0

I want to detect hook behavior of MSHookFunction on Android but no idea yet. This is Cydia Substrate I use in my test app https://github.com/Breathleas/Android-Hooking-Template-Cydia-Substrate/tree/master/jni/Substrate

After complete function hook. I tried comparing the .text section between the in-memory module and the shared object lib file but couldn't find the trampoline function. Here is the Frida script on the codeshare that I referenced https://codeshare.frida.re/@lichao890427/find-android-hook/. The origin function is hooked but .text section data in memory is same with shared object lib file.

Improve this question
2
  • For questions about reverse engineering there is a special stack exchange site reverseengineering.stackexchange.com. when it comes to process and memory analysis you may get more attention there especially as the number of questions is way lower as here on SO. Commented Jan 14, 2023 at 21:47
  • Thank you, I will move the question to Stack exchange Commented Jan 16, 2023 at 2:48
Related questions
1
Restrict input value from paste with regex in React
2
How to implement regex to react on change Event?
1
React js - apply Regex in forms
Load 7 more related questions Show fewer related questions

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Start asking to get answers

Find the answer to your question by asking.

Ask question

Explore related questions

See similar questions with these tags.