Frida Android hook

📍 A tool that helps you can easy using frida. It support script for trace classes, functions, and modify the return values of methods on iOS platform.

👉 For iOS platform: frida-ios-hook

Env OS Support

OS	Supported	Noted
Darwin	✅	main
Linux	✅	sub
Windows	✅	sub

Compatible with

Android Api	Frida	Supported
8.0 - Api 26	14.2.13	✅
8.0 - Api 26	15.0.18	✅
13.0 - Api 33	16.4.9	✅

Feature

Running with python3.x

Support both spawn & attach script to process.

[+] Options:

	-p(--package)		Identifier of application ex: com.android.calendar
	-n(--name) 		Name of application ex: Calendar
	-s(--script) 		Using script format script.js
	-c(--check-version) 	Check for the newest version
	-u(--update) 		Update to the newest version
	
	[*] Dump memory application:
	
    	--dump-memory         Dump memory of application

	[*] Information:

	--fs-install	    Install frida server
	--fs-start          Start frida server
	--fs-stop           Stop frida server
	--list-devices      List All Devices
	--list-apps         List the installed apps
	--list-scripts      List All Scripts
	--logcat            Show system log of device
	--shell             Get the shell of connect device
	--proxy             Config global proxy ::3128 and reverse tcp 3128:8080

	[*] Quick method:

	-m(--method)    Support commonly used methods
				bypass-root(-p)
				bypass-ssl(-p)
				i-nw-req(-p)
				i-crypto(-p)

ChangeLog

Version: 1.4

	[+] Add:
	
		[-] Add new frida scrips
				
		[-] Add option `--proxy` for config global proxy on device
		
		
	[+] Change:
		
		[-] Update readme, changelog
		
		[-] Update frida-script
		
		[-] Update hook.py
	
	[+] Fix
		
		[-] Fix bug

See Full ChangeLog

Install

	[+] Latest version
	
		https://github.com/noobpk/frida-android-hook/releases
		
	[+] Develop version
	
		git clone -b dev https://github.com/noobpk/frida-android-hook.git

Build

2. cd frida-android-hook/
3. pip3 install -r requirements.txt
4. python3 setup.py
4. cd frida-android-hook

Usage For Windows:

5.1 Start Frida-server: `python3 androidhook.py --fs-start`
5.2 python3 androidhook.py --help(-h)
5.3 rebellion :))

Usage For Darwin / Linux

6.1 Start Frida-server: `./androidhook --fs-start`
6.2 ./androidhook --help(-h)
6.3 rebellion :))

See Full Usage as Wiki

If you run the script but it doesn't work, you can try the following: frida -U -f package -l script.js

📺 Demo Feature

N	Title	Link
1
2
3

Frida Scripts

N	Spawn/Attach	Script Name	Script Description	Script Version
1	S+A	android-intercepts-crypto.js	Android Intercepts Crypto Operations	1.0
2	S+A	android-logcat.js	Android logcat capture	1.0
3	S+A	call-method-of-class.js	Call method of class	1.0
4	S+A	dupDex.js	dupDex	1.0
5	S+A	fingerprint-bypass-via-exception-handling.js	Fingerprint bypass via Exception Handling.	1.0
6	S+A	fingerprint-bypass.js	Fingerprint bypass	1.0
7	S+A	hook-method-of-class.js	Hook method of class	1.0
8	S	raptor_frida_android_bypass.js	Raptor frida android bypass	1.0
9	S	raptor_frida_android_debug.js	Raptor frida android debug	1.0
10	S	raptor_frida_android_enum.js	Raptor frida android enum	1.0
11	S	raptor_frida_android_findClass1.js	Raptor frida android findclass 1	1.0
12	S	raptor_frida_android_findClass2.js	Raptor frida android findclass 2	1.0
13	S	raptor_frida_android_lowlevel.js	Raptor frida android low level	1.0
14	S	raptor_frida_android_trace.js	Raptor frida android trace	1.0
15	S+A	show-all-classes-methods.js	Show all class name and method	1.0
16	S+A	show-all-classes.js	Show all class name	1.0
17	S+A	show-module-exported-functions.js	Show module exported function	1.0
18	S+A	show-modules-exports.js	Show modules exports	1.0
19	S+A	show-specific-class-methods.js	Show specific class and method	1.0

Disclaimer

Because I am not a developer, so my coding skills might not be the best. Therefore, if this tool have any issue or not working for you, create an issue and i will try to fix it. Any suggestions for new feature and discussions are welcome!