Skip to content

Renef v0.3.6

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Apr 21:35
v0.3.6
251a503
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Renef v0.3.6

Dynamic Instrumentation Toolkit for Android ARM64

What's New

  • AI Integration: New ai command with multi-provider support (Ollama, OpenAI, Anthropic). Agentic tool calling lets the AI execute Renef commands to analyze the target before generating scripts. Use @path to inline file contents into prompts.

  • Spawn Gate (--pause): New flag that freezes the target process after injection via SIGSTOP, ensuring hooks are installed before app initialization (e.g. root detection in onCreate). No ptrace, undetectable. New resume command for manual control.

  • Python Binding Update: Added OS, File, Syscall, KCov wrappers, watch_start/stop, fixed basic.py example, 54 unit tests.

  • OS API: New OS global with getpid(), kill(), tgkill(), listdir().

  • Connection Stability and Hook Memory Fix: Stealth hooking via /proc/self/mem, connection liveness probe, auto-reconnect on send failure.

  • Strace API: Programmatic syscall tracing from Lua scripts via Syscall.trace(). Also available as standalone renef-strace binary — a ptrace-free syscall tracer using PLT/GOT hooking. Supports per-syscall onCall/onReturn callbacks, argument mutation, skip original, and category-based tracing (file, net, process).

  • KCOV Feature: Kernel code coverage collection via KCov.open() for coverage-guided fuzzing. Tracks which kernel code paths are hit during syscalls.

  • Hexdump API: Frida-style hexdump() for memory addresses, strings, byte tables and hook arguments. Also available as Memory.hexdump().

  • Hook Auto-Cleanup: All hooks are automatically uninstalled when the client disconnects.

  • Release Workflow: Added renef-strace and client-android (on-device ARM64 client) to build and release packages.

  • Fix missing cmd_resume and cmd_ai sources in Android client build (be49d5c)

  • Release notes changed (5c10d2f)

  • Version update (ad17113)

  • AI integration (533525c)

  • Spawn gate (--pause) added for early hook timing (7b3ff49)

  • Python binding update (aedfe81)

  • Os api added (d17ba63)

  • Connection stability and hook mem fixed (c809534)

  • Strace API added (e6b4649)

  • KCOV feature added (6843392)

  • Hexdump api added (bf4a790)

  • Hook remove feat added when connection closed (8518b91)

  • Add renef-strace and client-android to release workflow (5e25f1f)

Downloads

Platform-specific releases:

  • renef-v0.3.6-linux-x64.tar.gz - Linux x64 client + scripts
  • renef-v0.3.6-macos-x64.tar.gz - macOS Intel client + scripts
  • renef-v0.3.6-macos-arm64.tar.gz - macOS Silicon client + scripts
  • renef-v0.3.6-android-arm64.tar.gz - Android server + payload

All-in-one release:

  • renef-v0.3.6-all-platforms.tar.gz - All platforms + scripts

Verification

Verify downloads using SHA256 checksums in SHA256SUMS.txt

Quick Start

tar xzf renef-v0.3.6-linux-x64.tar.gz
cd renef-linux-x64

adb push ../renef-android-arm64/renef_server /data/local/tmp/
adb push ../renef-android-arm64/libagent.so /data/local/tmp/.r
adb shell chmod +x /data/local/tmp/renef_server

adb forward tcp:1907 localabstract:com.android.internal.os.RuntimeInit
adb shell /data/local/tmp/renef_server &
./renef

Documentation

System Requirements

Client:

  • Linux (x64) or macOS (Intel/Silicon)
  • libreadline (Linux/macOS)

Target Device:

  • Android 5.0+ (API 21+)
  • ARM64 architecture
  • Root access (for injection)

Dependencies

Built with:

  • Capstone 5.0.3
  • Lua 5.4.7
  • ASIO 1-30-2
  • Android NDK r26b
Assets 8
Loading