frinet
frinet copied to clipboard
Frida-based tracer for easier reverse-engineering on Android, iOS, Linux, Windows and most related architectures.
I use ida pro 8.3 in windows build a hello world cpp program in vs2022 x86 the trace command is ``` python .\trace.py spawn "C:\Users\Administrator\vs_2022\ConsoleApplication1\Debug\ConsoleApplication1.exe" ConsoleApplication1.exe 0x123c0 -a 'ConsoleApplication1.exe' ```...
the binary is default hello_world.exe built by vs2022 x64. ![image](https://github.com/synacktiv/frinet/assets/97490782/ffb4bcd7-8427-40e7-99f0-cc45c8a7494f)
after logging for 2min, the script is stucked ,and after pressing ctrl+c ,it shows: 2024-05-13 22:49:20,660 CRITICAL | Aw, Snap! Something went wrong: `script has been destroyed`. the OS is...
This is so that tracing does not alter the system error value of the current thread, leading to incorrect program execution. Fixes #5 .
When tracing an executable, the tracing code interferes with the thread's system error code, which can cause incorrect execution of the traced process. Example: ```c++ #include #include int main() {...
With RIP-relative addressing, displacements are computed from the address of the subsequent instruction in memory. Fixed to take this into account. Fixes #3 .
When tracing memory accesses, the wrong addresses are recorded when an x64 instruction uses RIP-relative addressing. RIP-relative addressing is special, because the base address is not the current value of...
Hi, frinet is an excellent project. I want to start tracing from the first inst of the main binary, then record all the instructions in all modules. How to modify...