Skip to content

Can frida be used in python to wait for Android app spawn ? #240

@a2t2

Description

@a2t2

In frida-trace there is a -W option that can be used to await spawn, i.e. one can specify API filter with -j flag for a Android APK and use -W to have frida wait for the app to be started.

In python, I see the following APIs:

class Device:

  1. device.spawn(package name) and device.resume(pid) --> spawn process to attachable state, resume process from attachable state
  2. device.attach(pid) --> attach to a process to give session

class Session:

  1. session.create_script() --> create a new script

So based on the above, it appears the app has to be started before JS scripts can be added to monitor APIs.

My questions are as follows:

  1. How is attachable state defined ? Does it mean process has started executing ?
  2. Is there a way in python to match behavior of the -W flag, i.e. mention which scripts need to be loaded before app process is started, and then start the app process ?
  3. Does spawn / resume by default starts the main activity of the specified app ?

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions