dragonfist's Introduction

DragonFist

DragonFist is an automated tool for checking vulnerability and making report on Unity Engine based Games. This program works in Android environment and also supports Android emulator environment. It can check vulnerability from the attacker's point of view and provide details of vulnerability and solutions.

For user-friendly environment, DragonFist is created with GUI(Graphical User Interface)

Features

Decompile APK and Restore metadata automatically
Check Method Vulnerability by auto-hooking it dynamically
Check Time & Random Vulnerability by manipulating it directly
Check Saving data with the format of SQLite3 and PlayerPrefs
Check Memory Vulnerability using Value search, Class search
Make Vulnerablility Analysis Report automatically

Demo Video

https://www.youtube.com/watch?v=PIqFMzXKGuc

Environment

IDE : Visual Studio 2019
Language : C#
Form : Windows Form

Pre-Installation

Android SDK Platform Tools(adb.exe) : https://developer.android.com/studio/releases/platform-tools
Python3 : https://www.python.org/downloads/windows
Java JDK : https://www.oracle.com/technetwork/java/javase/downloads/index.html
Frida(Windows) : https://frida.re/docs/installation,
Frida-server(Android) : https://github.com/frida/frida/releases
.NET Framework : https://dotnet.microsoft.com/download/dotnet-framework

Install

There are 2 ways to install DragonFist.

Git clone or Download ZIP
Install by installer

How to use

DragonFist provides User-Manual and FAQ

Reference

Il2CppDumper : https://github.com/Perfare/Il2CppDumper
apktool : https://bitbucket.org/iBotPeaches/apktool/

dragonfist's People

Contributors

Stargazers

Watchers

dragonfist's Issues

Hooking

안녕하세요. 우선 유용한 프로그램 만들어 주셔서 감사합니다.
툴을 테스트하던 중 궁금한 부분이 있어서 문의드립니다.

Frida-sever 12.7.12로 함수 Hook 기능 이용 시 Hooking되는 함수가 없습니다. 다만, Report의 함수 후킹 가능성에는 안전이라고 나옵니다.
안전해서 Hooking이 되는 함수가 없는 것인지 궁금합니다. (테스트는 카운터사이드라는 게임으로 했습니다)