Site icon API Security Blog

R2Frida – Radare2 And Frida Better Together

This is a self-contained plugin for radare2 that allows to instrument remote processes using frida. The radare project brings a complete toolchain for reverse engineering, providing well maintained functionalities and extend its features with other programming languages and tools. Frida is a dynamic instrumentation toolkit that makes it easy to inspect and manipulate running processes by injecting your own JavaScript, and optionally also communicate with your scripts. Features Run unmodified Frida scripts (Use the :. command) Execute snippets in C, Javascript or TypeScript in any process Can attach, spawn or launch in local or remote systems List sections, symbols, exports, protocols, classes, methods Search for values in memory inside the agent or from the host Replace method implementations or create hooks with short commands Load libraries and frameworks in the target process Support Dalvik, Java, ObjC, Swift and C interfaces Manipulate file descriptors and environment variables Send signals to the process, continue, breakpoints The r2frida io plugin is also a filesystem fs and debug backend Automate r2 and frida using r2pipe Read/Write process memory Call functions, syscalls and raw code snippets Connect to frida-server via usb or tcp/ip Enumerate apps and processes Trace registers, arguments of functions Tested on x64, arm32 and arm64 for Linux, Windows, macOS, iOS and Android Doesn't require frida to be installed in the host (no need for frida-tools) Extend the…Read More

Exit mobile version