6

脱壳工具frida-dexdump

 2 years ago
source link: http://blog.wen2go.site/2022/02/14/%E8%84%B1%E5%A3%B3%E5%B7%A5%E5%85%B7frida-dexdump/
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

葫芦娃大佬的脱壳工具firda-dexdump,一键式脱壳,方便快捷,号称三秒脱一壳!!!

git仓库:https://github.com/hluwa/FRIDA-DEXDump

文档介绍了三种使用方式

  1. 命令行直接脱壳

    前提:需要安装pythonfrida环境,并启动frida-server,参考frida教程

    pip3 install frida-dexdump

    安装成功之后,在手机端打开需要脱壳的app, 然后直接命令行执行frida-dexdump, 脱出来的dex文件会保存在当前目录

    frida-dexdump

    image-20220214151857014

  2. 使用python执行脚本

    • 从仓库克隆项目

      git clone https://github.com/hluwa/FRIDA-DEXDump
    • 打开克隆的项目,用python3执行main.py, 会在当前目录保存脱壳后的dex文件

      python3 main.py

      image-20220214152827243

  3. 使用objection 插件

    • 依然从git克隆项目

    • 然后将项目内的frida_dexdump移到~/.objection/plugin/文件下

      mv ~/Downloads/FRIDA-DEXDump/frida_dexdump  ~/.objection/plugins/dexdump
    • 启动objectionobjection使用参考文章

      objection -g com.xxx.xxx explore -P ~/.objection/plugins

      image-20220214153745007

    • 直接在objection交互界面,输入指令 plugin dexdump dump,就会把app进行脱壳,同样脱壳文件保存在当前目录

      plugin dexdump dump

      image-20220214154034927

frida-dexdump 可以对付一些简单的加固,对于抽取型的加固推荐寒冰大佬的fart脱壳王


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK