52 lines
1.8 KiB
Markdown
52 lines
1.8 KiB
Markdown
|
# frida-deepfreeze-rs
|
||
|
|
|
||
|
|
Have you ever written a frida script this good, that you wanted to make it permanent?
|
||
|
|
Well, now you can!
|
||
|
|
|
||
|
|
frida-deepfreeze-rs is a tool that allows you to convert your frida scripts into
|
||
|
|
either a standalone executable that when called with a PID injects itself and runs
|
||
|
|
the script or a shared library that can be somehow injected to a process and runs
|
||
|
|
the script.
|
||
|
|
|
||
|
|
All desktop platforms are supported (Windows, Linux, macOS).
|
||
|
|
|
||
|
|
## Usage
|
||
|
|
|
||
|
|
You're gonna have to compile the tool yourself as the frida script gets embedded
|
||
|
|
at compile time.
|
||
|
|
|
||
|
|
You only need a working cargo installation to compile it, it's quite simple.
|
||
|
|
|
||
|
|
You can feed your script either as a string using the `FRIDA_CODE` environment
|
||
|
|
variable or as a file using the `FRIDA_CODE_FILE` environment variable.
|
||
|
|
|
||
|
|
### Standalone executable
|
||
|
|
|
||
|
|
```bash
|
||
|
|
git clone https://github.com/dzervas/frida-deepfreeze-rs
|
||
|
|
FRIDA_CODE='console.log("Hello world from frida-deepfreeze-rs!")' cargo run --bin standalone -- 1234
|
||
|
|
```
|
||
|
|
|
||
|
|
The binary is located at `target/debug/standalone` (`.exe` for windows).
|
||
|
|
|
||
|
|
### Shared library
|
||
|
|
|
||
|
|
```bash
|
||
|
|
git clone https://github.com/dzervas/frida-deepfreeze-rs
|
||
|
|
FRIDA_CODE='console.log("Hello world from frida-deepfreeze-rs!")' cargo build --lib
|
||
|
|
LD_PRELOAD=target/debug/libfrida_deepfreeze_rs.so cat
|
||
|
|
# rundll32.exe target/debug/frida_deepfreeze_rs.dll,inject_self 1234 (windows equivalent)
|
||
|
|
```
|
||
|
|
|
||
|
|
The resulting library is located at `target/debug/libfrida_deepfreeze_rs.so`
|
||
|
|
(`.dll` for windows). You can inject it using your favorite injector.
|
||
|
|
|
||
|
|
There are two exported functions:
|
||
|
|
|
||
|
|
```c
|
||
|
|
void inject(uint32_t pid); // Run the frida script in the process with the given pid
|
||
|
|
void inject_self(); // Run the frida script in the process that called the function
|
||
|
|
```
|
||
|
|
|
||
|
|
By default, on load the library will call `inject_self()`.
|