IOS Frida 常用脚本

1. 调用堆栈

console.log("bt:" + Thread.backtrace(this.context,Backtracer.ACCURATE).map(DebugSymbol.fromAddress).join('\n\t'));

Hook 调用，修改返回值

// Get a reference to the openURL selector

var openURL = ObjC.classes.UIApplication["- openURL:"];

// Intercept the method

Interceptor.attach(openURL.implementation, {

onEnter: function(args) {

// 方法执行前调用

// As this is an ObjectiveC method, the arguments are as follows:

// 0. 'self'

// 1. The selector (openURL:)

// 2. The first argument to the openURL selector