README.md

FriList

Collection of useful FRIDA Mobile Scripts
Explore the docs »

 / _  |   Frida 16.0.6 - A world-class dynamic instrumentation toolkit
| (_| |
 > _  |   Commands:
/_/ |_|       help      -> Displays the help system
. . . .       object?   -> Display information about 'object'
. . . .       exit/quit -> Exit
. . . .
. . . .   More info at https://frida.re/docs/home/
. . . .
. . . .   Connected to Android Emulator 5554 (id=emulator-5554)

Feel free to PR if you want to add new scripts to the list. New scripts will have to respect the nomenclature currently used:

Description: Small description of the script
Usage: frida -U -f XXX -l script-name.js
Credit: 

Link:
	https://link

Almost none of these scripts are mine. If there is any mistake on the credits of a script, please contact me

(back to top)

Table of Contents

Observer

• Crypto

  • android-aes-decrypt-no-iv.js
  • android-aesinfo-and-hashing-decryptor.js
  • android-aesinfo-decryptor.js
  • android-crypto-observer.js
  • android-hashing-observer.js
  • android-java-crypto-observer.js
  • android-pbe-observer.js
  • android-random-observer.js
  • ios-intercept-crypto.js
  • ios-intercept-crypto2.js

• DeepLink & UrlScheme

  • android-deeplink-observer.js
  • ios-url-scheme-dumper.js
  • ios-url-scheme-fuzzing.js

• Library

  • android-library-observer.js
  • android-library-observer2.js

• Network

  • Bluetooth

    • android-bluetooth-meta-data-observer.js
    • android-ios-bluetooth-observer.js

  • NSURL

    • ios-nsurlrequest-observer.js
    • ios-nsurlsession-observer.js

  • OkHttp

    • android-okhttp-logger.js
    • android-okhttp-logger2.js
    • android-okhttp-proxy-installator.js

  • TCP

    • android-tcp-trace.js

  • TLS

    • ios-tls-keylogger-ios12.js
    • ios-tls-keylogger-ios13.js
    • ios-tls-keylogger-ios14.js

  • WebInspector

    • ios-webinspector-enable.js

  • WebView

    • ios-webview-observer.js

• Storage

  • Cookies

    • android-cookie-observer.js
    • ios-binarycookies-observer.js

  • FileSystem

    • android-filesystem-observer.js
    • android-filesystem-observer2.js

  • KeyboardCache

    • ios-keyboard-cache-checker.js

  • Keystore_keychain

    • android-keystore-monitor.js
    • ios-keychain-monitor.js

  • Log

    • android-log-observer.js
    • ios-nslog-observer.js

  • Pasteboard

    • ios-pasteboard-observer.js

  • Plist

    • ios-read-nsuserdefaults.js
    • ios-read-plist-file.js

  • SharedPreferences

    • android-encryptedsharedpreferences-observer.js
    • android-sharedpreferences-observer.js

  • SQLite

    • android-sqlite-observer.js
    • android-sqlitecipher-observer.js
    • android-sqlitecipher-password-grabber.js
    • android-sqlitecipher-password-grabber2.js
    • ios-sqlite3-observer.js

  • Other

    • android-permissions-observer.js
    • android-strings_compare.js

Security Bypass

• Biometric

  • android-biometric-bypass-android11.js
  • ios-biometric-bypass.js
  • ios-touchid-bypass.js

• CertificatePinning

  • android_proxy-add.js
  • android-multiple-pinning-bypass.js
  • android-multiple-pinning-bypass2.js
  • android-multiple-pinning-bypass3.js
  • android-okhttp-pinning-bypass.js
  • android-okhttp-pinning-bypass2.js
  • android-trustmanager-pinning-bypass.js
  • android-trustmanager-pinning-bypass2.js
  • flutter-pinning-bypass.js
  • flutter-pinning-bypass2.js
  • flutter-tls1-verification-bypass.js
  • ios-pinning-bypass-10.js
  • ios-pinning-bypass-11.js
  • ios-pinning-bypass-12.js
  • ios-pinning-bypass-13.js
  • ios-trustkit-pinning-bypass.js
  • phonegap-pinning-bypass.js

• DebugMode_Emulator

  • android-adb-detection-bypass.js
  • android-debug-bypass.js
  • android-emulator-detection-bypass.js
  • react-native-emulator-detection-bypass.js

• FlagSecure

  • android-flagsecure.js

• Location

  • android-location-spoofing.js
  • ios-location-spoofing.js

• RootDetection

  • android-multiple-root-bypass.js
  • android-multiple-root-bypass2.js
  • android-rootbeer--flutter-bypass.js
  • android-rootbeer--flutter-bypass2.js
  • android-rootbeer-bypass.js
  • ios-multiple-jailbreak-bypass.js
  • ios-multiple-jailbreak-bypass2.js
  • ios-simple-jailbreak-bypass.js
  • xamarin-android-multiple-root-bypass.js
  • xamarin-multiple-jailbreak-bypass.js

• WebView

  • android-enable-webview-debug.js
  • cordova-enable-webview-debugging.js

• WiFi

  • android-wifi-check-bypass.js

• Other

  • android-anti-frida-exposed-detection-bypass.js
  • android-sdk-version-change.js
  • android-system_exit_bypass.js
  • ios-change-system-version.js
  • ios-custom-keyboard-allowed.js

Static Analysis

• android-dex_classes_enumeration.js
• android-find-all-classes-methods.js
• android-find-all-classes.js
• android-find-specific-classes-methods.js
• android-get-app-env-info.js
• ios-app-by-display-name.js
• ios-application-static-analysis.js
• ios-application-static-analysis2.js
• ios-data-protection-display.js
• ios-find-all-classes-methods.js
• ios-find-all-classes.js
• ios-find-all-methods-of-specific-class.js
• ios-find-app-classes-methods.js
• ios-find-app-classes.js
• ios-find-specific-method.js
• ios-get_app_env_info.js
• ios-find-all-classes.js

Specific Software

• AppLock-authentication-bypass.js

Other

• android-file-delete-prevention.js
• android-injector.js
• android-stetho-loader.js

(back to top)

Contributing

Contributions are what make the open source community such an amazing place to learn, inspire, and create. Any contributions you make are greatly appreciated.

If you have a suggestion that would make this better, please fork the repo and create a pull request. You can also simply open an issue with the tag "enhancement". Don't forget to give the project a star! Thanks again!

1. Fork the Project
2. Create your Feature Branch (git checkout -b feature/AmazingFeature)
3. Commit your Changes (git commit -m 'Add some AmazingFeature')
4. Push to the Branch (git push origin feature/AmazingFeature)
5. Open a Pull Request

(back to top)

Author

Régis SENET (rsenet)

(back to top)

License

The project is available as open source under the terms of the GPLv3

(back to top)