Files
FridaBox/THIRD_PARTY_NOTICES.md
T

58 lines
2.6 KiB
Markdown

# Third-party notices
## NewBlackbox / BlackBox
FridaBox is based on `ALEX5402/NewBlackbox` commit
`89b59836c66f173756a4ae258cf379a957649820`. The foundation repository includes
an Apache License 2.0 notice; see the repository root `LICENSE` file.
FridaBox gratefully acknowledges NewBlackbox and the wider BlackBox project
lineage for the virtual package, process, Binder, filesystem, identity,
signature, component, and lifecycle foundation. FridaBox's own work builds a
separate instrumentation product on that foundation: early Gadget integration,
guest runtime discovery, controller tooling, per-app launch modes, integrity and
ABI validation, on-device agent execution, the FridaBox UI, and the associated
test and research documentation.
- NewBlackbox source: `https://github.com/ALEX5402/NewBlackbox`
- Pinned foundation revision:
`https://github.com/ALEX5402/NewBlackbox/commit/89b59836c66f173756a4ae258cf379a957649820`
## Frida Gadget 17.16.0
- Origin: `https://github.com/frida/frida/releases/tag/17.16.0`
- Asset: `frida-gadget-17.16.0-android-arm64.so.xz`
- Installed filename: `libfrida-gadget.so`
- SHA-256 after XZ decompression:
`6bf149e5d1c5ec701e7b822cab57bb243f1c2a03318fa974fe373ee711a9ed9e`
- License: wxWindows Library Licence, Version 3.1, as stated by the official
Frida 17.16.0 `COPYING` file.
The wxWindows licence permits redistribution/modification under GNU Library
General Public Licence version 2 or later and includes an exception permitting
binary object code versions of works based on the library to be used, copied,
linked, modified, and distributed under the distributor's own terms. The full
authoritative text is available at
`https://github.com/frida/frida/blob/17.16.0/COPYING`.
Frida is copyright its respective contributors. FridaBox makes no claim of
ownership over Frida Gadget.
FridaBox gratefully acknowledges the Frida maintainers and contributors for the
instrumentation engine, GumJS runtime, Java bridge, Gadget deployment model, and
controller APIs that make this research possible.
## Frida Java bridge and agent compiler
The compiled JavaScript agents under `scripts/dist/` include
`frida-java-bridge` 7.0.13. They are built with `frida-compile` 19.0.5.
- Java bridge origin: `https://github.com/frida/frida-java-bridge`
- Compiler origin: `https://github.com/frida/frida-compile`
- License: LGPL-2.0 with the wxWindows Library Licence 3.1 exception, as
declared by the respective official packages.
The authoritative licence text and exception are the same wxWindows Library
Licence described above. Exact package versions and dependency integrity hashes
are preserved in `package-lock.json`.