AwesomeREA.org

Learning resource

Frida Boot: a beginner binary instrumentation workshop

A beginner workshop by leonjza on binary instrumentation with Frida, served as offline pages from a Docker container that has gdb with GEF and frida-tools preinstalled. Three chapters move from a small Linux C program, LD_PRELOAD hooks and how library calls resolve through the PLT and GOT, to Frida’s Interceptor for reading arguments and changing return values, NativeFunction for calling a program’s own functions, Python injector tools, RPC exports, TypeScript agents, frida-server and frida-gadget. It deliberately leaves out Frida’s mobile-app uses, and every exercise targets sample programs shipped with the workshop.

Targets
Binary
Category
Learning resources
Relationship
Learning resource
Sources reviewed

Requirements & limits

  • The reviewed master commit dates from 2021-04-28, with no releases or tags; the prebuilt leonjza/frida-boot image on Docker Hub (tag latest, amd64 only) was last updated the same day. The README links a YouTube recording of the workshop and keeps a PDF of the slides in slides/.
  • Needs a host with Docker. docker.sh pulls or builds the image and starts it with the SYS_PTRACE capability, serving the course at localhost:9999 and mounting a local code folder into the container. The Dockerfile builds on Debian bullseye-slim and downloads frida-server and frida-gadget 12.9.4 for linux-x86_64, but installs frida-tools, GEF and the frida-agent-example project unpinned, so a fresh build will not reproduce the 2021 tool versions.
  • Exercises compile and instrument the workshop’s own C samples in software/: a random sleep loop, a fake_sleep LD_PRELOAD library and a PIN-check program whose test_pin function the lessons call directly from Frida, with numbered JavaScript, TypeScript and Python snippets for each step. No third-party target binaries are included or needed; the material covers x86_64 Linux user-space processes.
  • The repository has no license file and GitHub detects none; the bundled docsify scripts and themes keep their own licenses, and Frida, GEF and the base image are fetched under theirs. This review read the course pages, scripts and Dockerfile without building the image or running the exercises. The reviewed sources establish no REA or AI use.

About this entry

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Report an outdated entry Suggest a translation fix

Primary sources

  1. README.md GitHub · leonjza/frida-boot · Revision 73d1adf
  2. course/README.md GitHub · leonjza/frida-boot · Revision 73d1adf
  3. course/_sidebar.md GitHub · leonjza/frida-boot · Revision 73d1adf
  4. Dockerfile GitHub · leonjza/frida-boot · Revision 73d1adf
  5. docker.sh GitHub · leonjza/frida-boot · Revision 73d1adf
  6. course/1-chapter-1/internals.md GitHub · leonjza/frida-boot · Revision 73d1adf
  7. course/2-chapter-2/repurposing.md GitHub · leonjza/frida-boot · Revision 73d1adf
  8. course/3-chapter-3/operating-modes.md GitHub · leonjza/frida-boot · Revision 73d1adf
  9. software GitHub · leonjza/frida-boot · Revision 73d1adf
  10. https://hub.docker.com/r/leonjza/frida-boot

More in References and learning

All 54 entries in References and learning