IOS Frida 常用脚本

1. 调用堆栈

console.log("bt:" + Thread.backtrace(this.context,Backtracer.ACCURATE).map(DebugSymbol.fromAddress).join('\n\t'));

Hook 调用，修改返回值

// Get a reference to the openURL selectorvar openURL = ObjC.classes.UIApplication["- openURL:"];// Intercept the methodInterceptor.attach(openURL.implementation, {onEnter: function(args) {// 方法执行前调用// As this is an ObjectiveC method, the arguments are as follows:// 0. 'self'// 1. The selector (openURL:)// 2. The first argument to the openURL selector