Frida 安装

pip3 install frida
pip3 install frida-tools

https://github.com/frida/frida/releases

frida-server-16.1.3-android-arm64.xz

解压

adb push .\frida-server-16.1.3-android-arm64 /data/local/tmp
.\frida-server-16.1.3-android-arm64: 1 file pushed, 0 skipped. 115.8 MB/s (50951520 bytes in 0.419s)

chmod 777 frida-server-16.1.3-android-arm64

启动如下：

/data/local/tmp # ./frida-server-16.1.3-android-arm64
​

进行端口转发(新打开一个cmd)

adb forward tcp:27042 tcp:27042
adb forward tcp:27043 tcp:27043

​

查看手机启动的进程（查看到则运行成功，frida安装完毕！）

frida-ps -U

非root设备
https://nszdhd1.github.io/2021/06/15/%E9%9D%9Eroot%E7%8E%AF%E5%A2%83%E4%B8%8Bfrida%E7%9A%84%E4%B8%A4%E7%A7%8D%E4%BD%BF%E7%94%A8%E6%96%B9%E5%BC%8F/

frida -U -f com.xx.xx -l hookjava.js swpan
frida -U com.xx.xx -l hookjava.js attach

代码分享

https://codeshare.frida.re/

参考

https://zhuanlan.zhihu.com/p/572126916
https://crifan.github.io/reverse_debug_frida/website/