Frida Interactive Console

Frida-interactive.txt

=Frida interactive console=
C:\Python27\Scripts>frida notepad.exe
     ____
    / _  |   Frida 12.7.22 - A world-class dynamic instrumentation toolkit
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at https://www.frida.re/docs/home/

[Local::notepad.exe]-> Process
{
    "arch": "x64",
    "codeSigningPolicy": "optional",
    "id": 6680,
    "pageSize": 4096,
    "platform": "windows",
    "pointerSize": 8
}
[Local::notepad.exe]-> Process.id
6680
[Local::notepad.exe]-> Process.enumerateModules()
[
    {
        "base": "0x7ff6599a0000",
        "name": "notepad.exe",
        "path": "C:\\WINDOWS\\system32\\notepad.exe",
        "size": 274432
    },
    {
        "base": "0x7ffec9e20000",
        "name": "ntdll.dll",
        "path": "C:\\WINDOWS\\SYSTEM32\\ntdll.dll",
        "size": 2019328</nowiki>

[Local::notepad.exe]-> Process.enumerateThreads().length
6
[Local::notepad.exe]-> a = Module.enumerateExports("kernel32.dll")
[Local::notepad.exe]-> a.forEach(function(entry) {
  console.log(entry.name);
});
<SNIP>
lstrcpyn
lstrcpynA
lstrcpynW
lstrlen
lstrlenA
lstrlenW
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetSystemTime
timeGetTime
uaw_lstrcmpW
uaw_lstrcmpiW
uaw_lstrlenW
uaw_wcschr
uaw_wcscpy
uaw_wcsicmp
uaw_wcslen
uaw_wcsrchr
<SNIP>