FridaBareboneConfig

Barebone backend configuration. Pass it to frida_device_manager_add_barebone_device() to add a device of your own.

The default Barebone device, whose ID is ‘barebone’, is instead configured through the FRIDA_BAREBONE_CONFIG environment variable, which should point to the filesystem path of a JSON-encoded configuration file.

Example JSON configurations:

1. Using all defaults: { “connection”: { “host”: “127.0.0.1”, “port”: 3333 } }

2. Using a physical memory allocator: { “connection”: { “host”: “127.0.0.1”, “port”: 9000 }, “allocator”: { “mode”: “physical”, “physical_base”: “0x8ec9b4000” } }

3. Using target-specific allocation functions: { “connection”: { “host”: “127.0.0.1”, “port”: 9000 }, “allocator”: { “mode”: “target-functions”, “alloc_function”: “0xfffffff007a3c278”, “free_function”: “0xfffffff007a3c338” } }

4. Spelling out the arguments those functions take, for the ones that don’t take the size first, such as NT’s ExAllocatePoolWithTag(pool_type, size, tag): { “allocator”: { “mode”: “target-functions”, “alloc_function”: “0x804e1000”, “alloc_arguments”: [ “0”, “size”, “0x64697246” ], “free_function”: “0x804e2000”, “free_arguments”: [ “address”, “0x64697246” ] } }

5. Injecting a remote agent: { “agent”: { “path”: “/path/to/target/aarch64-unknown-none/release/frida-barebone-agent”, “transport”: { “type”: “hostlink”, “qmp”: “unix:/path/to/qmp.sock”, “bus”: “frida-vserial.0”, “mmio”: “0xa003e00”, “irq”: 47 } }, “image”: { “file”: “/path/to/kernelcache.research.iphone12b”, “base”: “0xfffffff007004000” } }.