fridaforge 0.3.0__tar.gz

fridaforge-0.3.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 noobexon1
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

fridaforge-0.3.0/PKG-INFO

@@ -0,0 +1,166 @@
+Metadata-Version: 2.4
+Name: fridaforge
+Version: 0.3.0
+Summary: Generate Frida scripts from IDA Pro, Binary Ninja, and Ghidra
+Author: noobexon1
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/noobexon1/FridaForge
+Project-URL: Issues, https://github.com/noobexon1/FridaForge/issues
+Keywords: frida,binary-ninja,ida-pro,ghidra,reverse-engineering
+Classifier: Programming Language :: Python :: 3
+Classifier: Operating System :: OS Independent
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Disassemblers
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Dynamic: license-file
+
+<div align="center">
+
+<img src="https://raw.githubusercontent.com/noobexon1/FridaForge/main/assets/logo.jpg" alt="FridaForge logo"/>
+
+**Generate Frida scripts directly from IDA Pro, Binary Ninja, and Ghidra.** ⚡
+
+[![GitHub release](https://img.shields.io/github/v/release/noobexon1/FridaForge)](https://github.com/noobexon1/FridaForge/releases)
+[![GitHub stars](https://img.shields.io/github/stars/noobexon1/FridaForge)](https://github.com/noobexon1/FridaForge/stargazers)
+[![GitHub last commit](https://img.shields.io/github/last-commit/noobexon1/FridaForge)](https://github.com/noobexon1/FridaForge/commits)
+[![GitHub issues](https://img.shields.io/github/issues/noobexon1/FridaForge)](https://github.com/noobexon1/FridaForge/issues)
+[![GitHub downloads](https://img.shields.io/github/downloads/noobexon1/FridaForge/total)](https://github.com/noobexon1/FridaForge/releases)
+[![Release](https://img.shields.io/github/actions/workflow/status/noobexon1/FridaForge/release.yml?label=release)](https://github.com/noobexon1/FridaForge/actions/workflows/release.yml)
+![IDA Pro](https://img.shields.io/badge/IDA%20Pro-Plugin-blue)
+![Binary Ninja](https://img.shields.io/badge/Binary%20Ninja-Plugin-orange)
+![Ghidra](https://img.shields.io/badge/Ghidra-Plugin-green)
+![Frida](https://img.shields.io/badge/Frida-Instrumentation-red)
+[![GitHub License](https://img.shields.io/github/license/noobexon1/FridaForge)](LICENSE)
+
+</div>
+
+## 📸 Examples
+
+**Generate a function hook** — right-click in the disassembly/pseudocode view and pick an action:
+
+![Generating a function hook from the FridaForge context menu](https://raw.githubusercontent.com/noobexon1/FridaForge/main/assets/Screenshot_1.jpg)
+
+**Get a ready-to-use Frida script** — copied straight to your clipboard:
+
+![The generated Frida hook script](https://raw.githubusercontent.com/noobexon1/FridaForge/main/assets/Screenshot_2.jpg)
+
+## ✨ Features
+
+Right-click (or hit a hotkey) in your disassembler to generate ready-to-use Frida snippets — the result is instantly copied to your clipboard.
+
+- 🧩 **Composable scripts** — snippets are independent but can be nested to build complex instrumentation with a few clicks
+- 🎯 **Context-aware** — scripts auto-fill module name, function address, section, and any other detail available from your current context
+- 🧰 **Three hosts, one experience** — identical features, hotkeys, and menus in IDA Pro, Binary Ninja, and Ghidra
+- 📋 **Clipboard integration** — generated scripts are copied the moment you run an action
+
+### Supported Actions
+
+#### 🪝 Hooks
+
+| Action | Description | Hotkey |
+|---|---|---|
+| Generate function hook | Intercept calls to the selected function, log entry/exit | `Shift+F` |
+| Generate dlopen hooks | Monitor `dlopen` (including Android variants) to detect module loading | `Shift+D` |
+
+#### 🧠 Memory
+
+| Action | Description | Hotkey |
+|---|---|---|
+| Modify section protection | Change memory protection of the section at the current address | `Shift+M` |
+
+#### 🩹 Patching
+
+| Action | Description | Hotkey |
+|---|---|---|
+| Negate cond branch (ARM64) | Flip the condition of an ARM64 conditional branch | `Shift+A` |
+| Negate cond branch (x86/x64) | Flip the condition of an x86/x64 conditional branch | `Shift+X` |
+
+## 🔧 How it Works
+
+Each feature follows a simple pipeline: a **Frida template** (`fridaforge/templates/`) provides the JavaScript skeleton with placeholders, a **command** (`fridaforge/commands/`) gathers context through a host-agnostic **Backend**, and a **generator** (`fridaforge/core/`) fills the template to produce the final script.
+
+The shared core knows nothing about IDA, Binary Ninja, or Ghidra. Each host lives in `hosts/` and provides a thin **adapter** that implements the `Backend` interface (data extraction, clipboard, menu + hotkey registration). Add a feature once and it works in all three.
+
+## 📦 Installation
+
+Binary Ninja users can install straight from the Extension Manager. For everything else, grab the archive for your tool from the [latest release](https://github.com/noobexon1/FridaForge/releases). There's one per host — `fridaforge-binja-<version>.zip`, `fridaforge-ida-<version>.zip`, and `fridaforge-ghidra-<version>.zip`.
+
+### 🟠 Binary Ninja
+
+**Extension Manager (recommended):** open the Extension Manager (**Plugins → Manage Plugins**), search for **FridaForge**, and click **Install**. The shared core (`fridaforge` on PyPI) is installed automatically. Restart Binary Ninja if prompted.
+
+**Manual install:**
+
+1. Find your user plugins directory by running this in Binary Ninja's Python console:
+   ```python
+   binaryninja.user_plugin_path()
+   ```
+2. Extract `fridaforge-binja-<version>.zip` into that directory so that `<binja user plugins>/fridaforge/` exists.
+3. Restart Binary Ninja.
+
+> Switching from a manual install to the Extension Manager? Delete `<binja user plugins>/fridaforge/` first. Otherwise both copies load and every command appears twice.
+
+### 🔵 IDA Pro
+
+1. **Prerequisites:**
+   - IDA Pro (tested with 9.0, but any version with Python 3 and `idaapi` should work).
+   - PyQt5 for clipboard functionality (usually bundled with IDA's Python).
+2. Locate your IDA Pro user directory by running this in IDA's Python console:
+    ```python
+    import ida_diskio; print(ida_diskio.get_user_idadir())
+    ```
+    If not already there, create a `plugins` directory in the user directory. This is where the plugin will be installed.
+3. Extract `fridaforge-ida-<version>.zip` into the `plugins` directory.
+4. Restart IDA Pro. The plugin loads automatically. You should see FridaForge as an option after right-clicking in the disassembly view.
+
+### 🐉 Ghidra
+
+1. **Prerequisites:** Ghidra **11.3 or later** (PyGhidra ships bundled; no extra install needed).
+2. Unzip `fridaforge-ghidra-<version>.zip` into a folder of your choice.
+3. In Ghidra's CodeBrowser, open **Window → Script Manager**, click **Manage Script Directories** (the toolbar icon), and add the unzipped folder.
+4. The five actions appear under **Tools → FridaForge** (categorized into Hooks / Memory / Patching) and respond to the hotkeys `Shift+F/D/M/A/X`. The generated Frida script is copied to your clipboard; `[FridaForge]` messages print to the Ghidra console.
+
+> Ghidra actions are delivered as menu items + hotkeys (not a nested right-click popup), which is the supported integration path for PyGhidra scripts.
+
+### 🧱 Script Composition
+
+Snippets are designed to be independent building blocks. You can nest scripts inside each other — for example, hook a function, negate a conditional branch on entry, and restore it on exit. Complex instrumentation from a few clicks.
+
+## 🛠️ Building from Source
+
+```bash
+pip install pytest build
+pytest -v                     # run the host-agnostic test suite
+python build/build.py         # writes dist/fridaforge-binja-*.zip, dist/fridaforge-ida-*.zip and dist/fridaforge-ghidra-*.zip
+python -m build               # builds the fridaforge core package (sdist + wheel) published to PyPI
+```
+
+Builds are deterministic — the same source produces byte-identical archives.
+
+To release, run `python build/bump_version.py X.Y.Z`, commit, and push tag `vX.Y.Z`. CI publishes the core to PyPI, then attaches the three archives to a GitHub release.
+
+## 🤝 Contributing
+
+Contributions welcome! Got a useful Frida snippet? Turn it into a template so everyone can use it.
+
+1. Fork the repository.
+2. Create a new branch for your feature or fix.
+3. Make your changes (and add a test — the core is fully unit-tested without needing a host).
+4. Submit a pull request.
+
+| Adding... | Where |
+|---|---|
+| New Frida snippet | `fridaforge/templates/` (JS template) + `fridaforge/core/` (generator) + `fridaforge/commands/` (command) |
+| Host-specific behavior | `hosts/binja/` or `hosts/ida/` |
+
+Each command and generator lives in its own file — easy to contribute without merge conflicts.
+
+## 🗺️ Roadmap
+
+See [open issues](https://github.com/noobexon1/FridaForge/issues) for planned features and known bugs.
+
+## 📄 License
+
+[MIT](LICENSE)

fridaforge-0.3.0/README.md

@@ -0,0 +1,148 @@
+<div align="center">
+
+<img src="https://raw.githubusercontent.com/noobexon1/FridaForge/main/assets/logo.jpg" alt="FridaForge logo"/>
+
+**Generate Frida scripts directly from IDA Pro, Binary Ninja, and Ghidra.** ⚡
+
+[![GitHub release](https://img.shields.io/github/v/release/noobexon1/FridaForge)](https://github.com/noobexon1/FridaForge/releases)
+[![GitHub stars](https://img.shields.io/github/stars/noobexon1/FridaForge)](https://github.com/noobexon1/FridaForge/stargazers)
+[![GitHub last commit](https://img.shields.io/github/last-commit/noobexon1/FridaForge)](https://github.com/noobexon1/FridaForge/commits)
+[![GitHub issues](https://img.shields.io/github/issues/noobexon1/FridaForge)](https://github.com/noobexon1/FridaForge/issues)
+[![GitHub downloads](https://img.shields.io/github/downloads/noobexon1/FridaForge/total)](https://github.com/noobexon1/FridaForge/releases)
+[![Release](https://img.shields.io/github/actions/workflow/status/noobexon1/FridaForge/release.yml?label=release)](https://github.com/noobexon1/FridaForge/actions/workflows/release.yml)
+![IDA Pro](https://img.shields.io/badge/IDA%20Pro-Plugin-blue)
+![Binary Ninja](https://img.shields.io/badge/Binary%20Ninja-Plugin-orange)
+![Ghidra](https://img.shields.io/badge/Ghidra-Plugin-green)
+![Frida](https://img.shields.io/badge/Frida-Instrumentation-red)
+[![GitHub License](https://img.shields.io/github/license/noobexon1/FridaForge)](LICENSE)
+
+</div>
+
+## 📸 Examples
+
+**Generate a function hook** — right-click in the disassembly/pseudocode view and pick an action:
+
+![Generating a function hook from the FridaForge context menu](https://raw.githubusercontent.com/noobexon1/FridaForge/main/assets/Screenshot_1.jpg)
+
+**Get a ready-to-use Frida script** — copied straight to your clipboard:
+
+![The generated Frida hook script](https://raw.githubusercontent.com/noobexon1/FridaForge/main/assets/Screenshot_2.jpg)
+
+## ✨ Features
+
+Right-click (or hit a hotkey) in your disassembler to generate ready-to-use Frida snippets — the result is instantly copied to your clipboard.
+
+- 🧩 **Composable scripts** — snippets are independent but can be nested to build complex instrumentation with a few clicks
+- 🎯 **Context-aware** — scripts auto-fill module name, function address, section, and any other detail available from your current context
+- 🧰 **Three hosts, one experience** — identical features, hotkeys, and menus in IDA Pro, Binary Ninja, and Ghidra
+- 📋 **Clipboard integration** — generated scripts are copied the moment you run an action
+
+### Supported Actions
+
+#### 🪝 Hooks
+
+| Action | Description | Hotkey |
+|---|---|---|
+| Generate function hook | Intercept calls to the selected function, log entry/exit | `Shift+F` |
+| Generate dlopen hooks | Monitor `dlopen` (including Android variants) to detect module loading | `Shift+D` |
+
+#### 🧠 Memory
+
+| Action | Description | Hotkey |
+|---|---|---|
+| Modify section protection | Change memory protection of the section at the current address | `Shift+M` |
+
+#### 🩹 Patching
+
+| Action | Description | Hotkey |
+|---|---|---|
+| Negate cond branch (ARM64) | Flip the condition of an ARM64 conditional branch | `Shift+A` |
+| Negate cond branch (x86/x64) | Flip the condition of an x86/x64 conditional branch | `Shift+X` |
+
+## 🔧 How it Works
+
+Each feature follows a simple pipeline: a **Frida template** (`fridaforge/templates/`) provides the JavaScript skeleton with placeholders, a **command** (`fridaforge/commands/`) gathers context through a host-agnostic **Backend**, and a **generator** (`fridaforge/core/`) fills the template to produce the final script.
+
+The shared core knows nothing about IDA, Binary Ninja, or Ghidra. Each host lives in `hosts/` and provides a thin **adapter** that implements the `Backend` interface (data extraction, clipboard, menu + hotkey registration). Add a feature once and it works in all three.
+
+## 📦 Installation
+
+Binary Ninja users can install straight from the Extension Manager. For everything else, grab the archive for your tool from the [latest release](https://github.com/noobexon1/FridaForge/releases). There's one per host — `fridaforge-binja-<version>.zip`, `fridaforge-ida-<version>.zip`, and `fridaforge-ghidra-<version>.zip`.
+
+### 🟠 Binary Ninja
+
+**Extension Manager (recommended):** open the Extension Manager (**Plugins → Manage Plugins**), search for **FridaForge**, and click **Install**. The shared core (`fridaforge` on PyPI) is installed automatically. Restart Binary Ninja if prompted.
+
+**Manual install:**
+
+1. Find your user plugins directory by running this in Binary Ninja's Python console:
+   ```python
+   binaryninja.user_plugin_path()
+   ```
+2. Extract `fridaforge-binja-<version>.zip` into that directory so that `<binja user plugins>/fridaforge/` exists.
+3. Restart Binary Ninja.
+
+> Switching from a manual install to the Extension Manager? Delete `<binja user plugins>/fridaforge/` first. Otherwise both copies load and every command appears twice.
+
+### 🔵 IDA Pro
+
+1. **Prerequisites:**
+   - IDA Pro (tested with 9.0, but any version with Python 3 and `idaapi` should work).
+   - PyQt5 for clipboard functionality (usually bundled with IDA's Python).
+2. Locate your IDA Pro user directory by running this in IDA's Python console:
+    ```python
+    import ida_diskio; print(ida_diskio.get_user_idadir())
+    ```
+    If not already there, create a `plugins` directory in the user directory. This is where the plugin will be installed.
+3. Extract `fridaforge-ida-<version>.zip` into the `plugins` directory.
+4. Restart IDA Pro. The plugin loads automatically. You should see FridaForge as an option after right-clicking in the disassembly view.
+
+### 🐉 Ghidra
+
+1. **Prerequisites:** Ghidra **11.3 or later** (PyGhidra ships bundled; no extra install needed).
+2. Unzip `fridaforge-ghidra-<version>.zip` into a folder of your choice.
+3. In Ghidra's CodeBrowser, open **Window → Script Manager**, click **Manage Script Directories** (the toolbar icon), and add the unzipped folder.
+4. The five actions appear under **Tools → FridaForge** (categorized into Hooks / Memory / Patching) and respond to the hotkeys `Shift+F/D/M/A/X`. The generated Frida script is copied to your clipboard; `[FridaForge]` messages print to the Ghidra console.
+
+> Ghidra actions are delivered as menu items + hotkeys (not a nested right-click popup), which is the supported integration path for PyGhidra scripts.
+
+### 🧱 Script Composition
+
+Snippets are designed to be independent building blocks. You can nest scripts inside each other — for example, hook a function, negate a conditional branch on entry, and restore it on exit. Complex instrumentation from a few clicks.
+
+## 🛠️ Building from Source
+
+```bash
+pip install pytest build
+pytest -v                     # run the host-agnostic test suite
+python build/build.py         # writes dist/fridaforge-binja-*.zip, dist/fridaforge-ida-*.zip and dist/fridaforge-ghidra-*.zip
+python -m build               # builds the fridaforge core package (sdist + wheel) published to PyPI
+```
+
+Builds are deterministic — the same source produces byte-identical archives.
+
+To release, run `python build/bump_version.py X.Y.Z`, commit, and push tag `vX.Y.Z`. CI publishes the core to PyPI, then attaches the three archives to a GitHub release.
+
+## 🤝 Contributing
+
+Contributions welcome! Got a useful Frida snippet? Turn it into a template so everyone can use it.
+
+1. Fork the repository.
+2. Create a new branch for your feature or fix.
+3. Make your changes (and add a test — the core is fully unit-tested without needing a host).
+4. Submit a pull request.
+
+| Adding... | Where |
+|---|---|
+| New Frida snippet | `fridaforge/templates/` (JS template) + `fridaforge/core/` (generator) + `fridaforge/commands/` (command) |
+| Host-specific behavior | `hosts/binja/` or `hosts/ida/` |
+
+Each command and generator lives in its own file — easy to contribute without merge conflicts.
+
+## 🗺️ Roadmap
+
+See [open issues](https://github.com/noobexon1/FridaForge/issues) for planned features and known bugs.
+
+## 📄 License
+
+[MIT](LICENSE)

fridaforge-0.3.0/fridaforge/__init__.py

@@ -0,0 +1,5 @@
+"""FridaForge: generate Frida scripts from IDA Pro and Binary Ninja."""
+
+from fridaforge._version import __version__
+
+__all__ = ["__version__"]

fridaforge-0.3.0/fridaforge/_version.py

@@ -0,0 +1 @@
+__version__ = "0.3.0"

fridaforge-0.3.0/fridaforge/backend.py

@@ -0,0 +1,74 @@
+"""Host-agnostic backend interface for FridaForge commands."""
+
+from abc import ABC, abstractmethod
+from dataclasses import dataclass
+from enum import Enum, auto
+
+
+class ContextKind(Enum):
+    """The host context a command needs to run."""
+
+    GLOBAL = auto()    # only the module is needed
+    ADDRESS = auto()   # the current address is needed
+    FUNCTION = auto()  # the current function is needed
+
+
+@dataclass(frozen=True)
+class FunctionRef:
+    """A resolved reference to a function in the loaded binary."""
+
+    start: int
+    name: str
+
+
+class Backend(ABC):
+    """The port each host (Binary Ninja, IDA) must implement."""
+
+    @abstractmethod
+    def get_module_name(self) -> str:
+        """Return the loaded module's base file name."""
+
+    @abstractmethod
+    def get_image_base(self) -> int:
+        """Return the image base address of the loaded binary."""
+
+    @abstractmethod
+    def get_current_address(self) -> int | None:
+        """Return the currently selected address, or ``None``."""
+
+    @abstractmethod
+    def get_current_function(self) -> FunctionRef | None:
+        """Return the currently selected function, or ``None``."""
+
+    @abstractmethod
+    def get_section_name_at(self, addr: int) -> str | None:
+        """Return the name of the section/segment containing *addr*."""
+
+    @abstractmethod
+    def get_instruction_mnemonic(self, addr: int) -> str | None:
+        """Return the mnemonic of the instruction at *addr*, or ``None``."""
+
+    @abstractmethod
+    def copy_to_clipboard(self, text: str) -> bool:
+        """Copy *text* to the system clipboard. Return success."""
+
+    @abstractmethod
+    def log_info(self, msg: str) -> None:
+        """Emit an informational message in the host's idiom."""
+
+    @abstractmethod
+    def log_warn(self, msg: str) -> None:
+        """Emit a warning message in the host's idiom."""
+
+    # --- concrete helpers shared by all hosts ---
+
+    def get_relative_address(self, addr: int) -> str:
+        """Return *addr*'s offset from the image base as a hex string."""
+        return hex(addr - self.get_image_base())
+
+    def _resolve_function_name(self, start: int, raw_name: str) -> str:
+        """Return *raw_name*, or a ``sub_<offset>`` fallback when empty."""
+        if raw_name:
+            return raw_name
+        relative_address = self.get_relative_address(start)
+        return f"sub_{relative_address.removeprefix('0x')}"

fridaforge-0.3.0/fridaforge/commands/__init__.py

@@ -0,0 +1,24 @@
+"""FridaForge command registry."""
+
+from fridaforge.commands.base import Command
+from fridaforge.commands.hook_dlopen_functions import DlopenHooksCommand
+from fridaforge.commands.hook_function import FunctionHookCommand
+from fridaforge.commands.modify_section_protection import (
+    ModifySectionProtectionCommand,
+)
+from fridaforge.commands.negate_cond_branch_arm64 import (
+    NegateArm64CondBranchCommand,
+)
+from fridaforge.commands.negate_cond_branch_x86 import (
+    NegateX86CondBranchCommand,
+)
+
+ALL_COMMANDS: list[Command] = [
+    FunctionHookCommand(),
+    DlopenHooksCommand(),
+    ModifySectionProtectionCommand(),
+    NegateArm64CondBranchCommand(),
+    NegateX86CondBranchCommand(),
+]
+
+__all__ = ["Command", "ALL_COMMANDS"]

fridaforge-0.3.0/fridaforge/commands/base.py

@@ -0,0 +1,31 @@
+"""Base class for host-agnostic FridaForge commands."""
+
+from abc import ABC, abstractmethod
+
+from fridaforge.backend import Backend, ContextKind
+
+
+class Command(ABC):
+    """A single user-facing feature, independent of the host.
+
+    Subclasses set the metadata class attributes and implement
+    :meth:`run`, which pulls data from the *backend* and copies the
+    generated snippet to the clipboard.
+    """
+
+    id: str
+    description: str
+    category: str
+    hotkey: str | None = None
+    context: ContextKind
+
+    @abstractmethod
+    def run(self, backend: Backend) -> None:
+        """Execute the command against the given backend."""
+
+    def _deliver(self, backend: Backend, snippet: str) -> None:
+        """Copy the snippet to the clipboard and report the outcome."""
+        if backend.copy_to_clipboard(snippet):
+            backend.log_info("Frida snippet copied to clipboard.")
+        else:
+            backend.log_warn("Failed to copy snippet to clipboard.")

fridaforge-0.3.0/fridaforge/commands/hook_dlopen_functions.py

@@ -0,0 +1,22 @@
+"""Command: generate Frida dlopen-family hooks."""
+
+from fridaforge.backend import Backend, ContextKind
+from fridaforge.commands.base import Command
+from fridaforge.core import DlopenHookGenerator
+
+
+class DlopenHooksCommand(Command):
+    id = "hook_dlopen_functions"
+    description = "Generate dlopen hooks (Basic for Android native libs)"
+    category = "Hooks"
+    hotkey = "Shift+D"
+    context = ContextKind.GLOBAL
+
+    def run(self, backend: Backend) -> None:
+        module_name = backend.get_module_name()
+        if not module_name:
+            backend.log_warn("Could not determine the module name.")
+            return
+
+        snippet = DlopenHookGenerator().generate(module_name)
+        self._deliver(backend, snippet)

fridaforge-0.3.0/fridaforge/commands/hook_function.py

@@ -0,0 +1,26 @@
+"""Command: generate a Frida function hook."""
+
+from fridaforge.backend import Backend, ContextKind
+from fridaforge.commands.base import Command
+from fridaforge.core import FunctionHookGenerator
+
+
+class FunctionHookCommand(Command):
+    id = "hook_function"
+    description = "Generate function hook"
+    category = "Hooks"
+    hotkey = "Shift+F"
+    context = ContextKind.FUNCTION
+
+    def run(self, backend: Backend) -> None:
+        func = backend.get_current_function()
+        if func is None:
+            backend.log_warn("No function at the current location.")
+            return
+
+        module_name = backend.get_module_name()
+        relative_address = backend.get_relative_address(func.start)
+        snippet = FunctionHookGenerator().generate(
+            module_name, relative_address, func.name
+        )
+        self._deliver(backend, snippet)

fridaforge-0.3.0/fridaforge/commands/modify_section_protection.py

@@ -0,0 +1,39 @@
+"""Command: generate a Frida section protection modification."""
+
+from fridaforge.backend import Backend, ContextKind
+from fridaforge.commands.base import Command
+from fridaforge.core import ModifySectionProtectionGenerator
+
+
+class ModifySectionProtectionCommand(Command):
+    id = "modify_section_protection"
+    description = "Modify current section permissions"
+    category = "Memory"
+    hotkey = "Shift+M"
+    context = ContextKind.ADDRESS
+
+    def run(self, backend: Backend) -> None:
+        addr = backend.get_current_address()
+        if addr is None:
+            backend.log_warn("Could not determine the current address.")
+            return
+
+        section_name = backend.get_section_name_at(addr)
+        if not section_name:
+            backend.log_warn(
+                f"Could not determine the containing section for {hex(addr)}."
+            )
+            return
+
+        if not section_name.startswith("."):
+            backend.log_warn(
+                f"Address is not in a standard section. "
+                f"(Section name: {section_name})"
+            )
+            return
+
+        module_name = backend.get_module_name()
+        snippet = ModifySectionProtectionGenerator().generate(
+            module_name, section_name
+        )
+        self._deliver(backend, snippet)

fridaforge-0.3.0/fridaforge/commands/negate_cond_branch_arm64.py

@@ -0,0 +1,42 @@
+"""Command: negate an ARM64 conditional branch."""
+
+from fridaforge.backend import Backend, ContextKind
+from fridaforge.commands.base import Command
+from fridaforge.core import NegateArm64CondBranchGenerator
+
+ARM64_COND_BRANCHES = {
+    "b.eq", "b.ne", "b.hs", "b.lo", "b.cs",
+    "b.mi", "b.pl", "b.vs", "b.vc",
+    "b.hi", "b.ls", "b.ge", "b.lt",
+    "b.gt", "b.le", "tbz", "tbnz",
+    "cbz", "cbnz",
+}
+
+
+class NegateArm64CondBranchCommand(Command):
+    id = "negate_cond_branch_arm64"
+    description = "Negate cond branch instruction (ARM64)"
+    category = "Patching"
+    hotkey = "Shift+A"
+    context = ContextKind.ADDRESS
+
+    def run(self, backend: Backend) -> None:
+        addr = backend.get_current_address()
+        if addr is None:
+            backend.log_warn("Could not determine the current address.")
+            return
+
+        mnemonic = (backend.get_instruction_mnemonic(addr) or "").lower()
+        if mnemonic not in ARM64_COND_BRANCHES:
+            backend.log_warn(
+                f"Instruction at {hex(addr)} ('{mnemonic}') "
+                f"is not a recognized ARM64 conditional branch."
+            )
+            return
+
+        module_name = backend.get_module_name()
+        relative_address = backend.get_relative_address(addr)
+        snippet = NegateArm64CondBranchGenerator().generate(
+            module_name, relative_address
+        )
+        self._deliver(backend, snippet)

fridaforge-0.3.0/fridaforge/commands/negate_cond_branch_x86.py

@@ -0,0 +1,44 @@
+"""Command: negate an x86 conditional branch."""
+
+from fridaforge.backend import Backend, ContextKind
+from fridaforge.commands.base import Command
+from fridaforge.core import NegateX86CondBranchGenerator
+
+X86_COND_BRANCHES = {
+    "je", "jne", "jz", "jnz",
+    "ja", "jnbe", "jae", "jnb", "jnc",
+    "jb", "jnae", "jc", "jbe", "jna",
+    "jg", "jnle", "jge", "jnl",
+    "jl", "jnge", "jle", "jng",
+    "jo", "jno", "js", "jns",
+    "jp", "jpe", "jnp", "jpo",
+}
+
+
+class NegateX86CondBranchCommand(Command):
+    id = "negate_cond_branch_x86"
+    description = "Negate cond branch instruction (x86)"
+    category = "Patching"
+    hotkey = "Shift+X"
+    context = ContextKind.ADDRESS
+
+    def run(self, backend: Backend) -> None:
+        addr = backend.get_current_address()
+        if addr is None:
+            backend.log_warn("Could not determine the current address.")
+            return
+
+        mnemonic = (backend.get_instruction_mnemonic(addr) or "").lower()
+        if mnemonic not in X86_COND_BRANCHES:
+            backend.log_warn(
+                f"Instruction at {hex(addr)} ('{mnemonic}') "
+                f"is not a recognized x86 conditional branch."
+            )
+            return
+
+        module_name = backend.get_module_name()
+        relative_address = backend.get_relative_address(addr)
+        snippet = NegateX86CondBranchGenerator().generate(
+            module_name, relative_address
+        )
+        self._deliver(backend, snippet)