安全工具-Frida

1 需求

官网：

选项：

-U, --usb：connect to USB device
-f TARGET, --file TARGET：spawn FILE
-F, --attach-frontmost：attach to frontmost application
-n NAME, --attach-name NAME：attach to NAME
-N IDENTIFIER, --attach-identifier IDENTIFIER：attach to IDENTIFIER（同 -f 但不重启）
-p PID, --attach-pid PID：attach to PID
-W PATTERN, --await PATTERN：await spawn matching PATTERN
--stdio {inherit,pipe}：stdio behavior when spawning (defaults to "inherit")
--aux option：set aux option when spawning, such as "uid=(int)42" (supported types are: string, bool, int)
-l SCRIPT, --load SCRIPT：load SCRIPT

2 语法

复制代码

usage: frida [options] target

positional arguments:
  args                  extra arguments and/or target

options:
  -h, --help            show this help message and exit
  -D ID, --device ID    connect to device with the given ID
  -U, --usb             connect to USB device
  -R, --remote          connect to remote frida-server
  -H HOST, --host HOST  connect to remote frida-server on HOST
  --certificate CERTIFICATE
                        speak TLS with HOST, expecting CERTIFICATE
  --origin ORIGIN       connect to remote server with "Origin" header set to ORIGIN
  --token TOKEN         authenticate with HOST using TOKEN
  --keepalive-interval INTERVAL
                        set keepalive interval in seconds, or 0 to disable (defaults to -1 to auto-select based on
                        transport)
  --device-option option
                        override a backend-specific option, such as "control-endpoint=(string)localabstract:/my-frida-
                        server" (supported types are: string, bool, int)
  --p2p                 establish a peer-to-peer connection with target
  --stun-server ADDRESS
                        set STUN server ADDRESS to use with --p2p
  --relay address,username,password,turn-{udp,tcp,tls}
                        add relay to use with --p2p
  -f TARGET, --file TARGET
                        spawn FILE
  -F, --attach-frontmost
                        attach to frontmost application
  -n NAME, --attach-name NAME
                        attach to NAME
  -N IDENTIFIER, --attach-identifier IDENTIFIER
                        attach to IDENTIFIER
  -p PID, --attach-pid PID
                        attach to PID
  -W PATTERN, --await PATTERN
                        await spawn matching PATTERN
  --stdio {inherit,pipe}
                        stdio behavior when spawning (defaults to "inherit")
  --aux option          set aux option when spawning, such as "uid=(int)42" (supported types are: string, bool, int)
  --realm {native,emulated}
                        realm to attach in
  --runtime {qjs,v8}    script runtime to use
  --debug               enable the Node.js compatible script debugger
  --squelch-crash       if enabled, will not dump crash report to console
  -O FILE, --options-file FILE
                        text file containing additional command line options
  --version             show program's version number and exit
  -l SCRIPT, --load SCRIPT
                        load SCRIPT
  -P PARAMETERS_JSON, --parameters PARAMETERS_JSON
                        parameters as JSON, same as Gadget
  -C USER_CMODULE, --cmodule USER_CMODULE
                        load CMODULE
  --toolchain {any,internal,external}
                        CModule toolchain to use when compiling from source code
  -c CODESHARE_URI, --codeshare CODESHARE_URI
                        load CODESHARE_URI
  -e CODE, --eval CODE  evaluate CODE
  -q                    quiet mode (no prompt) and quit after -l and -e
  -t TIMEOUT, --timeout TIMEOUT
                        seconds to wait before terminating in quiet mode (or 'inf' to run forever)
  --pause               leave main thread paused after spawning program
  -o LOGFILE, --output LOGFILE
                        output to log file
  --eternalize          eternalize the script before exit
  --exit-on-error       exit with code 1 after encountering any exception in the SCRIPT
  --kill-on-exit        kill the spawned program when Frida exits
  --auto-perform        wrap entered code with Java.perform
  --auto-reload         Enable auto reload of provided scripts and c module (on by default, will be required in the
                        future)
  --no-auto-reload      Disable auto reload of provided scripts and c module

3.* 示例

frida -U -l *.js 包名

......

3.* "Java "is not defined

参考资料：

https://frida.re/news/2025/05/17/frida-17-0-0-released/

https://bbs.kanxue.com/thread-287941.htm

https://gi1gamesh666.github.io/2025/09/07/frida17%E8%B8%A9%E5%9D%91/

4 参考资料

https://gi1gamesh666.github.io/2025/09/07/frida17%E8%B8%A9%E5%9D%91/