python-android.py

import frida, sys

native_hook_code = """
Java.perform(function() {
  Privilege = Java.user("com.android.engineeringmode.qualcomm.Privilege");
  Privilege.escalate.implementation = function(v) {
    console.log('escalate Done: ');
    return true;
  };
  
  Privilege = Java.user("com.android.engineeringmode.qualcomm.Privilege");
  Privilege.isEscalated.implementation = function(v) {
    console.log('isEscalated Done: ');
    return false;
  };
  
  Privilege = Java.user("com.android.engineeringmode.qualcomm.Privilege");
  Privilege.recover.implementation = function(v) {
    console.log('recover Done: ');
  };
});
"""

def on_message(message, data):
  if message['type'] == 'send':
    print "[*] {0}".format(message['payload'])
  else:
    print message

process = frida.get_usb_device().attach('com.android.engineeringmode')
script = process.create_script(native_hook_code)
script.on('message', on_message)
script.load()
sys.stdin.read()