FRIDA-DEXDump

by hluwa

Fast search and dump dex on memory.

951 Stars 300 Forks Last release: about 1 month ago (v1.0.1) GNU General Public License v3.0 53 Commits 2 Releases

Available items

No Items, yet!

The developer of this repository has not created any items for sale yet. Need a bug fixed? Help with integration? A different license? Create a request here:

FRIDA-DEXDump

中文, Asciicast Video

Features

  1. support fuzzy search broken header dex.
  2. fix struct data of dex-header.
  3. compatible with all android version(frida supported).
  4. support loading as objection plugin ~
  5. pypi package has been released ~

Requires

  • frida:
    pip install frida
  • [optional] click
    pip install click

Installation

From pypi

pip3 install frida-dexdump
frida-dexdump -h

From source

git clone https://github.com/hluwa/FRIDA-DEXDump
cd FRIDA-DEXDump/frida-dexdump
python3 main.py -h

Usage

  • Run

    frida-dexdump
    or
    python3 main.py
    to attach current frontmost application and dump dexs.
  • Or, use command arguments:

    -n: [Optional] Specify target process name, when spawn mode, it requires an application package name. If not specified, use frontmost application.
    -p: [Optional] Specify pid when multiprocess. If not specified, dump all.
    -f: [Optional] Use spawn mode, default is disable.
    -s: [Optional] When spawn mode, start dump work after sleep few seconds. default is 10s.
    -d: [Optional] Enable deep search maybe detected more dex, but speed will be slower.
    -h: show help.
    
  • Or, loading as objection plugin

1. clone this repo and move `frida_dexdump` into your plugins folder, eg:
    ```
    git clone https://github.com/hluwa/FRIDA-DEXDump ~/Downloads/FRIDA-DEXDump;
    mv ~/Downloads/FRIDA-DEXDump/frida_dexdump ~/.objection/plugins/dexdump
    ```
2. start objection with `-P` or `--plugin-folder` your plugins folder, eg:
    ```
    objection -g com.app.name explore -P ~/.objection/plugins
    ```
3. run command:
    1. ` plugin dexdump search ` to search and print all dex
    2. ` plugin dexdump dump ` to dump all found dex.

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.