Need help with FRIDA-DEXDump?
Click the “chat” button below for chat support from the developer who created it, or find similar developers for support.

About the developer

hluwa
2.0K Stars 535 Forks GNU General Public License v3.0 68 Commits 13 Opened issues

Description

Fast search and dump dex on memory.

Services available

!
?

Need anything else?

Contributors list

# 22,135
Python
frida
HTML
Windows
60 commits
# 26,378
instagr...
jike
C++
dbi
1 commit

FRIDA-DEXDump

screenshot

Features

  1. support fuzzy search broken header dex.
  2. fix struct data of dex-header.
  3. compatible with all android version(frida supported).
  4. support loading as objection plugin ~
  5. pypi package has been released ~

Requires

  • frida:
    pip install frida
  • [optional] click
    pip install click

Installation

From pypi

pip3 install frida-dexdump
frida-dexdump -h

From source

git clone https://github.com/hluwa/FRIDA-DEXDump
cd FRIDA-DEXDump/frida-dexdump
python3 main.py -h

Usage

  • Run

    frida-dexdump
    or
    python3 main.py
    to attach current frontmost application and dump dexs.
  • Or, use command arguments:

    -n: [Optional] Specify target process name, when spawn mode, it requires an application package name. If not specified, use frontmost application.
    -p: [Optional] Specify pid when multiprocess. If not specified, dump all.
    -f: [Optional] Use spawn mode, default is disable.
    -s: [Optional] When spawn mode, start dump work after sleep few seconds. default is 10s.
    -d: [Optional] Enable deep search maybe detected more dex, but speed will be slower.
    -h: show help.
    
  • Or, loading as objection plugin

1. clone this repo and move `frida_dexdump` into your plugins folder, eg:

```
git clone https://github.com/hluwa/FRIDA-DEXDump ~/Downloads/FRIDA-DEXDump;
mv ~/Downloads/FRIDA-DEXDump/frida_dexdump ~/.objection/plugins/dexdump
```
  1. start objection with -P or --plugin-folder your plugins folder, eg:

    objection -g com.app.name explore -P ~/.objection/plugins
  2. run command:

    1. plugin dexdump search to search and print all dex
    2. plugin dexdump dump to dump all found dex.

Internals

《深入 FRIDA-DEXDump 中的矛与盾》

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.