frida-ceserver
frida-based ceserver.
iOS analysis is possible with Cheat Engine.
Original by Dark Byte.
Usage
Install python library.
pip install packaging
Install frida on iOS.
python main.py Cydia
# or
python main.py com.saurik.Cydia
Then, connect to the Cheat Engine in network mode.
The debugger is not available!
Extended function
Run the frida javascript code from within AutoAssembler.
If a string is written to an address between 0 and 100, it will be interpreted as frida javascript code and executed.
The address is also mapped to a script number.
If you write "UNLOAD" with the same number, the script will be canceled.
{$lua}
[enable]
local jscode = [[
console.log("HELLO,WORLD!");
]]
writeString(0,jscode)
[disable]
writeString(0,[[UNLOAD]])
BinUtils
ARM64 Disassembler/Assembler
By default, Cheat Engine does not implement the ARM64 disassembler.
This can be supported by using the extension BinUtils.
Download android-ndk, change path_to_android_ndk in the script below to the destination and put it in the autorun folder.
Select View->BinUtils->ARM64 BinUtils to change the disassembly to ARM64.
local arm64config={}
arm64config.Name="ARM64"
arm64config.Description="BinUtils"
arm64config.Architecture="aarch64"
arm64config.Path=[[path_to_android_ndk\toolchains\aarch64-linux-android-4.9\prebuilt\windows-x86_64\bin]]
arm64config.Prefix="aarch64-linux-android-"
registerBinUtil(arm64config)
Config
target
If you specify it, you don't need to specify the name of the target app in the argument.
isMobile
0
:Linux
1
:Android or iOS
mode
spawn is only valid for mobile device.
0
:spawn
1
:attach
arch
0
:i386
1
:x86_64
2
:arm
3
:aarch64
fix_module_size
It is not possible to get the exact size of some modules in iOS.
In this case, the module size will be corrected to the actual file size in order to get a larger module size.
true
:Enable the above function
false
:Disable the above function
ceversion
Specify the version of the cheat engine itself.
Since the part related to communication between the main unit and the ceserver differs depending on the version, the setting is necessary.