Analysis of Real World Apps with Frida
summary
Live-demo uses Frida-trace to find a markdown→HTML function inside WebEx, then replaces hooks with a standalone JS agent that calls the C++ std::string constructor and the target function directly. Instrumentation uses Stalker-based call tracing to list callees and basic blocks, and Interceptor.replace to bypass client-side checks. Scripted harness feeds inputs into AFL++’s frida mode for coverage-guided fuzzing. Result: able to see and modify pre-encryption messages, reproduce a rendering quirk briefly exposing script content; works but causes target memory leaks and needs SIP disabled on macOS.
AI-written summary · about
chapters (11)
- 0:00Introduction to Frida
- 1:43Why choose Frida?
- 4:39Getting started and setup
- 6:59Using frida-trace
- 11:54Call stacks and inspection
- 17:36The Frida REPL
- 19:07Standalone scripting
- 27:53Function introspection
- 38:47Advanced analysis techniques
- 44:01Next steps for research
- 45:43Wrap-up and Q&A
related talks
52mUnlocking secrets of proprietary software using Frida
25mFoundations of Dynamic Analysis and Hooking of Android Apps with Frida
01h 01mInstrumenting machine code over WebRTC
44m Meticulously Modern Mobile Manipulations
53mD1T1 - Brida: When Burp Suite meets Frida
29mInstrumenting binaries with Frida
44mCatch Me If You Can: Detecting Root and Frida
53mResearching New Attack Interfaces On iOS And OSX