Data

Tools

Indexes

Applications

Experiments

Open Source Science

Recent Releases of fritap

fritap - friTap 1.3.8.0

friTap – Release Notes (v1.3.8.0)

What's New

  • 🧪 Cronet Enhancements
    • Improved pattern and library support for Cronet-based libraries on Android. For certain Cronet libraries (e.g., cronet_libcrypto.so), we can confidently determine that the underlying BoringSSL implementation is not statically linked. To enhance the overall performance of our pattern-based approach, we now skip these modules during analysis.
    • Improved default pattern handling. For example, we now account for the fact that Cronet implementations with names starting with stable_cronet use different patterns than other variants. This distinction is now considered during pattern scanning and hooking.

🐛 Found a bug? Feature request? Use the GitHub issue tracker to report it.

- JavaScript
Published by monkeywave 10 months ago

fritap - friTap 1.3.7.7

friTap – Release Notes (v1.3.7.7)

What's New

  • 🪟 Improved LSASS Hooking on Windows

    • friTap now hooks the Local Security Authority Subsystem Service (LSASS) process by default on Windows, so you no longer need to run two instances to capture Schannel (ncrypt.dll) traffic before attaching to your target.
    • To disable LSASS hooking, use the new -nl / --no-lsass flag.
    • Updated and corrected documentation to reflect this behavior.

  • 🧪 GoTLS Enhancements

    • Minor stability and performance improvements for experimental GoTLS support on Android and Linux.

🐛 Found a bug? Feature request? Use the GitHub issue tracker to report it.

- JavaScript
Published by monkeywave 10 months ago

fritap - friTap 1.3.6.1

friTap – Release Notes (v1.3.6.1)

What's New

  • 🧪 Initial GoTLS Support (Experimental)

    • Support for GoTLS (Go's native TLS library) is now available on Android and Linux.
    • When symbols are not exported, friTap attempts pattern-based hooking (Android only, for now).
      • ⚠️ Note: This feature is experimental - requires the --experimental (-exp) flag - and may cause Frida crashes in some scenarios — feedback welcome!

  • ✅ Basic Test Infrastructure Introduced

    • Added unit tests for core Python components (e.g., mocking library detection logic).
    • 🧪 Full automated test coverage (e.g., against ground truth datasets) is in progress.

  • 📚 Citation Support

  • 🪟 Windows Schannel Hooking Now Fully Integrated

    • Schannel support on Windows no longer requires the --experimental (-exp) flag.
    • The feature is now enabled by default and considered stable for standard use cases.

🐛 Found a bug? Feature request? Use the GitHub issue tracker to report it.

- JavaScript
Published by monkeywave 11 months ago

fritap - friTap - v1.3.5.3

friTap - Release Notes (v1.3.5.3)

What's New

  • 📘 In-depth Documentation

    • We've started building comprehensive docs using MkDocs!
      → Clearer explanations, usage examples, and feature guides are on the way.

  • 🐍 OpenSSL Key Extraction from Python

    • friTap can now hook OpenSSL instances used in Python apps — tested on Linux and macOS.

  • 🛠 Internal Improvements

    • Switched all output to use Python’s structured logger for cleaner and more consistent output.
    • Improved log formatting across all modes (standard, verbose, and debug).

  • 🧩 New Feature: List Loaded Libraries

    • Added -ll / --list-libraries to enumerate loaded libraries in the target process.
    • Helps with debugging or identifying which TLS backends are in use.

  • 🎛 Updated Command-Line Interface

    • Refactored several CLI options for clarity and consistency:
    • 🧬 -s now spawns the target app (replacing the old -f).
    • 🔍 Check --help for a full overview of updated options.

  • 🛠 Development and Testing

    • add a script which trys to create a setup for development
    • started to add tests to friTap (still needs to be extended)

🔗 Stay tuned via https://github.com/friTap/friTap
🐛 Found a bug or missing key? Please report it in the GitHub issue tracker!

- JavaScript
Published by monkeywave 11 months ago

fritap - friTap 1.3.4.1

friTap - Release Notes (v1.3.4.1)

What's New

  • 🚀 Migrated to Frida 17.x — friTap is now fully compatible with Frida ≥ 17.

    • 🔁 Backward compatibility with Frida 15–16 is maintained, but please note:
    • 🛠 New features and bug fixes will only be developed and tested against Frida 17+ going forward.

  • 🧠 Enhanced debug and error output:

    • 🧾 Richer and more structured messages for easier issue analysis.
    • 📦 Optional output using the --do (debug output) flag now includes:
    • Pretty-printed errors
    • Stack traces
    • Source location hints

Stay up to date at https://github.com/friTap/friTap and report issues or feature requests via the GitHub issue tracker.

- JavaScript
Published by monkeywave 11 months ago

fritap - friTap 1.3.2.2

friTap - Release Notes

What's New

  • ✅ Improved pattern matching for BoringSSL/Cronet on Android (ARM64).
  • 🛠 All TLS-related hooks are now wrapped in try/catch blocks to prevent a single library hook failure from crashing friTap.
  • 🔐 BoringSSL hooks can now be installed on libraries where BoringSSL is statically linked but symbols are still exported.

- JavaScript
Published by monkeywave about 1 year ago

fritap - friTap 1.3.2.0

friTap - Release Notes

What's New

  • TLS 1.2 support for RusTLS on Android ARM64 devices
  • Ensure that user set key callbacks are not overwritten when hooking s2ntls, OpenSSL and BoringSSL

- JavaScript
Published by monkeywave about 1 year ago

fritap - friTap 1.3.1.0

friTap - Release Notes

What's New

  • RusTLS 1.3 support
    • We now support extracting keys from TLS 1.3 traffic done using byte patterns (Android and Linux only for now)
    • Supporting hooking RusTLS when symbols available using a keylog callback

- JavaScript
Published by monkeywave about 1 year ago

fritap - friTap 1.3.0.1

friTap - Release Notes

What's New

  • Improved Hooking for ssl_log_secret()
    • When pattern-based hooking fails, we now fallback to symbol-based hooking to install hooks dynamically. (Currently implemented on Android only.)
  • Custom Patterns for ssl_log_secret()
    • Users can now provide their own pattern for hooking the ssl_log_secret() function, allowing extraction of TLS secrets and the client_random more flexibly. (Currently implemented on Android only.)

Bug Fixes & Improvements

  • Various minor bug fixes across different components to enhance stability and performance.

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.2.8.8

friTap - Release Notes

What's New

  • Conscrypt:
    • Previously, the native hooks for Conscrypt on Android were not stable due to how they were installed. In this release, we have improved their stability.
    • Enabled and improved the NSS hooks on Android. Still an early development stage.

Enhancements

  • Cronet:
    • The pattern for hooking Cronet on Android has been improved – thx to @Julian-Lengersdorff

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.2.8.5

friTap - Release Notes

What's New

  • friTap Script Loading:

    • Resolved an issue where the friTap script was deactivated in versions between 1.2.7.7 and 1.2.8.2. This functionality is now fully restored.

  • Logout Enhancements:

    • Improved the logout process for better user experience and reliability.

Enhancements

  • libmonochrome Support:
    • Added support for libmonochrome, including significant improvements to the byte patterns associated with this library.
    • libmonochrome includes statically linked Cronet, as used in applications like Chrome.

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.2.8.0

friTap - Release Notes

What's New

  • Platform Detection Improvements:
    • Resolved a bug where friTap incorrectly identified its operating environment on macOS ARM64.
    • friTap now accurately determines whether it is running on macOS or iOS, ensuring the correct hooks are installed for the respective platform.

Enhancements

  • BoringSSL Support:
    • Significant improvements in handling BoringSSL on macOS for better compatibility and reliability.

Bug Fixes

  • Uninstall and Upgrade Issues:

    • Fixed issues that caused errors during the uninstallation or upgrading process of friTap. These operations should now complete seamlessly.

  • Local Full Packet Capture:

    • Addressed a bug affecting local full packet capture, ensuring this feature now works as intended.

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.2.6.8

Updates in This Release

  • Fixed handling of multiple PIDs when terminating tcpdump processes.
  • Added psutil as a dependency in pcap.py.

Kudos to @0xhakeem for these fixes! 🎉

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.2.6.4

  • Fixing minor bug regarding Full Packet Capture: Resolved minor bugs handling a full packet capture on a none mobile device.

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.2.6.0

  • Improved Argument Parsing: Resolved minor bugs in the argument parsing functionality to enhance stability and accuracy.
  • Full Packet Capture Fix: Fixed issues with the full packet capture feature for Android, ensuring reliable usage of the -f / --full_capture option.
  • Socket Tracing Feature: Introduced a socket tracing feature, which traces all sockets of the target application and provides a pre-configured Wireshark display filter for easier analysis. If an optional file path is specified, the socket trace will be saved to a file. Use the -sot [<path>] / --socket_tracing [<path>] option to enable this feature. This feature was unavailable in recent versions due to the removal of the relevant code path.

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.2.4.3

  • Improvements in Python Integration: Now it is possible to integrate friTap with your own Custom Handler

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.2.4.0

Release Notes for v1.2.4.0

✨ New Features

  • Python Integration:

    - Added the ability to enhance friTaps functionality by providing a custom Frida script during your session with -cparameter. This custom script will be invoked just before friTap applies its own hooks, providing greater flexibility and customization.

We hope you enjoy these new features and improvements! If you encounter any issues or have suggestions, please feel free to open an issue or contribute to the project.

Happy tapping! 🚀

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.2.3.6

Release Notes for v1.2.3.6

🛠️ Improvements

  • Cronet Byte Pattern Update: Minor fixes to the byte pattern for Cronet to ensure compatibility with the latest Cronet versions.

✨ New Features

  • Python Integration:

    • Added the ability to import and use friTap as part of a Python project with a simple invocation: python ssl_log = SSL_Logger(...) process = ssl_log.start_fritap_session()
    • This makes it easier to integrate friTap functionality directly into Python workflows.

  • Job Management Support:

    • Introduced support for running friTap as a job in the JobManager() class of the AndroidFridaManager project.

We hope you enjoy these new features and improvements! If you encounter any issues or have suggestions, please feel free to open an issue or contribute to the project.

Happy tapping! 🚀

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.2.3.0

  • Adding s2n support to friTap thx to @Julian-Lengersdorff
  • Adding support for BoringSSL when it is used in the mono runtime

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.2.2.8

  • first support for Flutter on Android (tested) and iOS (untested)
  • improvements in the byte-pattern based hooking
  • a better logging experience

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.2.2.0

A lot of new features:

  • update the build system
  • fixes in providing offsets to friTap
  • able to hook Cronet
  • able to hook by byte pattern matching
  • able to hook SSLwriteex and SSLreadex on OpenSSL

- JavaScript
Published by monkeywave over 1 year ago

fritap - friTap 1.1.0.5

  • some fixes regarding Conscrypt on Android
  • Update the android.py class so that newer Android versions can also be handled
  • fixes a logic bug when doing a full packet capture
  • add feature to provide default socket information (--enable_default_fd)

- JavaScript
Published by monkeywave about 2 years ago

fritap - friTap 1.1.0

  • fixes regarding Android 13
  • fixes for full packet capture on Android
  • add anti-root feature while applying friTap-hooks

- JavaScript
Published by monkeywave almost 3 years ago

fritap -

- JavaScript
Published by monkeywave over 3 years ago

fritap -

  • add SSPI tls key extraction support
  • add offset feature to main supported libraries
  • add --experimental flag for none stable features

- JavaScript
Published by monkeywave over 3 years ago

fritap - friTap 1.0.7.1

  • fixed detaching bug

- JavaScript
Published by monkeywave over 3 years ago

fritap - friTap 1.0.7

  • some fixes for iOS and Android (thx MjG345 for reporting this issue)
  • created a legacy script when working with frida < 16
  • we are now waiting for a ssl library to be initialized (thx MjG345 for pointing this)
  • add dynamic loader support for iOS and MacOS
  • now we handle the stopping of the target process
  • update on Version 1.0.7.1
    • fixed detaching bug

- JavaScript
Published by monkeywave over 3 years ago

fritap - friTap 1.0.6

  • add debug feature
  • pip install feature
  • docker based compiling
  • refactored version with minor improvements for hooking

- JavaScript
Published by monkeywave over 3 years ago

fritap - friTap 1.0.3

  • the standalone version is now based on zipapp
  • new feature--full_capture enables a full capture of the target application based on tracing the invoked socket using scapy on local systems
  • new feaure --socket_tracing traces all socket of the target application and provide a prepared wireshark display filter
  • new_feature --hostattach to a process on remote frida device thx to @DaMatz

- JavaScript
Published by monkeywave about 4 years ago

fritap - friTap 1.0.1

- JavaScript
Published by monkeywave over 4 years ago

fritap - friTap 1.0.0

- JavaScript
Published by monkeywave over 4 years ago