逆向 | frida hook local device的spawn启动

发布时间 2023-05-17 14:50:45作者: Mz1

逆向 | frida hook local device的spawn启动

网上没资料,翻了一下frida源代码,感觉这样写比较好。

代码:

import frida
import sys

pid = frida.spawn("hello.exe")
frida.resume(pid)
print(pid)
session = frida.attach(pid)
# print(session)


script = session.create_script("""
Interceptor.attach(ptr("%s"), {
    onEnter(args) {
        send(Memory.readCString(this.context.rcx));
    }
});
""" % 0x000000000040153F)
def on_message(message, data):
    print(message)
script.on('message', on_message)
script.load()
sys.stdin.read()

frida.kill(pid)