RR

by
4 views 767c3926...

Description

RR

How to Use

Download the script and run it with Frida CLI:

Download Script

Then run with Frida:

frida -U -f YOUR_PACKAGE_NAME -l rr.js

Replace YOUR_PACKAGE_NAME with the target app's package name.

Source Code

JavaScript
Interceptor.attach(Module.findExportByName(null, "strcmp"), {
    onEnter: function(args) {
        if (args[0].isNull()) {
            return;
        }

        if (args[1].isNull()) {
            return;
        }

        var s1 = Memory.readUtf8String(args[0]);
        var s2 = Memory.readUtf8String(args[1]);

        if (s1.includes("embeded") || s1.includes("provision") || s2.includes("embeded") || s2.includes("provision")) {
            console.log(`strcmp(${s1}, ${s2})`);
        }
    }
})
Share this script:
Twitter LinkedIn

Comments

Login or Sign up to leave a comment.
Loading comments...