After receiving quite a few reports from users of www.frida.re of kernel panic upon attaching the second time to a process, I finally got around to debugging the kernel to figure out what was going on.

A few years back I found myself reverse-engineering a vendor lock-in handshake in a proprietary application. It was clear to me: I needed a code tracer.

In my mind the ultimate code tracer should be able to trace code with minimal slowdown, it should provide…

Let’s tap into the internals of native processes with our own custom-made debugger.

Collect IP addresses

Let’s tap into the internals of native processes with our own custom-made debugger.

Hook socket APIs

Let’s tap into the internals of native processes with our own custom-made debugger.

Communicate with the remote agent