The reason I've put my own steps here is a lot of caveats aiming to save time in future because of buggy versions of different tools, and because I'd like to escape all unnecessary steps I usually tend to follow. Method 1: Inject a libfrida-gadget.so as a dependency to a native library (JNI) inside of APK

If you decide to analyze some APK, but you haven't got one yet, you have a bunch of options then. Google Play doesn't allow you to download APK directly. How it basically works Note: where to get an APK Method 2: If APK doesn't contain a native library, then you can inject System.loadLibrary bytecode.īasic use case: you've got a third-party APK (Android application package), and you want to debug/trace/explore/reverse-engineer it, and you have your personal Android phone which you don't want to root.

Method 1 : If targeted APK contains any native library ( /lib/arm64-v8a/libfromapk.so), then you can inject libfrida-gadget.so as a dependency into the native library.You have 2 options to inject Frida's Gadget to Android application:

Download native root checker