逆向 | frida hook local device的spawn启动
网上没资料,翻了一下frida源代码,感觉这样写比较好。
代码:
import frida
import sys
pid = frida.spawn("hello.exe")
frida.resume(pid)
print(pid)
session = frida.attach(pid)
# print(session)
script = session.create_script("""
Interceptor.attach(ptr("%s"), {
onEnter(args) {
send(Memory.readCString(this.context.rcx));
}
});
""" % 0x000000000040153F)
def on_message(message, data):
print(message)
script.on('message', on_message)
script.load()
sys.stdin.read()
frida.kill(pid)