:37]=====================RebuildPhdr End======================

[ReadSoInfo:549]=======================ReadSoInfo=========================

[ReadSoInfo:696]soname 

[ReadSoInfo:699]Unused DT entry: type 0x6ffffffb arg 0x00000001

[ReadSoInfo:599] rel (DT_REL) found at 15f20

[ReadSoInfo:603] rel_size (DT_RELSZ) 1703

[ReadSoInfo:699]Unused DT entry: type 0x6ffffffa arg 0x000005f5

[ReadSoInfo:591] plt_rel (DT_JMPREL) found at 19458

[ReadSoInfo:595] plt_rel_count (DT_PLTRELSZ) 617

[ReadSoInfo:584]symbol table found at 32ac

[ReadSoInfo:580]string table found at 10e58

[ReadSoInfo:699]Unused DT entry: type 0x6ffffef5 arg 0x0000a98c

[ReadSoInfo:629] constructors (DT_INIT_ARRAY) found at b5954

[ReadSoInfo:633] constructors (DT_INIT_ARRAYSZ) 4

[ReadSoInfo:637] destructors (DT_FINI_ARRAY) found at b3000

[ReadSoInfo:641] destructors (DT_FINI_ARRAYSZ) 2

[ReadSoInfo:699]Unused DT entry: type 0x6ffffff0 arg 0x00009b4c

[ReadSoInfo:699]Unused DT entry: type 0x6ffffffc arg 0x0000a860

[ReadSoInfo:699]Unused DT entry: type 0x6ffffffd arg 0x00000009

[ReadSoInfo:699]Unused DT entry: type 0x6ffffffe arg 0x0000a95c

[ReadSoInfo:699]Unused DT entry: type 0x6fffffff arg 0x00000001

[ReadSoInfo:703]=======================ReadSoInfo End=========================

[RebuildShdr:42]=======================RebuildShdr=========================

[RebuildShdr:536]=====================RebuildShdr End======================

[RebuildRelocs:783]=======================RebuildRelocs=========================

[RebuildRelocs:809]=======================RebuildRelocs End=======================

[RebuildFin:709]=======================try to finish file rebuild =========================

[RebuildFin:733]=======================End=========================

[main:123]Done!!!

/data/local/tmp/libc.so.dump.so.fix.so: 1 file pulled. 29.0 MB/s (819882 bytes in 0.027s)

libc.so_0xf2282000_819200_fix.so

```

## 2. dump android dex

```Text

frida -U --no-pause -f packagename  -l dump_dex.js

     ____

    / _  |   Frida 12.4.8 - A world-class dynamic instrumentation toolkit

   | (_| |

    > _  |   Commands:

   /_/ |_|       help      -> Displays the help system

   . . . .       object?   -> Display information about 'object'

   . . . .       exit/quit -> Exit

   . . . .

   . . . .   More info at http://www.frida.re/docs/home/

Spawned `packagename`. Resuming main thread!

[Google Pixel XL::packagename]-> [dlopen:] libart.so

_ZN3art11ClassLinker11DefineClassEPNS_6ThreadEPKcmNS_6HandleINS_6mirror11ClassLoaderEEERKNS_7DexFileERKNS9_8ClassDefE 0x7ac6dc4f74

[DefineClass:] 0x7ac6dc4f74

[dump dex]: /data/data/packagename/files/7aab800000_8341c4.dex

```

### Thanks

[https://github.com/F8LEFT/SoFixer](https://github.com/F8LEFT/SoFixer)