Using Frida for Early Instrumentation of Xamarin Apps

Presented at ShellCon 2019, Oct. 12, 2019, 10:30 a.m. (50 minutes)

Xamarin allows developers to create mobile applications for both iOS and Android using C#. The managed code is compiled into the app and later executed by the mono runtime once started. Hooking the C# methods can be challenging, especially early in the start process when trying to bypass root or jailbreak detection. This talk will demonstrate a methodology that can be used for early C# method hooking of Xamarin release builds on both iOS and Android.

Presenters:

• Roadfork
  Roadfork is a senior application security consultant with a background in electronics. Having assumed multiple roles throughout his professional career, Roadfork has over 15 years experience with network security, web applications, mobile and IoT security.

Links:

• https://2019.shellcon.io/talks/frida.xamarin/

Similar Presentations:

• DeepSec 2018 „I like to mov &6974,%bx“ / Mobile App Attack 2.0 (closed)
• DeepSec 2020 „The Masquerade“ / Mobile Security Testing Guide Hands-On (closed)
• AppSec USA 2015 / Training (2 days): Advanced Android and iOS Hands-on Exploitation