绕过frida特征检测

本文配合大佬编译的去特征版frida使用

https://github.com/hzzheyang/strongR-frida-android
下载server-启动方式与正常server一致

使用大佬编译好的去特征frida配合这个frida脚本spawn启动,不保证对每个app有效

function fridaCheckPass() {
    var pfn_strstr = Module.findExportByName("libc.so", "strstr");
    Interceptor.attach(pfn_strstr, {
        onEnter: function (args) {
            var str1 = Memory.readCString(args[0]);
            var str2 = Memory.readCString(args[1]);
            if (str2.indexOf("tmp") !== -1 ||
                str2.indexOf("frida") !== -1 ||
                str2.indexOf("gdbus") !== -1 ||
                str2.indexOf("gum-js-loop") !== -1 ||
                str2.indexOf("gmain") !== -1 ||
                str2.indexOf("linjector") !== -1
            ) {
                console.log("str1:%s - str2:%s\n", str1, str2);
                this.hook = true;
            }
        },
        onLeave: function (retval) {
            if (this.hook) {
                retval.replace(0);
            }
        }
    });
}

启动方式

frida -U --no-pause -f com.xxx.xxx -l hook.js