Frida agent, using Xamarin Mono APIs to access a static field and dump its value
| import { MonoApiHelper, MonoApi } from 'frida-mono-api' | |
| const domain = MonoApi.mono_get_root_domain() | |
| // Get a handle to the SeeingAI.Core assembly | |
| let coreAssembly = MonoApi.mono_assembly_load_with_partial_name(Memory.allocUtf8String("SeeingAI.Core"), NULL) | |
| let coreImage = MonoApi.mono_assembly_get_image(coreAssembly) | |
| // Retrieve class metadata | |
| let helperClass = MonoApiHelper.ClassFromName(coreImage, "SeeingAI.Network.SignatureHelper") | |
| // Retrieve field metadata and value | |
| let secretField = MonoApiHelper.ClassGetFieldFromName(helperClass, "Secret") | |
| let secretValue = MonoApiHelper.FieldGetValueObject(secretField, NULL, domain) | |
| // Dump array to screen | |
| var secretValueLength = MonoApi.mono_array_length(secretValue) | |
| console.log(hexdump(MonoApi.mono_array_addr_with_size(secretValue, 1, 0), { length: secretValueLength })) |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment