Home

Awesome

fridroid-unpacker

Defeat Java packers via Frida instrumentation

Description

Use the method OpenMemory or OpenCommon (after Android N) in libart.so/libdexfile.so to get the address of the dex in memory, calculate the size of the dex file, and dump the dex from memory.

Usage

$ frida -U -f com.package.target -l dexDump.js --no-pause

References

Supported OS: Android 4.4 - Android 11

Tested Packers