Module: Frida

[schrnz]

Frida is a well-known dynamic hooking framework that also supports Android. There are two possibilities: Either run the frida server on your device so that you can attach to all processes (including apps) or add the frida gadget library into a particular app/binary/process so that only this one is exposed.
Since the latter either required repackaging apps, which breaks the signature, or adding this in a system-centric manner, which would require OS changes, ARTist might provide an alternative deployment path. By making sure the gadget library is loaded in a target process, we can selectively expose apps without requiring the big server (which people often try to detect as part of their anti-debugging strategy) and by avoiding the downsides of the gadget approach.

Affected Projects

• new project: frida-module