节约时间，从小细节入手快速frida

frida快速上手

## frida快捷启动安装

frida入手很难，不如直接来对照我的frida命令

### frida快速命令执行顺序

启动frida

```java
adb shell
su
/data/local/tmp/frida-server-16.0.1-android-arm64	frida名可以改成自定义的名字

frida转发并获取当前的包名

命令行执行
python hook自动转发.py
python frida获取进程.py
    
想要继续简化可以将两个py脚本合二为一
    具体脚本参照下文

常见frida命令大全

1）查看安装了哪些包

conda list
2)查看当前存在哪些虚拟环境

conda env list 
conda info -e

conda create -n flask python=3.7
pip install frida==16.0.1  -i https://pypi.tuna.tsinghua.edu.cn/simple
pip install frida-tools==12.0.1 -i https://pypi.tuna.tsinghua.edu.cn/simple

adb push frida-server-16.0.1-android-arm64 /data/local/tmp/
chmod 777 /data/local/tmp/frida-server-16.0.1-android-arm64

adb push strong-frida-server-16.0.1-android-arm64 /data/local/tmp/
chmod 777 /data/local/tmp/strong-frida-server-16.0.1-android-arm64
  

su 
setenforce 0
/data/local/tmp/frida-server-16.0.1-android-arm64
/data/local/tmp/strong-frida-server-16.0.1-android-arm64

adb pull /sdcard/Alarms ./


端口转发
adb forward tcp:27042 tcp:27042
adb forward tcp:27043 tcp:27043
adb shell "su -c chmod 755 /data/local/tmp/frida-server"
adb shell mount -o rw，remount /system 
adb shell mount -o rw,remount -t auto /
/data/local/tmp/frida-server-16.0.1-android-arm64

每次输入很麻烦，启动快速脚本

python hook自动转发.py

import subprocess
# subprocess.getoutput("adb connect 127.0.0.1:62001")
subprocess.getoutput("adb forward tcp:27042 tcp:27042")
subprocess.getoutput("adb forward tcp:27043 tcp:27043")
# subprocess.getoutput("adb shell /data/local/tmp/frida-server-16.0.1-android-x86_64")
# subprocess.getoutput('adb shell "su -c chmod 755 /data/local/tmp/frida-server-16.0.1-android-arm64"')
# subprocess.getoutput("adb shell /data/local/tmp/frida-server-16.0.1-android-arm64")

直接在pycharm终端里使用python hook自动转发.py命令形成快速转发节约时间

python frida获取进程.py

在frida开始前，往往需要探知apk包名

import frida
#获取设备信息
redv = frida.get_remote_device()

print(redv)
# processes = redv.enumerate_processes()
# for process in processes:
#     print(process)
#获取前台正在运行的app
front_app = redv.get_frontmost_application()
print(front_app)

esses:

print(process)

#获取前台正在运行的app
front_app = redv.get_frontmost_application()
print(front_app)

借助python frida获取进程.py命令可以快速得到当前手机前台正在运行的程序