Skip to content

Latest commit

 

History

History
31 lines (25 loc) · 1.16 KB

README.md

File metadata and controls

31 lines (25 loc) · 1.16 KB
Raw

frida-non-root

Whait is it

Just automate the process of injecting the frida-gadgets library into APKs to use Frida with non-rooted Android Devices. (you can also do it manually following this precious guide https://koz.io/using-frida-on-android-without-root/).

Frida-gadgets are called at the startup of the app and will listen on port 27042. After patched and installed the APK, you can use frida -U Gadget (over USB) to instrument your application.

What it does:

  • Decode the APK and locate the Main Activity reading the AndroidManifest.xml
  • Add frida-gadgets-[arch].so into libs folder
  • Inject smali code into the Main Activity
  • Rebuild APK, Sign and zipalign.

Reqs:

  • apktool
  • zipalign
  • python
  • keytool & jarsign (to sign it)
  • *nix (Native commands like ['mv','rm'] are used, sorry for Windows users [just fire up a VM || docker || what else])

Install/Usage:

git clone https://github.com/kiks7/frida-non-root.git
chmod +x main.py
./main.py --help
./main.py -i <input APK> -o <output NAME>

EOL

I didn't continue the project, I wrote it to automate the process but I'm no longer mantaining it and I know it's not the best code in the earth.