- 确认系统环境和依赖性完备,Frida的IL2CPP桥需要Python3环境和Frida模块作为依赖项。
- 为了使用Frida-il2cpp-bridge,需要先编译il2cpp_bridge.so文件,并添加到Frida的Python模块路径中。编译命令、库路径、安装路径如下:
$ gcc -Wall -shared -o il2cpp_bridge.so il2cpp_bridge.c $(pkg-config --cflags --libs frida-2.0) -I/opt/Unity/Editor/Data/il2cpp/libil2cpp/include -L/opt/Unity/Editor/Data/PlaybackEngines/AndroidPlayer/Tools -lil2cpp -Wl,-rpath,/opt/Unity/Editor/Data/PlaybackEngines/AndroidPlayer/Tools
$ cp il2cpp_bridge.so /usr/lib/python3.7/site-packages/frida_tools/il2cpp
- 修改Frida的Python包路径,使其可以加载该模块
$ echo "/usr/lib/python3.7/site-packages/frida_tools/il2cpp" >> /usr/local/lib/python3.7/site-packages/frida.pth
- 在设备或模拟器上运行待调试的IL2CPP应用程序,并连接到Frida客户端
$ frida -U -l il2cpp_bridge.js com.example.app