• Stars
    star
    126
  • Rank 284,543 (Top 6 %)
  • Language
    Swift
  • Created over 1 year ago
  • Updated over 1 year ago

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

An iOS app that lets you practice your Frida skills

logo

Frida iOS Playground

An iOS app that lets you practice your Frida skills. This app provides you with a bunch of different tasks to complete using Frida.

Installing the IPA

  • Jailbroken device: Push the IPA to your device and install via Filza / TrollStore.
  • Non-jailbroken device: Since this application is meant to train your Frida skills, you'll first have to inject the Frida gadget. The easiest way is to use objection's patchipa command. Note that this is only possible on a macOS device.

Preview

logo

Challenges

Basic (solutions)

  • Print parameter (int)
  • Print parameter (NSNumber)
  • Print parameter (NSString)
  • Replace parameter
  • Print return value (string)
  • Replace return value
  • Print return value (bytearray)
  • Call function on object
  • Call function with arguments on object
  • Find HiddenVault instance
  • Call secret function of HiddenVault
  • Modify ByteArray

Advanced (solutions)

  • Switch implementation (ObjC.implement)
  • Switch implementation (Interceptor.replace)
  • Hook exported function
  • Hook unexported function
  • Reading pointers
  • Hotpatch assembly

Interact with app (solutions)

  • Show a UIAlertController
  • Intercept KeyChain item
  • Read stored KeyChain item
  • Biometric authentication
  • NSUserDefaults
  • NSUserDefaults - Read full file

Detect Frida / Jailbreak (solutions)

  • Detect frida-server on port 27042
  • Detect suspicious libraries
  • Detect packed FridaGadget

Swift (solutions)

  • Intercept function (short String)
  • Intercept function (large String)
  • Call Swift function
  • Call nonstatic Swift function

Challenges (solutions)

  • Enter the correct PIN
  • Enter the correct password
  • Solve every challenge at once

FAQ

I have a different solution

That's definitely possible. Many challenges can be solved in different ways. If you have a different solution that uses a different approach, please open an issue or PR.

I can cheat / reuse solutions / ...

The app is built in a way that makes it easy to add challenges without the overhead of creating unique functions for each challenge. The goal is to learn, not just to get the SUCCESS popup. There's even a challenge to see if you can find a universal solution for each challenge.

I have suggestions for challenges / found a bug

Great! Please open an issue or PR.

More Repositories

1

MagiskTrustUserCerts

A Magisk/KernelSU module that automatically adds user certificates to the system root CA store
Shell
1,519
star
2

posh-dsc-windows-hardening

Windows OS Hardening with PowerShell DSC
PowerShell
257
star
3

disable-flutter-tls-verification

A Frida script that disables Flutter's TLS verification
C++
241
star
4

CobaltWhispers

CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process injection, persistence and more, leveraging direct syscalls (SysWhispers2) to bypass EDR/AV
C
218
star
5

ee-outliers

Open-source framework to detect outliers in Elasticsearch events
Python
205
star
6

binsnitch

Detect silent (unwanted) changes to files on your system
Python
153
star
7

pyCobaltHound

pyCobaltHound is an Aggressor script extension for Cobalt Strike which aims to provide a deep integration between Cobalt Strike and Bloodhound.
Python
136
star
8

evtx-hunter

evtx-hunter helps to quickly spot interesting security-related activity in Windows Event Viewer (EVTX) files.
Python
125
star
9

Interceptor

Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space
C++
115
star
10

brown-bags

C#
108
star
11

IOXY

MQTT intercepting proxy
Go
97
star
12

decompile-py2exe

Decompile py2exe Python 3 generated EXEs
Python
92
star
13

DInvisibleRegistry

DInvisibleRegistry
C#
81
star
14

blogposts

A repo to house files for our blogposts on blog.nviso.eu
C++
60
star
15

cs2br-bof

C
59
star
16

codasm

Payload encoding utility to effectively lower payload entropy.
Python
53
star
17

cyber-security-llm-agents

A collection of agents that use Large Language Models (LLMs) to perform tasks common on our day to day jobs in cyber security.
Jupyter Notebook
52
star
18

nviso-cti

YARA
40
star
19

nexus_5_bootloader_unpacker

A bootloader imgdata unpacker for Nexus 4, 5 and 7 smartphones as well as imgdata tool for Nexus 5.
C
25
star
20

FileSearcher

C#
22
star
21

logalert.py

Smart piping of command output to email for alerting.
Python
21
star
22

DLLoader

C++
16
star
23

SEC599-Resources

16
star
24

SEC599

SEC599 supporting GitHub repository
Shell
15
star
25

VerifiedBootRPi3

Verified Boot for RPi3
14
star
26

cobalt-strike-notifier

Python
13
star
27

YARA

Repository of YARA rules developed by NVISO
11
star
28

ansible-velociraptor

Ansible role for Velociraptor EDR
9
star
29

cloud-security-automation

PowerShell scripts used in the "Incident response in the cloud/ foggy with a ray of sunshine" conference talk
PowerShell
8
star
30

ansible-sysmon

Ansible role for sysmon
7
star
31

ansible-auditbeat

Ansible role for auditbeat install
7
star
32

ansible-thehive

Ansible role for installing The Hive & Cortex
6
star
33

BitSight-Automation-Tool

BitSight Automation was developed to automate certain manual procedures and extract information such as ratings, assets, findings, etc. This tool also provides the possibility to collaborate with Scheduled Tasks and cronjobs.
Python
6
star
34

ansible-windowslogconfig

Ansible role for configuring Windows security logs
5
star
35

ansible-caldera

Ansible role for MITRE caldera
5
star
36

assemblyline-service-cape

Assemblyline service build for CAPE's API
Python
4
star
37

ansible-elk

Ansible role for ELK stack install
4
star
38

ansible-winlogbeat

Ansible role for WinLogBeat
4
star
39

assemblyline-service-python-exe-unpacker

Python exe unpacker service
Python
3
star
40

ansible-covenant

Ansible role for Covenant
3
star
41

assemblyline-service-urlscanio

URLScan.io AL service
Python
3
star
42

assemblyline-service-clamav

Assemblyline service which submits a file to ClamAV and displays the result
Python
2
star
43

assemblyline-service-msg-extractor

Simple MSG extractor AssemblyLine service
Python
2
star
44

ansible-nexusrepo

Ansible role for Nexus Repository OSS
2
star
45

assemblyline-service-steg-finder

AssemblyLine service which scans for embedded data in image using StegExpose
Python
2
star
46

assemblyline-service-malware-bazaar

Assemblyline service fetching Malware Bazaar report
Python
2
star
47

caldex

Caldera exportation plugin to the MITRE ATT&CKβ„’ Navigator.
Python
2
star
48

assemblyline-service-autoit-ripper

AutoIt unpacker service
Python
1
star
49

assemblyline-service-unfurl

Assemblyline service parsing a submitted URL to unshorten it.
Python
1
star
50

cortex.xsoar

The cortex.xsoar collection includes Ansible modules to help automate the management of Palo Alto Cortex XSOAR.
Python
1
star