shapa7276 / frida-injector

It automates the Injection of frida gadgets on android application to run frida Server on non rooted Device

#Author Sharanbasu Panegav

"Frida-Injector" It automates the Injection of FRIDA-gadget binary into an Android application , in order to Hook function or bypass SSL Pinning of that application on Non rooted Device

#Usage:- Frida-Injector.py [-h] [-i inputfile] [-m 1 or 2)]

• Method1:-Injecting into bytecode (Preferred method)
• Method2:-Injecting as dependency to a native library (JNI)

#prerequisite :- latest versions of adb ,apktool,USB debugging enabled on device and Configure device with Burp proxy using (https://portswigger.net/support/installing-burp-suites-ca-certificate-in-an-android-device)

What it does

Method1:-Injecting into bytecode

• Reverse the apk using apktool.
• Download all the lated frida gadget from (https://github.com/frida/frida/releases/latest)
• copy aproriate frida-gadget
• Inject smali to load frida-gadget Library
• Recompile the application
• Sign with uber-apk-signer
• Install the application to connected Device
• Push the Burp certicate on local temp directory
• Call frida function to bypass SSL- pinning

Method2:-Injecting as dependency to a native library

• Reverse the apk using apktool.
• Download all the lated frida gadget from (https://github.com/frida/frida/releases/latest)
• List the availble native directory to Inject the frida-agent.so
• add frida-agent.so as a dependency of native library
• Recompile the application
• Sign with uber-apk-signer
• Install the application to connected Device
• Push the Burp certicate on local temp directory
• Call frida function to bypass SSL- pinning

Referene :-

• https://koz.io/using-frida-on-android-without-root/
• https://lief.quarkslab.com/doc/stable/tutorials/09_frida_lief.html
• https://fadeevab.com/frida-gadget-injection-on-android-no-root-2-methods/
• https://github.com/kiks7/frida-non-root

frida-injector's Issues

TypeError: expected str, bytes or os.PathLike object, not NoneType

Method 1:

...
I: Baksmaling classes37.dex...
I: Copying assets and libs...
I: Copying unknown files...
I: Copying original files...
I: Copying META-INF/services directory
I: Removing 1.apk framework file...
1
Scaning Main Activity
Traceback (most recent call last):
  File "Frida-Injector/Frida-Injector.py", line 198, in <module>
    main()
  File "Frida-Injector/Frida-Injector.py", line 187, in main
    SmaliInjection(smali_path)
  File "Frida-Injector/Frida-Injector.py", line 42, in SmaliInjection
    with open(mainactivity,'r') as smalifile:
TypeError: expected str, bytes or os.PathLike object, not NoneType
➜  Frida-Injector git:(master) ✗