A03
Frida on AndroidPending
A Frida gadget or server in the app process raises hooking_frida.
Pendingandroid
How to read this page
A scenario is one test case: prepare the environment, run the steps, then compare the expected result (written before the run) with the observed result (copied from the run, with screenshots).
- A03 · A
- Run on a real phone that's been attacked or modified — rooted, jailbroken, hooked or hidden.
- Pending
- Not run yet. The expected result is written down; there is no observed result.
Why it matters
Frida is the most common tool for bypassing app security at runtime.
Environment
- Tool
- Frida gadget injected into the APK, or frida-server on a rooted device
Setup
Prepare the environment.Then run the steps.
- 01Inject the Frida gadget (re-signs the APK) or attach frida-server.
Steps
What to run.What to read.
- 01Run the check.
Expected result · written before the run
Status: compromised1 signal.
A re-packaged APK also raises tamper_signature_mismatch when configured.
Observed result
Not run yet.No observed result.
Checks this scenario covers
Every check this test case touches — including ones that aren't expected to fire here. The expected and observed results above say which ones should and did. Each links to how the check works.