python环境
➜ ~ python --version
Python 3.9.13
➜ ~ pip --version
pip 22.2.2 from D:\Programs\Python\Python39\lib\site-packages\pip (python 3.9)
安装frida
pip install frida-tools
安装wheel(非必须)
pip install wheel
检查是否安装成功
➜ ~ frida-ps.exe
PID Name
----- ---------------------------
12300 AcAppDaemon.exe
19548 ApplicationFrameHost.exe
4660 BingSvc.exe
7760 BingWallpaperApp.exe
21704 Cortana.exe
3420 FileCoAuth.exe
10316 HipsTray.exe
9736 HwMdcCenter.exe
19816 IDBWM.exe
21544 IGCC.exe
19176 IGCCTray.exe
手机端配置
查看手机架构
➜ ~ adb shell getprop ro.product.cpu.abilist
arm64-v8a,armeabi-v7a,armeabi
查看frida版本
➜ ~ frida --version
15.2.2
手机端server下载地址
https://github.com/frida/frida/releases
找到对应的版本的server下载
解压,重命名并推送到手机
➜ Downloads mv .\frida-server-15.2.2-android-arm64 frida-server
➜ Downloads adb push .\frida-server /data/local/tmp/
.\frida-server: 1 file pushed, 0 skipped. 77.5 MB/s (47188552 bytes in 0.581s)
赋予权限并启动(需要root权限)
➜ Downloads adb shell
gauguinpro:/ $ su
gauguinpro:/ # cd /data/local/tmp/
gauguinpro:/data/local/tmp # ls
frida-server
gauguinpro:/data/local/tmp # chmod +x frida-server
gauguinpro:/data/local/tmp # ./frida-server &
[1] 5358
另起一个终端
➜ ~ frida-ps.exe -U
PID Name
---- ------------------------------------------------------------------
3656 .dataservices
2678 .qtidataservices
3048 .qtidataservices
1277 ATFWD-daemon
3726 AudioFX
4585 Clash for Android
4834 Magisk
3755 MissLee
2684 SIM 卡工具包
3912 Telegram
1135 adb_root
5234 adbd
1483 adpl
1157 adsprpcd
1158 adsprpcd
2738 android.ext.services
597 android.hardware.atrace@1.0-service
821 android.hardware.audio.service
1313 android.hardware.biometrics.fingerprint@2.1-service.xiaomi_gauguin
825 android.hardware.bluetooth@1.0-service-qti
826 android.hardware.camera.provider@2.4-service_64
基础环境配置结束