Frida獲取函數導出表內存dump so

背景

so庫被加殼了，且導出表被和諧了

frida解決

        var exports = Module.enumerateExportsSync("libxx.so");
        var libxx = Process.getModuleByName("libxx.so");
        send("*****************************************************");
        send("name: " +libxx.name);
        send("base: " +libxx.base);
        send("size: " +ptr(libxx.size));
   
        var exports = Module.enumerateExportsSync("libxx.so");
        for(var i = 0; i < exports.length; i++) {
                send(exports[i].name + ": " + (exports[i].address - libxiaoyu.base));
        }
        // dump so
        var file_path = "/sdcard/" + libxx.name + "_" + libxx.base + "_" + ptr(libxiaoyu.size) + ".so";
        var file_handle = new File(file_path, "wb");
        if (file_handle && file_handle != null) {
            Memory.protect(ptr(libxx.base), libxx.size, 'rwx');
            var libso_buffer = ptr(libxiaoyu.base).readByteArray(libxx.size);
            file_handle.write(libso_buffer);
            file_handle.flush();
            file_handle.close();
            console.log("[dump]:", file_path);
        }

效果