Skip to content

Instantly share code, notes, and snippets.

View DoranekoSystems's full-sized avatar
😸
meow

Kenjiro Ichise DoranekoSystems

😸
meow
View GitHub Profile
@DoranekoSystems
DoranekoSystems / dump.js
Created August 31, 2022 11:50
Generate windows syscall csv with Frida
const outputPath = "C::\\put_your_path\\syscall.csv";
var module = Process.getModuleByName("ntdll.dll");
var symbols = module.enumerateExports();
var csvString = "Name,Number\n";
for (var i = 0; i < symbols.length; i++) {
const sysName = symbols[i].name;
if (sysName.indexOf("Nt") == 0 && sysName.indexOf("Ntdll") == -1) {
const symAddr = symbols[i].address;
@DoranekoSystems
DoranekoSystems / enumsymbol.js
Created January 14, 2022 13:22
Symbol enumeration with frida on Windows.
//frida -l enumsymbol.js CalculatorApp.exe
function dump(pointer, length) {
var buf = Memory.readByteArray(pointer, length);
console.log(
hexdump(buf, {
offset: 0,
length: length,
header: true,
ansi: true,
})