Skip to content

Instantly share code, notes, and snippets.

@sudhackar
Last active June 5, 2024 02:42
Show Gist options
  • Save sudhackar/f560e5122ebffe32f308d32107147bbc to your computer and use it in GitHub Desktop.
Save sudhackar/f560e5122ebffe32f308d32107147bbc to your computer and use it in GitHub Desktop.
frida socket hook
'use strict';
var connect = new NativeFunction(
Module.findExportByName(null, "connect"),
'int',
['int', 'pointer', 'int']
);
Interceptor.replace(connect, new NativeCallback(function (sockfd, addr, addrlen) {
console.log(sockfd, addr, addrlen);
var buf = Memory.readByteArray(addr, addrlen);
console.log(hexdump(buf, { offset: 0, length: addrlen, header: true, ansi: true }));
var result = connect(sockfd, addr, addrlen);
console.log("connect()");
var buf = Memory.readByteArray(addr, addrlen);
console.log(hexdump(buf, { offset: 0, length: addrlen, header: true, ansi: true }));
return result;
}, 'int', ['int', 'pointer', 'int']));
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment