Android-App-Security / FriList

Collection of useful FRIDA Mobile Scripts

Collection of useful FRIDA Mobile Scripts.

    / _  |   Frida 16.0.6 - A world-class dynamic instrumentation toolkit
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at https://frida.re/docs/home/
   . . . .
   . . . .   Connected to Android Emulator 5554 (id=emulator-5554)

Feel free to PR if you want to add new scripts to the list. New scripts will have to respect the nomenclature currently used:

    Description: Small description of the script
    Usage: frida -U -f XXX -l script-name.js
    Credit: 

    Link:
    	https://link

Almost none of his scripts are mine. If there is any mistake on the credits of a script, please contact me

Table of Contents

Observer

• Crypto

  • android-aes-decrypt-no-iv.js
  • android-aesinfo-and-hashing-decryptor.js
  • android-aesinfo-decryptor.js
  • android-crypto-observer.js
  • android-hashing-observer.js
  • android-java-crypto-observer.js
  • android-pbe-observer.js
  • android-random-observer.js
  • ios-intercept-crypto.js
  • ios-intercept-crypto2.js

• DeepLink & UrlScheme

  • android-deeplink-observer.js
  • ios-url-scheme-dumper.js
  • ios-url-scheme-fuzzing.js

• Library

  • android-library-observer.js
  • android-library-observer2.js

• Network

  • Bluetooth

    • android-bluetooth-meta-data-observer.js
    • android-ios-bluetooth-observer.js

  • NSURL

    • ios-nsurlrequest-observer.js
    • ios-nsurlsession-observer.js

  • OkHttp

    • android-okhttp-logger.js
    • android-okhttp-logger2.js
    • android-okhttp-proxy-installator.js

  • TCP

    • android-tcp-trace.js

  • TLS

    • ios-tls-keylogger-ios12.js
    • ios-tls-keylogger-ios13.js
    • ios-tls-keylogger-ios14.js

  • WebInspector

    • ios-webinspector-enable.js

  • WebView

    • ios-webview-observer.js

• Storage

  • Cookies

    • android-cookie-observer.js
    • ios-binarycookies-observer.js

  • FileSystem

    • android-filesystem-observer.js
    • android-filesystem-observer2.js

  • KeyboardCache

    • ios-keyboard-cache-checker.js

  • Keystore_keychain

    • android-keystore-monitor.js
    • ios-keychain-monitor.js

  • Log

    • android-log-observer.js
    • ios-nslog-observer.js

  • Pasteboard

    • ios-pasteboard-observer.js

  • Plist

    • ios-read-nsuserdefaults.js
    • ios-read-plist-file.js

  • SharedPreferences

    • android-encryptedsharedpreferences-observer.js
    • android-sharedpreferences-observer.js

  • SQLite

    • android-sqlite-observer.js
    • android-sqlitecipher-observer.js
    • android-sqlitecipher-password-grabber.js
    • android-sqlitecipher-password-grabber2.js
    • ios-sqlite3-observer.js

  • Other

    • android-permissions-observer.js
    • android-strings_compare.js

Security Bypass

• Biometric

  • android-biometric-bypass-android11.js
  • ios-biometric-bypass.js
  • ios-touchid-bypass.js

• CertificatePinning

  • android_proxy-add.js
  • android-multiple-pinning-bypass.js
  • android-multiple-pinning-bypass2.js
  • android-multiple-pinning-bypass3.js
  • android-okhttp-pinning-bypass.js
  • android-okhttp-pinning-bypass2.js
  • android-trustmanager-pinning-bypass.js
  • android-trustmanager-pinning-bypass2.js
  • flutter-pinning-bypass.js
  • flutter-pinning-bypass2.js
  • flutter-tls1-verification-bypass.js
  • ios-pinning-bypass-10.js
  • ios-pinning-bypass-11.js
  • ios-pinning-bypass-12.js
  • ios-pinning-bypass-13.js
  • ios-trustkit-pinning-bypass.js
  • phonegap-pinning-bypass.js

• DebugMode_Emulator

  • android-adb-detection-bypass.js
  • android-debug-bypass.js
  • android-emulator-detection-bypass.js
  • react-native-emulator-detection-bypass.js

• FlagSecure

  • android-flagsecure.js

• Location

  • android-location-spoofing.js
  • ios-location-spoofing.js

• RootDetection

  • android-multiple-root-bypass.js
  • android-rootbeer--flutter-bypass.js
  • android-rootbeer--flutter-bypass2.js
  • android-rootbeer-bypass.js
  • ios-multiple-jailbreak-bypass.js
  • ios-multiple-jailbreak-bypass2.js
  • ios-simple-jailbreak-bypass.js
  • xamarin-android-multiple-root-bypass.js
  • xamarin-multiple-jailbreak-bypass.js

• WebView

  • android-enable-webview-debug.js
  • cordova-enable-webview-debugging.js

• WiFi

  • android-wifi-check-bypass.js

• Other

  • android-anti-frida-exposed-detection-bypass.js
  • android-sdk-version-change.js
  • android-system_exit_bypass.js
  • ios-change-system-version.js
  • ios-custom-keyboard-allowed.js

Static Analysis

• android-dex_classes_enumeration.js
• android-find-all-classes-methods.js
• android-find-all-classes.js
• android-find-specific-classes-methods.js
• android-get-app-env-info.js
• ios-app-by-display-name.js
• ios-application-static-analysis.js
• ios-application-static-analysis2.js
• ios-data-protection-display.js
• ios-find-all-classes-methods.js
• ios-find-all-classes.js
• ios-find-all-methods-of-specific-class.js
• ios-find-app-classes-methods.js
• ios-find-app-classes.js
• ios-find-specific-method.js
• ios-get_app_env_info.js
• ios-find-all-classes.js

Specific Software

• AppLock-authentication-bypass.js

Other

• android-file-delete-prevention.js
• android-injector.js
• android-stetho-loader.js