-
Notifications
You must be signed in to change notification settings - Fork 28
/
frida-stalker-example.py
60 lines (51 loc) · 1.15 KB
/
frida-stalker-example.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
import sys
import frida
def on_message(message, data):
print "[%s] -> %s" % (message, data)
def main(target_process):
session = frida.attach(target_process)
script = session.create_script("""
function StalkerExeample()
{
var threadIds = [];
Process.enumerateThreads({
onMatch: function (thread)
{
threadIds.push(thread.id);
console.log("Thread ID: " + thread.id.toString());
},
onComplete: function ()
{
threadIds.forEach(function (threadId)
{
Stalker.follow(threadId,
{
events: {call: true},
onReceive: function (events)
{
console.log("onReceive called.");
},
onCallSummary: function (summary)
{
console.log("onCallSummary called.");
}
});
});
}
});
}
StalkerExeample();
""")
script.on('message', on_message)
script.load()
raw_input('[!] Press <Enter> at any time to detach from instrumented program.\n\n')
session.detach()
if __name__ == '__main__':
if len(sys.argv) < 2:
print 'Usage: %s <process name or PID>' % __file__
sys.exit(1)
try:
target_process = int(sys.argv[1])
except ValueError:
target_process = sys.argv[1]
main(target_process)