常用命令举例

此处列出，Frida的frida-trace去hook安卓的app时，常用的具体命令：

frida-trace -U -n system_server --runtime=v8 -j '*ActivityManagerService!*'

frida-trace -U -n system_server --runtime=v8 -j '*handleProcessStartedLocked!*'

frida-trace -U -n system_server --runtime=v8 -j '*ActivityManager!*' -j '*!startProcessLocked' -j '*!handleProcessStartedLocked'

frida-trace -U -n system_server --runtime=v8 -j '*ActivityManager!*' -j '*!startProcessLocked' -j '*!handleProcessStartedLocked' -J '*!checkComponentPermission'

frida-trace -U -n system_server --runtime=v8 -j '*ActivityManager!*' -j '*!*startProcessLocked*' -j '*!*handleProcessStartedLocked*' -J '*!checkComponentPermission'

frida-trace -U -N com.wallpaper.hd.funny --runtime=v8 -j '*ActivityManager!*' -j '*!*startProcessLocked*' -j '*!*handleProcessStartedLocked*' -J '*!checkComponentPermission'

frida-trace -U -n system_server --runtime=v8 -j '*!startInstrumentation'

frida-trace -U -n system_server --runtime=v8 -j '*!bindService'
frida-trace -U -n system_server --runtime=v8 -j '*!bindService' -j '*!handleProcessStartedLocked'

frida-trace -U -n system_server --runtime=v8 -j '*!startService' -j '*!handleProcessStartedLocked' -j '*!forceStopPackage'

frida-trace -U -N com.wallpaper.hd.funny --runtime=v8 -j '*!execTransact' -j '*!onTransact'

frida-trace -U -N com.wallpaper.hd.funny -i 'onTransact'

frida-trace -U -i 'onTransact' -p 21925

frida-trace -U -N com.wallpaper.hd.funny -i '*onTransact*'

frida-trace -U -n system_server -i '*onTransact*'

frida-trace -U -n system_server --runtime=v8 -j '*!startService' -j '*!handleProcessStartedLocked' -j '*!forceStopPackage'  -J '*!checkComponentPermission' -i '*onTransact*'