Eduardo Novella

Results 78 issues of Eduardo Novella

It seems this crash is not produced by the RASP inside R2pay: ```sh [14:30 edu@xps radare2] (master)> frida --codeshare FrenchYeti/android-arm64-strace -H 127.0.0.1:27042 -f re.pwnme --no-pause ____ / _ | Frida...

bug

https://github.com/iGio90/Dwarf/blob/master/dwarf_debugger/lib/core.js#L4839

According to what i wrote on this [wiki](https://github.com/enovella/r2frida-wiki/blame/master/README.md#L469) , `dt` and `dth` commands were using this syntax: ![r2frida-todo](https://user-images.githubusercontent.com/14809754/54499945-a6020c80-490f-11e9-9f42-bb5fad5be6a4.png) However, this has changed: (but the first argument doesn't get deref ![r2frida-todo1](https://user-images.githubusercontent.com/14809754/54500004-3b050580-4910-11e9-9c43-7073da632b97.png)...

### cat hello.c ```c #include #include void main() { unsigned int t = 1; while (1) { printf("Hi r2con: %d\n", 2019); sleep(t); } } ``` ### Decompilation ```sh [0x00001130]> pdg...

Initially we thought that it was a r2frida bug but it resulted to be a Frida bug: https://github.com/nowsecure/r2frida/issues/106 # Backtrace https://github.com/nowsecure/r2frida/issues/106#issuecomment-480246134

# Frida version 12.4.7 compiled with symbols # Target app https://play.google.com/store/apps/details?id=com.scottyab.rootbeer.sample&hl=en_GB # Android - version 8 - Google Pixel 2 XL # Symbolicated backtrace from ADB logcat ```sh v8 :...

Hi, When intercepting a Java method that takes an Integer and String as arguments and returns another String (`Lpackage/class;->method(Ljava/lang/String;I)Ljava/lang/String;`), I got this frida error: ```javascript Error: invalid UTF-8 at frida/node_modules/frida-java/lib/env.js:922...

When forking your repo, I realized that it was appending `-1` to the repo name like `FridaAndroidTracer-1`. After a short while, I noticed that another repo had this name. Just...

We could improve the rule `is_apk` by checking that after 26 bytes from the magic bytes we got the `AndroidManifest.xml`. As shown below: ```yara rule IsZIP { strings: $EOCD_magic =...

enhancement