z3n70/Frida-Script-Runner

Web-based Frida framework and toolkit for Android & iOS penetration testing, mobile security, and dynamic analysis, featuring AI-assisted Frida script generation.

What it solves

Frida Script Runner simplifies mobile application security analysis and penetration testing for Android and iOS. It replaces the manual, command-line heavy process of interacting with Frida by providing a centralized web interface for script execution, device management, and application analysis.

How it works

The tool acts as a Flask-based web wrapper around the Frida instrumentation toolkit. It allows users to select target packages and execute scripts directly from a browser. To enhance script creation, it integrates with Codex CLI and Model Context Protocol (MCP) servers (specifically Ghidra and JADX), enabling the AI to access binary analysis data to generate accurate, context-aware Frida scripts for hooking functions and bypassing security measures.

Who it’s for

Security researchers, penetration testers, and mobile app developers who need to analyze, manipulate, and monitor the behavior of Android and iOS applications.

Highlights

  • AI-Powered Generation: Uses Codex CLI and MCP servers to generate custom Frida scripts based on natural language prompts.
  • Integrated Tooling: Includes an ADB GUI, SSL pinning detection, and a Frida Gadget injector for APK modification.
  • Comprehensive App Management: Supports dumping APK/IPA files, installing apps, and handling split APKs.
  • Multi-Platform Support: Works across Windows, macOS, and Linux to target both Android and iOS devices.

Related

  • Project
    firerpa/lamda

    An all-in-one Android automation and control platform that integrates UI automation, remote desktop, packet capture, and AI agents into a single unified service.

  • Project
    Vasco0x4/AIDA

    AIDA is an open‑source autonomous pentesting agent that lets any LLM (Claude, Gemini, OpenAI Codex, etc.) drive a Docker‑based security testing environment. The model plans the assessment, calls built‑in tools (nmap, sqlmap, custom Python, raw HTTP), logs every step in a persistent notebook, auto‑scores findings with CVSS 4.0, and can export PDF reports. It ships with a lightweight `aida-pentest` container (or can attach Exegol for more tools) and includes a web dashboard, authentication, and notification integrations. The README cites real CVEs discovered by the system. Licensed under AGPL‑v3.

  • Project
    droid-ash/finalrun-agent

    An AI-driven CLI that tests Android and iOS apps using natural language specifications, utilizing multimodal models to interact with the UI and generate test reports.

  • Project
    openai/codex-security

    A CLI and TypeScript SDK for defining security policies and using AI to find, validate, and fix security vulnerabilities in codebases.

  • Dispatch
    Reverse-Engineering Web Apps into AI Agent Tools

    Frigade has developed a browser-based agent that automatically converts authenticated web app API calls into reusable AI agent tools, creating self-updating MCP servers without requiring source code access.