new
- Add the
--inlineflag to theios heap execute jscommand, allowing for inline JavaScript evaluation on iOS heap objects. (956056a) - Add a new
--unzip-unicodeflag to the iOS IPA patcher to treat the IPA name as unicode. Thanks @Fabiano1107 (#309) - Add the ability to patch in a gadget configuration and script to Android APK's, making it possible to eternalise scripts without needing a computer. Note: This is an Android only feature for now and needs porting for iOS. For more information, please see: https://frida.re/docs/gadget/. Thanks @gergesh (#329)
- Improve the Android method watcher by dumping information about objects instead of simply showing
[object, object]for the argument. Thanks @arielmiki (#334) - Improve anti-frida evasion by using a different prefix for
.dexfiles generated byJava.registerClass(). An example patch to recompile the Android frida-server with the namefridarenamed tofreedacan be seen here. (d1035e5) - Add a new
android keystore watchcommand. This command will report usages of thejava.security.KeyStoreclass, revealing the password used when accessing items. (0513b2d)
fixes
- Fix
android hooking set return_valuecrashing when no optional overload is set. Thanks @root-intruder (#307) - Fix suggested package name for
jarsigneron Linux. Thanks @RomainL972 (#327) - Update the iOS biometrics bypass script to handle cases where applications check for an error rather than if a success status was returned. Thanks @gagnonca (#333)
- Android patcher improvements. This comes mostly by enforcing the use of
apktoolversion 2.4.1 and up, as well as by automatically running theempty-framework-dircommand before patching. Information about upgradingapktoolcan be found in the wiki here. (46288b5) - Fix Android root detection scripts that were pretty horribly broken 😂 (539fc30)
other
- Bump Python dependencies (e09e7bd)
- Bump agent dependencies (326b28e, ae91da0, 1b78cb3, d672f1a, 2ee2dda, 5583264)
- Remove support for Python 3.5 (1b198e8)
- Code cleanups. (be95b60, b63f6fb)