编辑此页

macOS 示例

本页为社区译文；如有疑义，请以英文原文为准。 英文原文

要在 macOS 上设置 Frida，你需要授权 Frida 使用 task_for_pid 访问目标进程。

如果你以本地用户身份通过 GUI 运行 Frida 工具（例如从 Terminal.app 启动）， taskgate 将提示你授权该进程。

你可能还需要禁用系统完整性保护。

Objective-C 基础知识

import frida
import sys

def on_message(message, data):
    print("[{}] => {}".format(message, data))

def main(target_process):
    session = frida.attach(target_process)

    script = session.create_script("""
        const appWillFinishLaunching = ObjC.classes.NSApplicationDelegate['- applicationWillFinishLaunching:'];
        Interceptor.attach(appWillFinishLaunching.implementation, {
          onEnter(args) {
            // As this is an Objective-C method, the arguments are as follows:
            // 0. 'self'
            // 1. The selector (applicationWillFinishLaunching:)
            // 2. The first argument to this method
            const notification = new ObjC.Object(args[2]);

            // Convert it to a JS string and log it
            const notificationStr = notification.absoluteString().toString();
            console.log('Will finish launching with notification: ' + notificationStr);
          }
        });
    """)
    script.on("message", on_message)
    script.load()
    print("[!] Ctrl+D or Ctrl+Z to detach from instrumented program.\n\n")
    sys.stdin.read()
    session.detach()


if __name__ == "__main__":
    main("Safari")

上一页

下一页