awesome-frida - Awesome Frida - A curated list of Frida resources http://www

•    

---

A curated list of awesome projects, libraries, and tools powered by Frida. Frida is Greasemonkey for native apps, or, put in more technical terms, it’s a dynamic code instrumentation toolkit. It lets you inject snippets of JavaScript into native apps that run on Windows, Mac, Linux, iOS and Android.

frida awesome dynamic-analysis android ios hooking r2frida

house - A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python

•    Python

---

House: A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python. It is designed for helping assess mobile applications by implementing dynamic function hooking and intercepting and intended to make Frida script writing as simple as possible. By default, House binds to http://127.0.0.1:8000.

frida mobile pentest-tool android

objection - 📱 objection - runtime mobile exploration

•    Python

---

objection is a runtime mobile exploration toolkit, powered by Frida. It was built with the aim of helping assess mobile applications and their security posture without the need for a jailbroken or rooted mobile device. The project's name quite literally explains the approach as well, whereby runtime specific objects are injected into a running process and executed using Frida.

mobile pentest framework ios instrumentation frida security android assessment

Brida - The new bridge between Burp Suite and Frida!

•    Java

---

Brida is a Burp Suite Extension that, working as a bridge between Burp Suite and Frida, lets you use and manipulate applications’ own methods while tampering the traffic exchanged between the applications and their back-end services/servers. It supports all platforms supported by Frida (Windows, macOS, Linux, iOS, Android, and QNX).

appmon - Documentation:

•    Javascript

---

AppMon is an automated framework for monitoring and tampering system API calls of native macOS, iOS and android apps. It is based on Frida. This project exists thanks to all the people who contribute.

android ios-app macos-app security-tools appmon reverse-engineering instrumentation frida mobile-security

AndroidLife - 📔 CaMnter's android learning life and footprint.

•    Java

---

📔 CaMnter's android learning life and footprint.

android source-code-notes apt apt-get-resources apt-repository rxjava2 databinding gradle-plugin android-plugin hook-ams hook-loadedapk hook-pms algorithm

HookZz - a hook framework for arm/arm64/ios/android

•    C++

---

a hook framework for arm/arm64/ios/android

hook hook-framework

xHook - 🔥 A PLT hook library for Android native ELF (executable and shared libraries)

•    C

---

xhook is a PLT (Procedure Linkage Table) hook library for Android native ELF (executable and shared libraries). xhook has been keeping optimized for stability and compatibility.

android hook elf plt got

frida-core - Frida core library intended for static linking into bindings

•    C

---

Frida core library intended for static linking into bindings

frida-python - Frida Python bindings

•    C

---

Python bindings for Frida.

gradle_plugin_android_aspectjx - A Android gradle plugin that effects AspectJ on Android project and can hook methods in Kotlin, aar and jar file

•    Groovy

---

A Android gradle plugin that effects AspectJ on Android project and can hook methods in Kotlin, aar and jar file.

epic - Dynamic java method AOP hook for Android(continution of Dexposed on ART), Supporting 4.0~9.0

•    Java

---

Epic is the continution of Dexposed on ART(Supporting 4.0~9.0). Dexposed is a powerful yet non-invasive runtime AOP (Aspect-oriented Programming) framework for Android app development, based on the work of open-source Xposed framework project.

art hook aop dexposed android

YAHFA - Yet Another Hook Framework for ART

•    Java

---

YAHFA is utilized by VirtualHook so that applications can be hooked without root permission. Please take a look at this article and this one for a detailed introduction.

android hook-framework hook

YourView - YourView is a desktop App in MacOS based on Apple SceneKit

•    Objective-C

---

YourView is a desktop App in MacOS. You can use it to view iOS App's view hierarchy. I think it could be a basic project in app view visualization. Depend on it, you may do your add-on functions's development such as visual tracking like mixpanel, iOS reverse tool just like reveal, frida, even though, you can develop android studio plugin for view debugging. Now I treat it as a iOS reverse tool. Now it is a version of 0.1, I will maintain continuedly. Open YourView/iOS/TalkingDataSDKDemo/TalkingDataSDKDemo.xcodeproj. It's a demo project with the libyourview source code as framework in it. Build and Run,keep the demo app in foreground.

ios tools uiview reveal reverse ui-testing 3d view-hierarchy

cryptoshark - Self-optimizing cross-platform code tracer based on dynamic recompilation

•    C++

---

Self-optimizing cross-platform code tracer based on dynamic recompilation, powered by Frida and Capstone. Works at the machine code level, no source code needed. Tags threads based on which APIs they use, showing you in real-time what functions have been called, allowing you to study them by carefully injecting logging and other side-effecty code. This is the blob of JavaScript that CryptoShark injects into target processes.

frida

frida - Clone this repo to build Frida

•    Makefile

---

Dynamic instrumentation toolkit for developers, reverse-engineers, and security researchers. You may also download pre-built binaries for various operating systems from Frida's releases page on GitHub.

extractTVpasswords - tool to extract passwords from TeamViewer memory using Frida

•    C++

---

  Hi there, in this article we want to tell about our little research about password security in TeamViewer. The method can help during the pentest time for post exploitation to get access to another machine using TeamViewer.   A few days ago I worked on my windows cloud VPS with TeamViewer (where I set a custom password). After work I disconnected, at the next time when I wanted to connect, I saw that TeamViewer had auto-filled the password.

teamviewer cplusplus frida hacking

FastAdapter - The bullet proof, fast and easy to use adapter library, which minimizes developing time to a fraction

•    Java

---

The RecyclerView is one of the most used widgets in the Android world, and with it you have to implement an Adapter which provides the items for the view. Most use cases require the same base logic, but require you to write everything again and again. The FastAdapter is here to simplify this process. You don't have to worry about the adapter anymore. Just write the logic for how your view/item should look like, and you are done. This library has a fast and highly optimized core which provides core functionality, most apps require. It also prevents common mistakes by taking away those steps from the devs. Beside being blazing fast, minimizing the code you need to write, it is also really easy to extend. Just provide another adapter implementation, hook into the adapter chain, custom select / deselection behaviors. Everything is possible.

recyclerview fastadapter viewholder multi-select click-listeners drag-and-drop swipe recyclerview-adapter adapter android android-library android-development android-ui mikepenz

aFileChooser - Android library that provides a file explorer to let users select files on external storage

•    Java

---

aFileChooser is an Android Library Project that simplifies the process of presenting a file chooser on Android 2.1+. Intents provide the ability to hook into third-party app components for content selection. This works well for media files, but if you want users to be able to select any file, they must have an existing "file explorer" app installed. Because many Android devices don't have stock File Explorers, the developer must often instruct the user to install one, or build one, themselves. aFileChooser solves this issue.

use-http - 🐶 React hook for making isomorphic http requests

•    TypeScript

---

The Provider allows us to set a default url, options (such as headers) and so on. This is exactly what you would pass to the normal js fetch, with a little extra.

react fetch suspense graphql fetching ssr react-hooks react-hook reacthook react-suspense rest-client isomorphic http usefetch request fetch-data react-cache react-usefetch query mutation use hook axios react-use-fetch react-fetch-hook use-fetch usefetch-hook react-hooks-fetch react-hooks-tutorial react-custom-hooks react-hooks-async use-hooks react-usefetch-hook fetch-suspense async-hook-react react-hooks-usefetch use-fetch-hook useaxios use-axios use-superagent superagent apollo usegraphql use-graphql