Skip to content

1.9.0

Compare
Choose a tag to compare
@leonjza leonjza released this 29 Mar 11:01
· 132 commits to master since this release
3482f36

new

  • Add the --inline flag to the ios heap execute js command, allowing for inline JavaScript evaluation on iOS heap objects. (956056a)
  • Add a new --unzip-unicode flag to the iOS IPA patcher to treat the IPA name as unicode. Thanks @Fabiano1107 (#309)
  • Add the ability to patch in a gadget configuration and script to Android APK's, making it possible to eternalise scripts without needing a computer. Note: This is an Android only feature for now and needs porting for iOS. For more information, please see: https://frida.re/docs/gadget/. Thanks @gergesh (#329)
  • Improve the Android method watcher by dumping information about objects instead of simply showing [object, object] for the argument. Thanks @arielmiki (#334)
  • Improve anti-frida evasion by using a different prefix for .dex files generated by Java.registerClass(). An example patch to recompile the Android frida-server with the name frida renamed to freeda can be seen here. (d1035e5)
  • Add a new android keystore watch command. This command will report usages of the java.security.KeyStore class, revealing the password used when accessing items. (0513b2d)

fixes

  • Fix android hooking set return_value crashing when no optional overload is set. Thanks @root-intruder (#307)
  • Fix suggested package name for jarsigner on Linux. Thanks @RomainL972 (#327)
  • Update the iOS biometrics bypass script to handle cases where applications check for an error rather than if a success status was returned. Thanks @gagnonca (#333)
  • Android patcher improvements. This comes mostly by enforcing the use of apktool version 2.4.1 and up, as well as by automatically running the empty-framework-dir command before patching. Information about upgrading apktool can be found in the wiki here. (46288b5)
  • Fix Android root detection scripts that were pretty horribly broken 😂 (539fc30)

other

Code Changes Since v1.8.4