A curated list of awesome projects, libraries, and tools powered by Frida.
What is Frida?
Frida is Greasemonkey for native apps, or, put in more technical terms, it’s a dynamic code instrumentation toolkit. It lets you inject snippets of JavaScript into native apps that run on Windows, Mac, Linux, iOS and Android.
Frida is an open source software.
More info here.
Table of Contents
Libraries
Projects
- as0ler/frida-scripts - Repository including some useful frida script for iOS Reversing
- 0xdea/frida-scripts - instrumentation scripts to facilitate reverse engineering of android and iOS Apps.
- roxanagogonea/frida-scripts - Repository including some useful frida scripts for Android
- iddoeldor/frida-snippets - another useful frida snippets repository
- IDA Pro plugin - IDA Pro plugin
- poxyran/misc - Misc Frida scripts read-process-memory.py, write-process-memory.py, frida-heap-trace,
- frida-cycript - Fork of cycript with new runtime called Mjølner powered by Frida.
- r2frida - static and dynamic analysis synergy
- ios-inject-custom - use Frida for standalone injection of a custom payload for iOS.
- davuxcom/frida-scripts - Repository including scripts for COM, .NET and WinRT for Windows
- XposedFridaBridge - A frida script implement XposedBridge & load xposed modules, without installing xposed framwork.
- Arida - A Frida-RPC tool based on FastAPI, Help users quickly realize interface exposure.
- easy-frida - A tool for easily develop frida agent script/module when reversing, including some useful frida scripts.
- RoboDroid - A tool for manage and deploy Android machines with pre-defined behaviors (made with Frida) for Cyber Range environments.
- rekit - Reverse engineering toolkit for mobile APIs. Captures Android HTTP traffic via Frida hooks (OkHttp, Dio, URLConnection, WebView) above TLS without proxy setup, outputs HAR files, and includes tools for endpoint scanning, TLS fingerprint testing, and API client generation.
Talks & Papers
Powered by Frida
- Aurora - Web app built on top of Frida
- CloudSpy - Web app built on top of Frida
- CryptoShark - Self-optimizing cross-platform code tracer based on dynamic recompilation
- diff-gui - Web GUI for instrumenting Android
LobotomyLobotomy Fork - Android Reverse Engineering Framework & Toolkit- Appmon - Runtime Security Testing Framework for iOS, Mac OS X and Android Apps
- Fridump - A universal memory dumper using Frida
- frida-extract - Automatically extract and reconstruct a PE file that has been injected using the RunPE method
- r2frida memory search
- r2frida-wiki - Unofficial wiki that provides practical examples on how to use r2frida
- friTap - Decrypts and logs a process’s SSL/TLS traffic on all major platforms. Beside this it intercepts the generation of encryption keys used by SSL/TLS and logs them as a SSLKEYLOGFILE.
- google/ssl_logger - Decrypts and logs a process’s SSL traffic.
- google/tcp_killer - Shuts down a TCP connection based using output from a
netstat cmd.
- brida - Bridge between Burp Suite and Frida
- objection - Runtime Mobile Exploration for iOS and Android
- passionfruit - iOS App Analyzer with Web UI
- House - A runtime mobile application analysis toolkit with a Web GUI, powered by Frida
- Dwarf - A debugger built on top of PyQt5 and frida
- Dexcalibur - A dynamic binary instrumentation tool designed for Android apps and powered by Frida
- bagbak - Decrypt apps from AppStore on jailbroken devices. Supports decrypting app extensions.
- Runtime Mobile Security (RMS) - A powerful web interface that helps you to manipulate Android and iOS Apps at Runtime
- CatFrida - A macOS app for inspecting a running iOS app. Building with frida-swift, CatFrida provide an awesome easy way to dive into an app.
- PAPIMonitor - Python API Monitor for Android apps is a tool, powered by Frida, to monitor user-selected APIs during app execution.
Videos
Blog posts
Contributions
Your contributions are always welcome!
If you want to contribute to this list (please do), send me a pull request or contact me @insitusec
Also, if you notice that a listing should be deprecated or replaced:
- Repository’s owner explicitly say that “this library is not maintained”.
- Not committed for long time (2~3 years).
More info on the guidelines
Credits
评论