Android Frida hooking: disabling FLAG_SECURE
Tags
attack-pattern: Hooking - T1617 Python - T1059.006 Tool - T1588.002 Hooking - T1179 Hooking
Show in Graph
Common Information
Type Value
UUID cf87ef24-2bc2-4b04-80c4-322f016415ec
Fingerprint fe298999fc47072d
Analysis status DONE
Considered CTI value 0
Text language
Published April 29, 2020, 7:47 a.m.
Added to db Jan. 18, 2023, 11:40 p.m.
Last updated Nov. 18, 2024, 2:36 a.m.
Headline Android Frida hooking: disabling FLAG_SECURE
Title Android Frida hooking: disabling FLAG_SECURE
Detected Hints/Tags/Attributes 32/1/19
Source URLs
Redirection Url
Details Source https://www.securify.nl/en/blog/SFY20191103/android-frida-hooking_-disabling-flag_secure.html
URL Provider
Details Provider Source level domain
Details securify.nl www.securify.nl
Attributes
Details Type #Events CTI Value
Details Domain 62 
stackoverflow.com
Details Domain 53 
developer.android.com
Details Domain 1 
setflags.call
Details Domain 6 
com.example.app
Details Domain 6 
www.frida.re
Details Domain 188 
com.android
Details Domain 52 
android.app
Details File 1 
layoutparams.html
Details File 365 
console.log
Details File 1 
usual_flagsecure_disable.js
Details File 1 
run_flagsecure_disable.js
Details File 1 
env.js
Details File 1 
class-factory.js
Details File 3 
android.js
Details File 4 
java.reg
Details File 1 
disable_secure_flag.js
Details Url 1 
https://stackoverflow.com/a/9822607
Details Url 1 
https://developer.android.com/reference/android/view/windowmanager.layoutparams.html#flag_secure
Details Url 3 
https://www.frida.re/docs/home