MCPcopy Create free account

hub / github.com/darvincisec/DetectFrida / functions

Functions54 in github.com/darvincisec/DetectFrida

↓ 5 callersFunctionmy_close
app/src/main/c/syscalls.h:22
↓ 5 callersFunctionmy_strstr
app/src/main/c/mylibc.h:56
↓ 4 callersFunctionmy_openat
* System calls such as file operations, sleep are converted to syscalls to avoid easy bypass * through readymade scripts hooking onto libc calls. */
app/src/main/c/syscalls.h:7
↓ 4 callersFunctionmy_read
app/src/main/c/syscalls.h:12
↓ 3 callersFunction__syscall3
app/src/main/c/arch/x86_64/syscall_arch.h:26
↓ 3 callersFunctionmy_strlen
app/src/main/c/mylibc.h:32
↓ 3 callersFunctionread_one_line
app/src/main/c/native-lib.c:282
↓ 2 callersFunction__syscall1
app/src/main/c/arch/x86/syscall_arch.h:117
↓ 2 callersFunction__syscall4
app/src/main/c/arch/x86_64/syscall_arch.h:34
↓ 2 callersFunctionchecksum
app/src/main/c/native-lib.c:314
↓ 2 callersFunctionmy_atoi
app/src/main/c/mylibc.h:101
↓ 2 callersFunctionmy_lseek
app/src/main/c/syscalls.h:17
↓ 2 callersFunctionmy_memset
app/src/main/c/mylibc.h:76
↓ 2 callersFunctionmy_strcmp
app/src/main/c/mylibc.h:91
↓ 2 callersFunctionmy_strncmp
app/src/main/c/mylibc.h:41
↓ 1 callersFunction__syscall2
app/src/main/c/arch/x86/syscall_arch.h:124
↓ 1 callersFunctiondetect_frida_memdiskcompare
app/src/main/c/native-lib.c:389
↓ 1 callersFunctiondetect_frida_namedpipe
app/src/main/c/native-lib.c:361
↓ 1 callersFunctiondetect_frida_threads
app/src/main/c/native-lib.c:324
↓ 1 callersFunctionfetch_checksum_of_library
app/src/main/c/native-lib.c:128
↓ 1 callersFunctionmy_nanosleep
app/src/main/c/syscalls.h:27
↓ 1 callersFunctionmy_readlinkat
app/src/main/c/syscalls.h:32
↓ 1 callersFunctionmy_strlcpy
app/src/main/c/mylibc.h:8
↓ 1 callersFunctionparse_proc_maps_to_fetch_path
app/src/main/c/native-lib.c:99
↓ 1 callersFunctionscan_executable_segments
app/src/main/c/native-lib.c:211
Function__syscall0
app/src/main/c/arch/arm64-v8a/syscall_arch.h:32
Function__syscall0
app/src/main/c/arch/armeabi-v7a/syscall_arch.h:59
Function__syscall0
app/src/main/c/arch/x86/syscall_arch.h:110
Function__syscall0
app/src/main/c/arch/x86_64/syscall_arch.h:4
Function__syscall1
app/src/main/c/arch/arm64-v8a/syscall_arch.h:40
Function__syscall1
app/src/main/c/arch/armeabi-v7a/syscall_arch.h:67
Function__syscall1
app/src/main/c/arch/x86_64/syscall_arch.h:11
Function__syscall2
app/src/main/c/arch/arm64-v8a/syscall_arch.h:47
Function__syscall2
app/src/main/c/arch/armeabi-v7a/syscall_arch.h:75
Function__syscall2
app/src/main/c/arch/x86_64/syscall_arch.h:18
Function__syscall3
app/src/main/c/arch/arm64-v8a/syscall_arch.h:55
Function__syscall3
app/src/main/c/arch/armeabi-v7a/syscall_arch.h:84
Function__syscall4
app/src/main/c/arch/arm64-v8a/syscall_arch.h:64
Function__syscall4
app/src/main/c/arch/armeabi-v7a/syscall_arch.h:94
Function__syscall5
app/src/main/c/arch/arm64-v8a/syscall_arch.h:75
Function__syscall5
app/src/main/c/arch/armeabi-v7a/syscall_arch.h:105
Function__syscall5
app/src/main/c/arch/x86/syscall_arch.h:153
Function__syscall5
app/src/main/c/arch/x86_64/syscall_arch.h:43
Function__syscall6
app/src/main/c/arch/arm64-v8a/syscall_arch.h:87
Function__syscall6
app/src/main/c/arch/armeabi-v7a/syscall_arch.h:117
Function__syscall6
app/src/main/c/arch/x86/syscall_arch.h:166
Function__syscall6
app/src/main/c/arch/x86_64/syscall_arch.h:53
Methodaddition_isCorrect
()
app/src/test/java/com/darvin/security/ExampleUnitTest.java:13
Functiondetect_frida_loop
app/src/main/c/native-lib.c:193
Functiondetectfrida
Upon loading the library, this function annotated as constructor starts executing
app/src/main/c/native-lib.c:81
Functionmy_exit
Not Used
app/src/main/c/syscalls.h:44
Functionmy_tgkill
Not Used
app/src/main/c/syscalls.h:38
MethodonCreate
(Bundle savedInstanceState)
app/src/main/java/com/darvin/security/MainActivity.java:13
MethoduseAppContext
()
app/src/androidTest/java/com/darvin/security/ExampleInstrumentedTest.java:19