All Projects → noobpk → Frida Ios Hook

noobpk / Frida Ios Hook

Licence: mit
A script that helps you trace classes, functions, and modify the return values of methods on iOS platform

Programming Languages

javascript
184084 projects - #8 most used programming language

Projects that are alternatives of or similar to Frida Ios Hook

Dexcalibur
[Official] Android reverse engineering tool focused on dynamic instrumentation automation. Powered by Frida. It disassembles dex, analyzes it statically, generates hooks, discovers reflected methods, stores intercepted data and does new things from it. Its aim is to be an all-in-one Android reverse engineering platform.
Stars: ✭ 512 (+239.07%)
Mutual labels:  frida, hooking
Frida Trace
Trace APIs declaratively through Frida.
Stars: ✭ 120 (-20.53%)
Mutual labels:  frida, trace
Frida Snippets
Hand-crafted Frida examples
Stars: ✭ 1,081 (+615.89%)
Mutual labels:  frida, hooking
Fridacontainer
FridaContainer 整合了网上流行的和自己编写的常用的 frida 脚本,为逆向工作提效之用。 frida 脚本模块化,Java & Jni Trace。
Stars: ✭ 190 (+25.83%)
Mutual labels:  frida, trace
Awesome Frida
Awesome Frida - A curated list of Frida resources http://www.frida.re/ (https://github.com/frida/frida)
Stars: ✭ 2,025 (+1241.06%)
Mutual labels:  frida, hooking
Frida Android Scripts
Some frida scripts
Stars: ✭ 124 (-17.88%)
Mutual labels:  frida
Khook
Linux Kernel hooking engine (x86)
Stars: ✭ 144 (-4.64%)
Mutual labels:  hooking
Opencensus Cpp
A stats collection and distributed tracing framework
Stars: ✭ 123 (-18.54%)
Mutual labels:  trace
Airspy
AirSpy - Frida-based tool for exploring and tracking the evolution of Apple's AirDrop protocol implementation on i/macOS, from the server's perspective. Released during BH USA 2019 Training https://www.nowsecure.com/event/advanced-frida-and-radare-a-hackers-delight/
Stars: ✭ 116 (-23.18%)
Mutual labels:  frida
Uftrace
Function graph tracer for C/C++/Rust
Stars: ✭ 1,986 (+1215.23%)
Mutual labels:  trace
Dbgchild
Debug Child Process Tool (auto attach)
Stars: ✭ 145 (-3.97%)
Mutual labels:  hooking
Fridaregstntv
利用 frida 获取 Jni RegisterNatives 动态注册的函数
Stars: ✭ 136 (-9.93%)
Mutual labels:  frida
Opencensus Csharp
Distributed tracing and stats collecting framework
Stars: ✭ 126 (-16.56%)
Mutual labels:  trace
Magisk Frida
🔐 Run frida-server on boot with Magisk, always up-to-date
Stars: ✭ 144 (-4.64%)
Mutual labels:  frida
Diff Gui
GUI for Frida -Scripts
Stars: ✭ 146 (-3.31%)
Mutual labels:  frida
Gamemaniptutorial
A tutorial for manipulating the rendering of a game (generally to increase its quality) if you only have a binary available
Stars: ✭ 119 (-21.19%)
Mutual labels:  hooking
Opencensus Erlang
A stats collection and distributed tracing framework
Stars: ✭ 131 (-13.25%)
Mutual labels:  trace
Tardis
Trace And Rewrite Delays In Syscalls: Hooking time-related Linux syscalls to warp a process's perspective of time, using ptrace.
Stars: ✭ 144 (-4.64%)
Mutual labels:  hooking
Mrpc
🐿 netty,zookeeper,spring,kyro rpc framework.
Stars: ✭ 128 (-15.23%)
Mutual labels:  trace
Frida All In One
《FRIDA操作手册》by @hluwa @r0ysue
Stars: ✭ 1,990 (+1217.88%)
Mutual labels:  frida
image

Frida iOS hook

A script that helps you trace classes, functions, and modify the return values of methods on iOS platform.

For Android platform: https://github.com/noobpk/frida-android-hook

Env OS Support

OS Supported Noted
MacOS main
Linux sub
Windows sub

Feature

Running with python3.x

Support both spawn & attach script to process.

[+] Options:

	-p(--package)			Identifier of application ex: com.apple.AppStore
	-n(--name) 			Name of application ex: AppStore
	-s(--script) 			Using script format script.js
	-c(--check-version) 		Check for the newest version
	-u(--upadte) 			Update to the newest version
	
	[*] Dump decrypt IPA:
	
    	-d, --dump         Dump decrypt application.ipa
    	-o OUTPUT_IPA, --output=OUTPUT_IPA
                           Specify name of the decrypted IPA
	[*] Information:

	--list-devices    List All Devices
	--list-apps       List The Installed apps
	--list-appinfo    List Info of Apps on Itunes
	--list-scripts    List All Scripts

	[*] Quick method:

	-m(--method)			Support commonly used methods
				- app-static(-n)
				- bypass-jb(-p)
				- bypass-ssl(-p)
				- i-url-req(-p)
				- i-crypto(-n)

Update

Version: 3.3a

	[+] Change:
	
		[-] Update example usage
		
		[-] Optimize core hook.py
		
		[-] Update README.md
		
		
	[+] New:
	
		[-] Add new new option dump decrypt application.ipa
	

Install & Usage

	1. Git clone https://github.com/noobpk/frida-ios-hook
	2. cd frida-ios-hook/
	3. python3 hook.py --help(-h)
	4. rebellion :))

If you run the script but it doesn't work, you can try the following: frida -U -f package -l script.js

Frida-Script

Updated some frida scripts to help you with the pentest ios app. Filter script using spawn(S) or attach(A)

N Spawn/Attach Script Name Script Description
1 S bypass-jailbreak-1.js Basic bypass jailbreak detection
2 S dump-ios-url-scheme.js Dump iOS url scheme when "openURL" is called
3 S dump-ui.js Dump the current on-screen User Interface structure
4 S+A find-all-classes.js Dump all classes used by the app
5 S+A find-all-methods-all-classes.js Dump all methods inside all classes
6 S+A find-specific-method.js Find a specific method in all classes
7 S+A hook-all-methods-of-specific-class.js Hook all the methods of a particular class
8 S+A hook-specific-method-of-class.js Hook a particular method of a specific class
9 S+A ios-app-static-analysis.js iOS app static analysis
10 S+A ios-list-apps.js iOS list information application
11 S+A ios-url-scheme-fuzzing.js iOS url scheme fuzzing
12 S pasteboard-monitoring.js Monitor usage of pasteboard. Useful to show lack of secure attribute on sensitive fields allowing data copying.
13 A read-nsuserdefaults.js Show contents fo NSUserDefaults
14 S+A show-all-methods-of-specific-class.js Dump all methods of a particular class
15 S+A show-argument-type-count-and-return-value-type.js Show argument type & count and type of return value for a function in a class
16 S+A show-instance-variables-for-specific-class.js Show all instance variables of a particular class
17 S+A show-modify-function-arguments.js Show and modify arguments of a function inside a class
18 S+A show-modify-method-return-value.js Show and modify return value of a particular method inside a class
19 A show_binarycookies.js Show contents of Cookies.binarycookies file
20 S bypass-ssl-ios13.js iOS13 bypass ssl pinning
21 S flutter_trace_function.js iOS flutter trace function
22 S+A ios-intercept-crypto.js Intercepts Crypto Operations
23 S+A ios-intercept-crypto-2.js Intercepts Crypto Operations 2

Disclaimer

Because I am not a developer, so my coding skills might not be the best. Therefore, if this tool have any issue or not working for you, create an issue and i will try to fix it. Any suggestions for new feature and discussions are welcome!

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].