https://github.com/ralxyz/frida-playground

Frida usage demo
https://github.com/ralxyz/frida-playground

frida

Last synced: 21 days ago
JSON representation

Frida usage demo

• Host: GitHub
• URL: https://github.com/ralxyz/frida-playground
• Owner: RalXYZ
• License: mit
• Created: 2024-05-25T15:51:35.000Z (8 months ago)
• Default Branch: main
• Last Pushed: 2024-07-17T06:05:14.000Z (6 months ago)
• Last Synced: 2024-11-19T06:29:02.484Z (about 2 months ago)
• Topics: frida
• Language: C
• Homepage: https://frida.re/
• Size: 23.4 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Frida Playground

## Frida `onEnter args`

### int

On my amd64 device, if a function have two arguments, both of them are `uint32_t`:  

```c

foo_int(8, 1);

```

then the output is:

```

[*] args[0]=0x8

[*] args[1]=0x1

```

### struct

On my amd64 device, each `args[0] args[1] args[2]` is 8 byte long.  

In this case, if one of the arguments is the following struct:  

```c

struct demo_struct {

    uint32_t u32_a;

    uint32_t u32_b;

    uint64_t u64_a;

};

(struct demo_struct){.u32_a = 0x2e, .u32_b = 0xcc, .u64_a = 0x3edc}

```

then the output is:

```

[*] args[0]=0xcc0000002e

[*] args[1]=0x3edc

```