This repository contains a collection of Frida scripts for performing security tests on Android applications. It includes a modular loader (loader.js) that facilitates the execution of multiple scripts simultaneously.
The included loader.js dynamically loads all scripts inside the /scripts/ directory, so you don’t need to manually include each one.
You can enable/disable specific scripts by modifying the loader array inside loader.js.
| Script | Purpose |
|---|---|
bypass_ssl.js |
Bypass SSL pinning in applications using OkHttp |
detect_root.js |
Prevents detection of rooted devices |
hook_password.js |
Hook to checkPassword method to monitor passwords |
native_strstr_hook.js |
Intercepts calls to the native function strstr |
emulator_bypass.js |
Hides emulator indicators |
prefs_hook.js |
Manipulates SharedPreferences to activate hidden functions |
force_login.js |
Forces user authentication |
block_system_exit.js |
Block calls to System.exit() in Java and the native exit() function in C/C++ to prevent the app from closing |
-
Clone the repository:
git clone https://github.com/MilesBellum/Android-Security.git cd Android-Security -
Connect your Android device and make sure Frida is installed and running. See the FRIDA file if you need to install and configure it on your machine.
-
Run the loader:
frida -U -n com.package.name -l loader.js
Replace
com.package.namewith the package name of the application you want to analyze.
This project is for educational purposes only. See the DISCLAIMER file for more details.
This project is licensed under the MIT license. See the LICENSE file for more details.
Questions? Suggestions? Feel free to fork and contribute! 😄