{"id":18252,"date":"2022-01-06T12:25:55","date_gmt":"2022-01-06T06:55:55","guid":{"rendered":"https:\/\/www.varutra.com\/?p=18252"},"modified":"2022-12-02T11:10:12","modified_gmt":"2022-12-02T05:40:12","slug":"android-pentesting-using-frida","status":"publish","type":"post","link":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/","title":{"rendered":"Android Pentesting Using Frida"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/varutra-1a3b6.kxcdn.com\/wp-content\/uploads\/2022\/01\/Android-Pentesting-Using-FRIDA-1024x535.png\"  class=\"sh-overlay-item sh-table-cell ls-is-cached lazyloaded\" data-rel=\"lightcase\" title=\"Android Pentesting Using FRIDA - Varutra Consulting\"><br \/>\nIn this blog, we were going to see what Frida is and how to set it up in our systems. We will also perform android pentesting using Frida.<\/p>\n<p>&nbsp;<\/p>\n<h3><strong>What is Frida?<\/strong><\/h3>\n<p>Frida is a dynamic code instrumentation toolkit that permits you to inject snippets of JavaScript or your library into the native application on your operating systems like Windows, iOS, Android, and more. It is used to hook into the running process of the application and modify the code on the fly without any requirement for re-launching or re-packaging. You can find more details about Frida here &#8211;\u00a0<a href=\"https:\/\/frida.re\/\">Frida<\/a>.<\/p>\n<p>&nbsp;<\/p>\n<h3><strong>Installation Procedure:<\/strong><\/h3>\n<p>Installing Frida tools is pretty much simple but to ensure the seamless installment procedure, you need to fulfill the below requirement of tools for Frida.<\/p>\n<ul>\n<li>The latest 3x version of <a href=\"https:\/\/www.python.org\/downloads\/\">Python<\/a> is highly recommended.<\/li>\n<li>Windows, macOS, or GNU\/Linux supported OS.<\/li>\n<\/ul>\n<p>Using the PIP command as recommended on the official website, install Frida on your operating system.<\/p>\n<p>#pip install Frida-tools<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-18254 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Installing-frida-tools.png\" alt=\"Installing frida tools\" width=\"573\" height=\"368\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Installing-frida-tools.png 573w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Installing-frida-tools-300x193.png 300w\" sizes=\"(max-width: 573px) 100vw, 573px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 1: Installing frida-tools<\/strong><\/p>\n<p>Once Frida is successfully installed in the system, you will have to open up your command prompt and identify the version by using the below command:<\/p>\n<p>#frida \u2013version<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-18256 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Latest-frida-version.png\" alt=\"Latest frida version\" width=\"255\" height=\"56\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 2: Latest frida version <\/strong><\/p>\n<p>To install the server, you need to browse for the new\u00a0<a href=\"https:\/\/github.com\/frida\/frida\/releases\">releases<\/a>\u00a0on GitHub and download the file depending upon your mobile device&#8217;s platform and of the version shown above.<\/p>\n<p style=\"text-align: center\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18255\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Frida-server-files-to-installed-in-android-device.png\" alt=\"Frida server files to installed in android device\" width=\"573\" height=\"93\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Frida-server-files-to-installed-in-android-device.png 573w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Frida-server-files-to-installed-in-android-device-300x49.png 300w\" sizes=\"(max-width: 573px) 100vw, 573px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 3: Frida server files to installed in android device<\/strong><\/p>\n<p>Download the file and then extract it. Then, you will have to move it to your mobile preferably \/data\/local\/tmp as shown below.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18258 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Push-to-folder-or-data-or-local-or-tmp.png\" alt=\"Push to folder or data or local or tmp\" width=\"547\" height=\"47\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Push-to-folder-or-data-or-local-or-tmp.png 547w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Push-to-folder-or-data-or-local-or-tmp-300x26.png 300w\" sizes=\"(max-width: 547px) 100vw, 547px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 4: Push to folder \/data\/local\/tmp<\/strong><\/p>\n<p style=\"text-align: center\">With the command mentioned below, modify the permissions for the Frida-server binary and run it.#chmod 755 frida-server<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18259 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Giving-executable-permission.png\" alt=\"Giving executable permission\" width=\"509\" height=\"170\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Giving-executable-permission.png 509w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Giving-executable-permission-300x100.png 300w\" sizes=\"(max-width: 509px) 100vw, 509px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 5: Giving executable permission<\/strong><\/p>\n<p>Now, open your desktop, enter the command mentioned below to test the connection with your Frida-server<\/p>\n<p>#frida-ps \u2013aU<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18257 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Android-application-process.png\" alt=\"Android application process\" width=\"400\" height=\"161\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Android-application-process.png 400w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Android-application-process-300x121.png 300w\" sizes=\"(max-width: 400px) 100vw, 400px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 6: Android application process<\/strong><\/p>\n<p>Our setup is now complete. So, let\u2019s begin using Frida for assessment.<\/p>\n<p>&nbsp;<\/p>\n<h3><strong>Test Case 1: Root Detection Bypass Using Frida<\/strong><\/h3>\n<h4><strong>What is root bypass?<\/strong><\/h4>\n<p>While developing an application, the developers integrate the root mechanism to stop the user from using it. When a user tries to install some application, it throws an error message and doesn\u2019t allow the application to install on a rooted device. We make changes in the code while performing the root bypass. This is done to restrict the app from shutting down as it further leads to application installation on the rooted android device.<\/p>\n<p>Let\u2019s look into a practical demonstration of a root detection bypass in the testing app. Open the testing app on your android phone and it says this device is rooted. You can\u2019t use this app.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-18263 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Device-is-rooted.png\" alt=\"Device is rooted\" width=\"376\" height=\"395\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Device-is-rooted.png 376w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Device-is-rooted-286x300.png 286w\" sizes=\"(max-width: 376px) 100vw, 376px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 7: Device is rooted<\/strong><\/p>\n<p>Below is the root detection protection source-code screenshot<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-18261 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Root-detection-implemented-in-code.png\" alt=\"Root detection implemented in code\" width=\"573\" height=\"308\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Root-detection-implemented-in-code.png 573w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Root-detection-implemented-in-code-300x161.png 300w\" sizes=\"(max-width: 573px) 100vw, 573px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 8: Root detection implemented in code<\/strong><\/p>\n<p>Using the code mentioned below, we bypass the root detection logic. The code is available <a href=\"https:\/\/codeshare.frida.re\/@dzonerzy\/fridantiroot\/\">here<\/a>.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-18262 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Javascript-code-for-root-detection-bypass.png\" alt=\"Javascript code for root detection bypass\" width=\"573\" height=\"389\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Javascript-code-for-root-detection-bypass.png 573w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Javascript-code-for-root-detection-bypass-300x204.png 300w\" sizes=\"(max-width: 573px) 100vw, 573px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 9: Javascript code for root detection bypass<\/strong><\/p>\n<p>Let\u2019s run this script with this command #frida \u2013U \u2013f com.example.app rootbypass.js script \u2013no-paus. It has successfully bypassed the root detection of the android app as shown in the below screenshot.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-18265 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Root-detection-bypassed.png\" alt=\"Root detection bypassed\" width=\"573\" height=\"315\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Root-detection-bypassed.png 573w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Root-detection-bypassed-300x165.png 300w\" sizes=\"(max-width: 573px) 100vw, 573px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 10: Root detection bypassed<\/strong><\/p>\n<p>&nbsp;<\/p>\n<h3><strong>Test Case 2: SSL Pinning Bypass Using Frida<\/strong><\/h3>\n<h4><strong>What is SSL Pinning?<\/strong><\/h4>\n<p><strong>SSL pinning<\/strong>\u00a0only acknowledges the predefined or valid public key or certificate for any application. It is an additional security layer that is used by the developer for secure app traffic. The application trusts the custom certificate and the app to interrupt the traffic. During the implementation of SSL pinning, the app does not validate the custom certificates and does not authorize the proxy tools to intercept the traffic.<\/p>\n<p>SSL pinning bypass we have to push two things into the android device:<\/p>\n<ul>\n<li>BurpSuite Certificate<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18266 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Pushing-burpsuite-certificate.png\" alt=\"Pushing burpsuite certificate\" width=\"479\" height=\"57\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Pushing-burpsuite-certificate.png 479w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Pushing-burpsuite-certificate-300x36.png 300w\" sizes=\"(max-width: 479px) 100vw, 479px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 11: Pushing burpsuite certificate <\/strong><\/p>\n<ul>\n<li>SSL Pinning Bypassed JavaScript (Frida script we can find <a href=\"https:\/\/codeshare.frida.re\/@pcipolloni\/universal-android-ssl-pinning-bypass-with-frida\/\">here<\/a>)<\/li>\n<\/ul>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18267 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/pushing-frida-script.png\" alt=\"pushing frida script\" width=\"520\" height=\"58\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/pushing-frida-script.png 520w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/pushing-frida-script-300x33.png 300w\" sizes=\"(max-width: 520px) 100vw, 520px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 12: pushing frida script <\/strong><\/p>\n<p>Now let\u2019s try to bypass the SSL Pinning of an android application. Firstly, we need to find out the id of our target application. Then, we will list all running services on devices including your application process.<\/p>\n<p>Now, run this command in your terminal &#8212; #frida-ps \u2013aU<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-18264 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Twitter-PID-and-package-name-identifier.png\" alt=\"Twitter PID and package name identifier\" width=\"485\" height=\"188\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Twitter-PID-and-package-name-identifier.png 485w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Twitter-PID-and-package-name-identifier-300x116.png 300w\" sizes=\"(max-width: 485px) 100vw, 485px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 13: Twitter PID and package name identifier<\/strong><\/p>\n<p>After that hook fridascript.js and certificate file into android device and run this command &#8211;<\/p>\n<p>\/\/frida -U -f &lt;your_application_package_name&gt; -l &lt;path_to_fridascript.js_on_your_computer&gt; &#8211;no-paus<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-18269 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/SSL-pinning-bypassed.png\" alt=\"SSL pinning bypassed\" width=\"573\" height=\"294\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/SSL-pinning-bypassed.png 573w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/SSL-pinning-bypassed-300x154.png 300w\" sizes=\"(max-width: 573px) 100vw, 573px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 14: SSL pinning bypassed<\/strong><\/p>\n<p>We have successfully bypassed the SSL Pinning and intercepted the traffic in Burp Suite.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-18270 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/Password-window.png\" alt=\"Password window\" width=\"246\" height=\"250\" \/><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"size-full wp-image-18268 aligncenter\" src=\"https:\/\/www.varutra.com\/wp-content\/uploads\/2022\/01\/All-request-traffic-in-Burp-Suite.png\" alt=\"All request traffic in Burp Suite\" width=\"573\" height=\"291\" srcset=\"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/All-request-traffic-in-Burp-Suite.png 573w, https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/All-request-traffic-in-Burp-Suite-300x152.png 300w\" sizes=\"(max-width: 573px) 100vw, 573px\" \/><\/p>\n<p style=\"text-align: center\"><strong>Fig 15: All request traffic in Burp Suite<\/strong><\/p>\n<p>&nbsp;<\/p>\n<h3><strong>Conclusion<\/strong><\/h3>\n<p>In this blog, you read about carrying out the android pentesting using Frida. There is penetration method like\u00a0<a href=\"https:\/\/www.varutra.com\/android-penetration-testing-with-drozer\/\">android penetration testing with drozer<\/a>,\u00a0<a href=\"https:\/\/www.varutra.com\/aws-pentesting-part-1\/\">AWS pentesting<\/a>, and much more that you can read in our\u00a0<a href=\"https:\/\/www.varutra.com\/blogs\/\">blog<\/a>\u00a0section.<\/p>\n<p>&nbsp;<\/p>\n<h3><strong>References:<\/strong><\/h3>\n<p><a href=\"https:\/\/codeshare.frida.re\/\"><strong>https:\/\/codeshare.frida.re\/<\/strong><\/a><\/p>\n<p><a href=\"https:\/\/httptoolkit.tech\/blog\/frida-certificate-pinning\/\"><strong>https:\/\/httptoolkit.tech\/blog\/frida-certificate-pinning\/<\/strong><\/a><\/p>\n<p><a href=\"https:\/\/arben.sh\/bugbounty\/Configuring-Frida-with-Burp-and-GenyMotion-to-bypass-SSL-Pinning\/\"><strong>https:\/\/arben.sh\/bugbounty\/Configuring-Frida-with-Burp-and-GenyMotion-to-bypass-SSL-Pinning\/<\/strong><\/a><\/p>\n<p><a href=\"https:\/\/www.youtube.com\/watch?v=dqA38-1UMxI\"><strong>https:\/\/www.youtube.com\/watch?v=dqA38-1UMxI<\/strong><\/a><\/p>\n<p><strong>\u00a0<\/strong><\/p>\n<p>Author,<\/p>\n<p>Rituraj Vishwakarma<\/p>\n<p>Associate Security Consultant,<\/p>\n<p>Attack &amp; Pentest Team,<\/p>\n<p>Varutra Consulting Pvt Ltd.<\/p>","protected":false},"excerpt":{"rendered":"<p>In this blog, we were going to see what Frida is and how to set it up in our systems. We will also perform android&#8230;<\/p>\n","protected":false},"author":4,"featured_media":18272,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"inline_featured_image":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[51],"tags":[597,450,596,595,355],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO Pro 4.9.8 - aioseo.com -->\n\t<meta name=\"description\" content=\"Frida is a dynamic code instrumentation toolkit that inject snippets of JavaScript or your own library into the native apps on your OS like iOS, Android, etc.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"kalpblogger\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO Pro (AIOSEO) 4.9.8\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Varutra Consulting\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"Android Pentesting Using Frida | Varutra Consulting\" \/>\n\t\t<meta property=\"og:description\" content=\"Frida is a dynamic code instrumentation toolkit that inject snippets of JavaScript or your own library into the native apps on your OS like iOS, Android, etc.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/\" \/>\n\t\t<meta property=\"article:tag\" content=\"android pen test\" \/>\n\t\t<meta property=\"article:tag\" content=\"android security\" \/>\n\t\t<meta property=\"article:tag\" content=\"frida\" \/>\n\t\t<meta property=\"article:tag\" content=\"oenetration testing\" \/>\n\t\t<meta property=\"article:tag\" content=\"pentesting\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-01-06T06:55:55+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-12-02T05:40:12+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n\t\t<meta name=\"twitter:title\" content=\"Android Pentesting Using Frida | Varutra Consulting\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Frida is a dynamic code instrumentation toolkit that inject snippets of JavaScript or your own library into the native apps on your OS like iOS, Android, etc.\" \/>\n\t\t<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t\t<meta name=\"twitter:data1\" content=\"kalpblogger\" \/>\n\t\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/#article\",\"name\":\"Android Pentesting Using Frida | Varutra Consulting\",\"headline\":\"Android Pentesting Using Frida\",\"author\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/author\\\/kalpblogger\\\/#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/#organization\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/Android-Pentesting-Using-FRIDA.png\",\"width\":1200,\"height\":627,\"caption\":\"Android Pentesting Using FRIDA\"},\"datePublished\":\"2022-01-06T12:25:55+05:30\",\"dateModified\":\"2022-12-02T11:10:12+05:30\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/#webpage\"},\"articleSection\":\"Android Security, android pen test, android security, frida, oenetration testing, pentesting\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/category\\\/android-security\\\/#listItem\",\"name\":\"Android Security\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/category\\\/android-security\\\/#listItem\",\"position\":2,\"name\":\"Android Security\",\"item\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/category\\\/android-security\\\/\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/#listItem\",\"name\":\"Android Pentesting Using Frida\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/#listItem\",\"position\":3,\"name\":\"Android Pentesting Using Frida\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/category\\\/android-security\\\/#listItem\",\"name\":\"Android Security\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/#organization\",\"name\":\"Varutra\",\"description\":\"Secure your digital world with our Cybersecurity services.\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/wp-content\\\/uploads\\\/2021\\\/11\\\/Varutra-Found-e1612984024606.jpg\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/#organizationLogo\"},\"image\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/#organizationLogo\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/author\\\/kalpblogger\\\/#author\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/author\\\/kalpblogger\\\/\",\"name\":\"kalpblogger\",\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5e96a9b330da7c941c1e39217a2fbe38?s=96&d=mm&r=g\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/#webpage\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/\",\"name\":\"Android Pentesting Using Frida | Varutra Consulting\",\"description\":\"Frida is a dynamic code instrumentation toolkit that inject snippets of JavaScript or your own library into the native apps on your OS like iOS, Android, etc.\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/author\\\/kalpblogger\\\/#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/author\\\/kalpblogger\\\/#author\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/wp-content\\\/uploads\\\/2022\\\/01\\\/Android-Pentesting-Using-FRIDA.png\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/#mainImage\",\"width\":1200,\"height\":627,\"caption\":\"Android Pentesting Using FRIDA\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/android-pentesting-using-frida\\\/#mainImage\"},\"datePublished\":\"2022-01-06T12:25:55+05:30\",\"dateModified\":\"2022-12-02T11:10:12+05:30\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/#website\",\"url\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/\",\"name\":\"Varutra Consulting\",\"description\":\"Secure your digital world with our Cybersecurity services.\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.varutra.com\\\/varutravrt3\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO Pro -->\r\n\t\t<title>Android Pentesting Using Frida | Varutra Consulting<\/title>\n\n","aioseo_head_json":{"title":"Android Pentesting Using Frida | Varutra Consulting","description":"Frida is a dynamic code instrumentation toolkit that inject snippets of JavaScript or your own library into the native apps on your OS like iOS, Android, etc.","canonical_url":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/#article","name":"Android Pentesting Using Frida | Varutra Consulting","headline":"Android Pentesting Using Frida","author":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/author\/kalpblogger\/#author"},"publisher":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/#organization"},"image":{"@type":"ImageObject","url":"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Android-Pentesting-Using-FRIDA.png","width":1200,"height":627,"caption":"Android Pentesting Using FRIDA"},"datePublished":"2022-01-06T12:25:55+05:30","dateModified":"2022-12-02T11:10:12+05:30","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/#webpage"},"isPartOf":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/#webpage"},"articleSection":"Android Security, android pen test, android security, frida, oenetration testing, pentesting"},{"@type":"BreadcrumbList","@id":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/www.varutra.com\/varutravrt3#listItem","position":1,"name":"Home","item":"https:\/\/www.varutra.com\/varutravrt3","nextItem":{"@type":"ListItem","@id":"https:\/\/www.varutra.com\/varutravrt3\/category\/android-security\/#listItem","name":"Android Security"}},{"@type":"ListItem","@id":"https:\/\/www.varutra.com\/varutravrt3\/category\/android-security\/#listItem","position":2,"name":"Android Security","item":"https:\/\/www.varutra.com\/varutravrt3\/category\/android-security\/","nextItem":{"@type":"ListItem","@id":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/#listItem","name":"Android Pentesting Using Frida"},"previousItem":{"@type":"ListItem","@id":"https:\/\/www.varutra.com\/varutravrt3#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/#listItem","position":3,"name":"Android Pentesting Using Frida","previousItem":{"@type":"ListItem","@id":"https:\/\/www.varutra.com\/varutravrt3\/category\/android-security\/#listItem","name":"Android Security"}}]},{"@type":"Organization","@id":"https:\/\/www.varutra.com\/varutravrt3\/#organization","name":"Varutra","description":"Secure your digital world with our Cybersecurity services.","url":"https:\/\/www.varutra.com\/varutravrt3\/","logo":{"@type":"ImageObject","url":"https:\/\/www.varutra.com\/wp-content\/uploads\/2021\/11\/Varutra-Found-e1612984024606.jpg","@id":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/#organizationLogo"},"image":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/#organizationLogo"}},{"@type":"Person","@id":"https:\/\/www.varutra.com\/varutravrt3\/author\/kalpblogger\/#author","url":"https:\/\/www.varutra.com\/varutravrt3\/author\/kalpblogger\/","name":"kalpblogger","image":{"@type":"ImageObject","url":"https:\/\/secure.gravatar.com\/avatar\/5e96a9b330da7c941c1e39217a2fbe38?s=96&d=mm&r=g"}},{"@type":"WebPage","@id":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/#webpage","url":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/","name":"Android Pentesting Using Frida | Varutra Consulting","description":"Frida is a dynamic code instrumentation toolkit that inject snippets of JavaScript or your own library into the native apps on your OS like iOS, Android, etc.","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/#website"},"breadcrumb":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/#breadcrumblist"},"author":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/author\/kalpblogger\/#author"},"creator":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/author\/kalpblogger\/#author"},"image":{"@type":"ImageObject","url":"https:\/\/www.varutra.com\/varutravrt3\/wp-content\/uploads\/2022\/01\/Android-Pentesting-Using-FRIDA.png","@id":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/#mainImage","width":1200,"height":627,"caption":"Android Pentesting Using FRIDA"},"primaryImageOfPage":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/#mainImage"},"datePublished":"2022-01-06T12:25:55+05:30","dateModified":"2022-12-02T11:10:12+05:30"},{"@type":"WebSite","@id":"https:\/\/www.varutra.com\/varutravrt3\/#website","url":"https:\/\/www.varutra.com\/varutravrt3\/","name":"Varutra Consulting","description":"Secure your digital world with our Cybersecurity services.","inLanguage":"en-US","publisher":{"@id":"https:\/\/www.varutra.com\/varutravrt3\/#organization"}}]},"og:locale":"en_US","og:site_name":"Varutra Consulting","og:type":"article","og:title":"Android Pentesting Using Frida | Varutra Consulting","og:description":"Frida is a dynamic code instrumentation toolkit that inject snippets of JavaScript or your own library into the native apps on your OS like iOS, Android, etc.","og:url":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/","article:tag":["android pen test","android security","frida","oenetration testing","pentesting"],"article:published_time":"2022-01-06T06:55:55+00:00","article:modified_time":"2022-12-02T05:40:12+00:00","twitter:card":"summary_large_image","twitter:title":"Android Pentesting Using Frida | Varutra Consulting","twitter:description":"Frida is a dynamic code instrumentation toolkit that inject snippets of JavaScript or your own library into the native apps on your OS like iOS, Android, etc.","twitter:label1":"Written by","twitter:data1":"kalpblogger","twitter:label2":"Est. reading time","twitter:data2":"4 minutes"},"aioseo_meta_data":{"post_id":"18252","title":"Android Pentesting Using Frida&nbsp;| Varutra Consulting","description":"Frida is a dynamic code instrumentation toolkit that inject snippets of JavaScript or your own library into the native apps on your OS like iOS, Android, etc.","keywords":[],"keyphrases":{"focus":{"keyphrase":"Android Pentesting Using Frida","score":59,"analysis":{"keyphraseInTitle":{"title":"Focus keyphrase in SEO title","description":"Focus keyphrase found in SEO title.","score":9,"maxScore":9,"error":0},"keyphraseInDescription":{"title":"Focus keyphrase in meta description","description":"Focus keyphrase not found in meta description.","score":3,"maxScore":9,"error":1},"keyphraseLength":{"title":"Focus keyphrase length","description":"Good job!","score":9,"maxScore":9,"error":0,"length":4},"keyphraseInURL":{"title":"Focus keyphrase in URL","description":"Focus keyphrase used in the URL.","score":5,"maxScore":5,"error":0},"keyphraseInIntroduction":{"title":"Focus keyphrase in introduction","description":"Your Focus keyphrase does not appear in the first paragraph. Make sure the topic is clear immediately.","score":3,"maxScore":9,"error":1},"keyphraseInSubHeadings":{"title":"Focus keyphrase in Subheadings","description":"Use your focus keyphrase more in your H2 and H3 subheadings.","score":3,"maxScore":9,"error":1},"keyphraseInImageAlt":{"title":"Focus keyphrase in image alt attributes","description":"Focus keyphrase not found in image alt attribute(s). Add an image with your Focus keyphrase as alt text.","score":3,"maxScore":9,"error":1}}},"additional":[{"keyphrase":"Android Pentesting","score":50,"analysis":{"keyphraseInDescription":{"title":"Keyphrase in meta description","description":"Keyphrase not found in meta description.","score":3,"maxScore":9,"error":1},"keyphraseLength":{"title":"Keyphrase length","description":"Good job!","score":9,"maxScore":9,"error":0,"length":2},"keyphraseInIntroduction":{"title":"Keyphrase in introduction","description":"Your Keyphrase does not appear in the first paragraph. Make sure the topic is clear immediately.","score":3,"maxScore":9,"error":1},"keyphraseInImageAlt":{"title":"Keyphrase in image alt attributes","description":"Keyphrase not found in image alt attribute(s). Add an image with your Keyphrase as alt text.","score":3,"maxScore":9,"error":1}}},{"keyphrase":"Frida","score":100,"analysis":{"keyphraseInDescription":{"title":"Keyphrase in meta description","description":"Keyphrase found in meta description.","score":9,"maxScore":9,"error":0},"keyphraseLength":{"title":"Keyphrase length","description":"Good job!","score":9,"maxScore":9,"error":0,"length":1},"keyphraseInIntroduction":{"title":"Keyphrase in introduction","description":"Your Keyphrase appears in the first paragraph. Well done!","score":9,"maxScore":9,"error":0},"keyphraseInImageAlt":{"title":"Keyphrase in image alt attributes","description":"Keyphrase found in image alt attribute(s).","score":9,"maxScore":9,"error":0}}},{"keyphrase":"android security","score":50,"analysis":{"keyphraseInDescription":{"title":"Keyphrase in meta description","description":"Keyphrase not found in meta description.","score":3,"maxScore":9,"error":1},"keyphraseLength":{"title":"Keyphrase length","description":"Good job!","score":9,"maxScore":9,"error":0,"length":2},"keyphraseInIntroduction":{"title":"Keyphrase in introduction","description":"Your Keyphrase does not appear in the first paragraph. Make sure the topic is clear immediately.","score":3,"maxScore":9,"error":1},"keyphraseInImageAlt":{"title":"Keyphrase in image alt attributes","description":"Keyphrase not found in image alt attribute(s). Add an image with your Keyphrase as alt text.","score":3,"maxScore":9,"error":1}}}]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":[],"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":"{\"article\":{\"articleType\":\"BlogPosting\"},\"course\":{\"name\":\"\",\"description\":\"\",\"provider\":\"\"},\"faq\":{\"pages\":[]},\"product\":{\"reviews\":[]},\"recipe\":{\"ingredients\":[],\"instructions\":[],\"keywords\":[]},\"software\":{\"reviews\":[],\"operatingSystems\":[]},\"webPage\":{\"webPageType\":\"WebPage\"}}","pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","local_seo":null,"limit_modified_date":false,"reviewed_by":null,"open_ai":null,"created":"2022-01-06 05:58:46","updated":"2026-05-24 10:08:44","ai":null,"breadcrumb_settings":null,"seo_analyzer_scan_date":"2026-05-22 11:56:53"},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.varutra.com\/varutravrt3\" title=\"Home\">Home<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t<a href=\"https:\/\/www.varutra.com\/varutravrt3\/category\/android-security\/\" title=\"Android Security\">Android Security<\/a>\n<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\tAndroid Pentesting Using Frida\n<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/www.varutra.com\/varutravrt3"},{"label":"Android Security","link":"https:\/\/www.varutra.com\/varutravrt3\/category\/android-security\/"},{"label":"Android Pentesting Using Frida","link":"https:\/\/www.varutra.com\/varutravrt3\/android-pentesting-using-frida\/"}],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/posts\/18252"}],"collection":[{"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/comments?post=18252"}],"version-history":[{"count":5,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/posts\/18252\/revisions"}],"predecessor-version":[{"id":20195,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/posts\/18252\/revisions\/20195"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/media\/18272"}],"wp:attachment":[{"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/media?parent=18252"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/categories?post=18252"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.varutra.com\/varutravrt3\/wp-json\/wp\/v2\/tags?post=18252"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}