Expose SOCKS option for Frida script interception

Author: pimterry

src/interceptors/frida/frida-android-integration.ts

@@ -230,7 +230,8 @@ export async function interceptAndroidFridaTarget(
     hostId: string,
     appId: string,
     caCertContent: string,
-    proxyPort: number
+    proxyPort: number,
+    enableSocks: boolean
 ) {
     console.log(`Intercepting ${appId} via Android Frida on ${hostId}...`);
     const deviceClient = adbClient.getDevice(hostId);
@@ -260,7 +261,8 @@ export async function interceptAndroidFridaTarget(
             caCertContent,
             proxyIp,
             proxyPort,
-            KNOWN_APP_PROBLEMATIC_PORTS[appId] ?? []
+            KNOWN_APP_PROBLEMATIC_PORTS[appId] ?? [],
+            enableSocks
         );
 
         await launchScript(`Android (${appId})`, session, interceptionScript);

src/interceptors/frida/frida-android-interceptor.ts

@@ -58,7 +58,7 @@ export class FridaAndroidInterceptor implements Interceptor {
         options:
             | { action: 'setup', hostId: string }
             | { action: 'launch', hostId: string }
-            | { action: 'intercept', hostId: string, targetId: string }
+            | { action: 'intercept', hostId: string, targetId: string, enableSocks?: boolean }
     ): Promise<void> {
         if (options.action === 'setup') {
             await setupAndroidHost(this.config, this.adbClient, options.hostId);
@@ -77,7 +77,8 @@ export class FridaAndroidInterceptor implements Interceptor {
                 options.hostId,
                 options.targetId,
                 this.config.https.certContent,
-                proxyPort
+                proxyPort,
+                options.enableSocks ?? false
             );
 
             // Track this session, so we can close it to stop the interception later

src/interceptors/frida/frida-ios-integration.ts

@@ -152,7 +152,8 @@ export async function interceptIosFridaTarget(
     hostId: string,
     appId: string,
     caCertContent: string,
-    proxyPort: number
+    proxyPort: number,
+    enableSocks: boolean
 ) {
     console.log(`Intercepting ${appId} via iOS Frida on ${hostId}...`);
     const deviceId = await getDeviceId(usbmuxClient, hostId);
@@ -171,7 +172,8 @@ export async function interceptIosFridaTarget(
             caCertContent,
             proxyIp,
             proxyPort,
-            KNOWN_APP_PROBLEMATIC_PORTS[appId] ?? []
+            KNOWN_APP_PROBLEMATIC_PORTS[appId] ?? [],
+            enableSocks
         );
 
         await launchScript(`iOS (${appId})`, session, interceptionScript);

src/interceptors/frida/frida-ios-interceptor.ts

@@ -52,15 +52,16 @@ export class FridaIosInterceptor implements Interceptor {
     async activate(
         proxyPort: number,
         options:
-            | { action: 'intercept', hostId: string, targetId: string }
+            | { action: 'intercept', hostId: string, targetId: string, enableSocks?: boolean }
     ): Promise<void> {
         if (options.action === 'intercept') {
             const fridaSession = await interceptIosFridaTarget(
                 this.usbmuxClient,
                 options.hostId,
                 options.targetId,
                 this.config.https.certContent,
-                proxyPort
+                proxyPort,
+                options.enableSocks ?? false
             );
 
             // Track this session, so we can close it to stop the interception later

src/interceptors/frida/frida-scripts.ts

@@ -10,26 +10,29 @@ function buildFridaConfig(
     caCertContent: string,
     proxyHost: string,
     proxyPort: number,
-    portsToIgnore: number[]
+    portsToIgnore: number[],
+    enableSocks: boolean
 ) {
     return configScriptTemplate
         .replace(/(?<=const CERT_PEM = `)[^`]+(?=`)/s, caCertContent.trim())
         .replace(/(?<=const PROXY_HOST = ')[^']+(?=')/, proxyHost)
         .replace(/(?<=const PROXY_PORT = )\d+(?=;)/, proxyPort.toString())
+        .replace(/(?<=const PROXY_SUPPORTS_SOCKS5 = )false(?=;)/, enableSocks.toString())
         .replace(/(?<=const IGNORED_NON_HTTP_PORTS = )\[\s*\](?=;)/s, JSON.stringify(portsToIgnore));
 }
 
 export async function buildAndroidFridaScript(
     caCertContent: string,
     proxyHost: string,
     proxyPort: number,
-    portsToIgnore: number[]
+    portsToIgnore: number[],
+    enableSocks: boolean
 ) {
     const scripts = await Promise.all([
         fs.readFile(path.join(FRIDA_SCRIPTS_ROOT, 'frida-java-bridge.js'), { encoding: 'utf8' }),
         fs.readFile(path.join(FRIDA_SCRIPTS_ROOT, 'config.js'), { encoding: 'utf8' })
             .then((configTemplate) =>
-                buildFridaConfig(configTemplate, caCertContent, proxyHost, proxyPort, portsToIgnore)
+                buildFridaConfig(configTemplate, caCertContent, proxyHost, proxyPort, portsToIgnore, enableSocks)
             ),
         ...[
             ['native-connect-hook.js'],
@@ -52,13 +55,14 @@ export async function buildIosFridaScript(
     caCertContent: string,
     proxyHost: string,
     proxyPort: number,
-    portsToIgnore: number[]
+    portsToIgnore: number[],
+    enableSocks: boolean
 ) {
     const scripts = await Promise.all([
         fs.readFile(path.join(FRIDA_SCRIPTS_ROOT, 'frida-objc-bridge.js'), { encoding: 'utf8' }),
         fs.readFile(path.join(FRIDA_SCRIPTS_ROOT, 'config.js'), { encoding: 'utf8' })
             .then((configTemplate) =>
-                buildFridaConfig(configTemplate, caCertContent, proxyHost, proxyPort, portsToIgnore)
+                buildFridaConfig(configTemplate, caCertContent, proxyHost, proxyPort, portsToIgnore, enableSocks)
             ),
         ...[
             ['ios', 'ios-connect-hook.js'],