Frida
Frida is an open-source dynamic instrumentation framework based on Dynamic Binary Instrumentation (DBI) technology. It allows developers and security researchers to inject scripts into target processes at runtime to perform function hooking, memory read/write, and behavioral monitoring. Frida supports multiple platforms including iOS, Android, Windows, macOS, and Linux, provides scripting interfaces such as JavaScript, and is widely used in software security analysis, vulnerability research, reverse engineering, and application debugging.
Core Facts
Timeline (last 90 days)
Traditional reverse engineering workflows rely on specialized toolchains such as decompilers (e.g., Ghidra, IDA Pro), debuggers (e.g., x64dbg), and network capture tools (e.g., Frida).
Frida is a dynamic instrumentation framework that allows researchers to inject JavaScript scripts into target processes at runtime to intercept and modify function calls in real time.
All Facts (9)
The Frida injection command format is frida -U -f com.target.app -l hook.js, where -U means connect to a USB device, -f specifies spawn mode to launch the target application, and -l loads the JS script file.
65%UnverifiedFrida的Hook方式可以在数据加密之前或解密之后直接拦截明文，完全不依赖网络代理，从根本上规避代理检测问题
90%UnverifiedFrida的默认通信端口为27042
90%Unverified脱壳的本质是在内存中捕获已解密的DEX文件，常用方法包括利用Frida进行内存Dump和使用FART等专用脱壳工具
90%Unverified对于Java层的Hook，Frida利用Android Runtime（ART）提供的内部接口，修改方法的入口点，将调用重定向到用户定义的回调函数
85%Unverified大厂APP的Frida检测机制包括：扫描/proc/self/maps查找frida-agent.so特征库名、检测默认通信端口27042、扫描内存中的LIBFRIDA特征字符串、通过inline hook检测验证关键函数前几个字节是否被修改
85%UnverifiedFrida基于动态二进制插桩（DBI）技术，通过ptrace系统调用附加到目标进程，将Frida Agent注入进程空间后执行Hook脚本
60%UnverifiedTraditional reverse engineering workflows rely on specialized toolchains such as decompilers (e.g., Ghidra, IDA Pro), debuggers (e.g., x64dbg), and network capture tools (e.g., Frida).
50%UnverifiedFrida is a dynamic instrumentation framework that allows researchers to inject JavaScript scripts into target processes at runtime to intercept and modify function calls in real time.
50%