Skip to main content

Fast dex dump in memory based on frida.

Project description

FRIDA-DEXDump

中文, Asciicast Video

Features

  1. support fuzzy search broken header dex.
  2. fix struct data of dex-header.
  3. compatible with all android version(frida supported).
  4. support loading as objection plugin ~
  5. pypi package has been released ~

Requires

  • frida: pip install frida
  • [optional] click pip install click

Installation

From pypi

pip3 install frida-dexdump
frida-dexdump -h

From source

git clone https://github.com/hluwa/FRIDA-DEXDump
cd FRIDA-DEXDump/frida-dexdump
python3 main.py -h

Usage

  • Run frida-dexdump or python3 main.py to attach current frontmost application and dump dexs.

  • Or, use command arguments:

    -n: [Optional] Specify target process name, when spawn mode, it requires an application package name. If not specified, use frontmost application.
    -p: [Optional] Specify pid when multiprocess. If not specified, dump all.
    -f: [Optional] Use spawn mode, default is disable.
    -s: [Optional] When spawn mode, start dump work after sleep few seconds. default is 10s.
    -d: [Optional] Enable deep search maybe detected more dex, but speed will be slower.
    -h: show help.
    
  • Or, loading as objection plugin

    1. clone this repo and move frida_dexdump into your plugins folder, eg:
      git clone https://github.com/hluwa/FRIDA-DEXDump ~/Downloads/FRIDA-DEXDump;
      mv ~/Downloads/FRIDA-DEXDump/frida_dexdump ~/.objection/plugins/dexdump
      
    2. start objection with -P or --plugin-folder your plugins folder, eg:
      objection -g com.app.name explore -P ~/.objection/plugins
      
    3. run command:
      1. plugin dexdump search to search and print all dex
      2. plugin dexdump dump to dump all found dex.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Files for frida-dexdump, version 1.0.1
Filename, size File type Python version Upload date Hashes
Filename, size frida_dexdump-1.0.1-py3-none-any.whl (20.0 kB) File type Wheel Python version py3 Upload date Hashes View
Filename, size frida-dexdump-1.0.1.tar.gz (7.4 kB) File type Source Python version None Upload date Hashes View

Supported by

Pingdom Pingdom Monitoring Google Google Object Storage and Download Analytics Sentry Sentry Error logging AWS AWS Cloud computing DataDog DataDog Monitoring Fastly Fastly CDN DigiCert DigiCert EV certificate StatusPage StatusPage Status page