Frida脱壳环境启动代码集

本文用于保存我这篇文章的配置代码
方便我快速启动Frida脱壳环境
以及一些更新的实验研究

run 夜神模拟器.exe
run cmd

d:
cd D:\Program Files\Nox\bin
adb connect 127.0.0.1:62001
adb devices
adb start-server
adb devices
adb shell 
su
/data/local/tmp/frida-server-15.2.2-android-x86 
d:
cd D:\11279\Project\crackTL
python hook.py
frida -U -l hook.js -f com.package.name

再开一个cmd

python D:\Desktop\unpack.py 包名

真机

adb start-server
adb shell
su
/data/local/tmp/frida-server-15.2
com.taolu.smer

1

不开夜神模拟器直接执行
adb connect 127.0.0.1:62001
会出现如下提示

2

为什么是127.0.0.1:62001,为什么是62001这个端口

tasklist
Nox.exe                      15752 Console                    2    219,448 K
netstat -ano
 TCP    127.0.0.1:2906         127.0.0.1:62001        ESTABLISHED     17212
 netstat   -ab
  [Nox.exe]
  TCP    127.0.0.1:2875         egg2001:61001          ESTABLISHED
 [Nox.exe]
  TCP    127.0.0.1:2893         egg2001:2894           ESTABLISHED
 [nox_adb.exe]
  TCP    127.0.0.1:2894         egg2001:2893           ESTABLISHED
 [nox_adb.exe]
  TCP    127.0.0.1:2906         egg2001:62001          ESTABLISHED

3

进入nox跟目录输入adb,优先启动的为什么是跟目录的adb.exe,而不是环境变量中的adb.exe,这两个有什么区别?跟目录中还有nox_adb.exe,这三个有什么区别?

4

对环境变量adb和nox目录下adb和nox_adb的研究

#不开启夜神模拟器,不管用环境变量的adb还是nox根目录下的adb和nox_adb都无法建立链接,且找不到设备
C:\WINDOWS\system32>adb device\
adb.exe: unknown command device\

C:\WINDOWS\system32>adb devices
adb server version (36) doesn't match this client (41); killing...
* daemon started successfully
List of devices attached

C:\WINDOWS\system32>adb connect 127.0.0.1:62001
cannot connect to 127.0.0.1:62001: 由于目标计算机积极拒绝,无法连接。 (10061)

C:\WINDOWS\system32>d:

D:\>cd D:\Program Files\Nox\bin

D:\Program Files\Nox\bin>nox_adb.exe devices
List of devices attached
adb server version (41) doesn't match this client (36); killing...
* daemon started successfully *

D:\Program Files\Nox\bin>nox_adb.exe connect 127.0.0.1:62001
unable to connect to 127.0.0.1:62001: cannot connect to 127.0.0.1:62001: 由于目标计算机积极拒绝,无法连接。 (10061)
#打开夜神模拟器,不执行connect指令
D:\Program Files\Nox\bin>nox_adb.exe devices
List of devices attached
127.0.0.1:62001 device

D:\Program Files\Nox\bin>adb.exe devices
List of devices attached
127.0.0.1:62001 device

C:\Windows\System32>adb devices
adb server version (36) doesn't match this client (41); killing...
* daemon started successfully
List of devices attached
#发现nox目录下的adb和nox_adb执行devices都能查到设备,而环境变量的adb则查不到

5

跟着#4的内容,如果不connect用nox目录下的adb也能链接设备,那可以直接用nox的adb来进行操作吗?

D:\Program Files\Nox\bin>adb start-server
adb server version (41) doesn't match this client (36); killing...
* daemon started successfully *

这个是算成功还是失败?网上一查貌似说是失败的

这回答得没看懂,但查到说似乎要更改nox的adb版本,我们改一下。采用https://pcedu.pconline.com.cn/1515/15154706.html的办法。
然后再执行adb start-server

这次就没有任何提示,那应该是成功了吧!

猜你喜欢

转载自blog.csdn.net/weixin_45518621/article/details/125957575
今日推荐