Frida Script Runner

August 15, 2026 · View on GitHub

Frida Script Runner

Powerful web-based for mobile Android & iOS penetration testing toolkit

Version License platform Platform python

View Complete Documentation →

Quick Start

Frida Script Runner is a powerful plug & play web-based toolkit designed for Android and iOS penetration testing and mobile application security analysis. This tool simplifies the process of interacting with Frida by providing a user-friendly Flask-based interface, significantly improving the efficiency of penetration testing workflows.

It features AI-powered script generation through Codex CLI integration with MCP (Model Context Protocol) servers, enabling advanced binary analysis using Ghidra MCP and JADX MCP with minimal manual configuration.

A comprehensive toolkit for analyzing, manipulating, and interacting with mobile applications (Android & iOS), including APK/IPA dumping and automated Frida script generation.

Tech Graph

Feature Overview

Feature CategoryKey FeaturesStatus
Core FridaScript execution, REPL, real-time output, auto-fix✅
AI GenerationCodex CLI, MCP integration (Ghidra & JADX), prompt engineering✅
Server ManagementVersion control, start/stop, auto-detect✅
Frida Gadget InjectorAPK modification, script embedding, multi-arch✅
SSL DetectionStatic analysis, pattern recognition, code preview✅
Mobile ProxyHTTP proxy setup, auto IP detection✅
ADB GUIPackage management, device control, monitoring✅
CodeshareScript search, browse, import✅
App ManagementDump APK/IPA, install, split APK support✅
Device MonitoringReal-time status, multi-device support✅

Video Tutorials

FSR - New Version and Other Features

Video Thumbnail

FSR - AI

Video Thumbnail

Server Manager & Inject Frida Gadget

Video Thumbnail

Android & Custom Script

Video Thumbnail

iOS

Video Thumbnail

Prerequisites

Required Software

AI Features (Optional)

  • Codex CLI (for AI-powered script generation - setup guide)
  • Ghidra MCP Server (for binary analysis integration)
  • JADX MCP Server (for Android APK analysis)

Device Requirements

  • Android: Root access required for Frida server installation
  • iOS: Jailbroken device with Frida installed via Cydia/Sileo/Zebra

Installation

Method 1: Native Installation

1. Clone the repository:
git clone https://github.com/z3n70/Frida-Script-Runner.git
cd Frida-Script-Runner

2. Install Dependencies:
pip3 install -r requirements.txt

3. Run The Application:
python3.11 frida_script.py

4. Access the Web Interface:
http://127.0.0.1:5000

Method 2: Docker Installation

1. Build and run with Docker Compose:
docker-compose up --build

2. Start Codex Bridge (for AI features):
# On host machine (Windows/Linux/macOS)
python codex-bridge.py

3. Access the Applications:
Frida Script Runner: http://localhost:5000
Codex Bridge Tester: http://localhost:8091

Method 3: Auto Installation

1. Clone repository
git clone https://github.com/z3n70/Frida-Script-Runner.git
cd Frida-Script-Runner

2. Run Command
chmod +x install.sh

3. And Run
./install.sh

AI Setup (Optional)

If you want to use AI-powered script generation:

  1. Install Codex CLI:
    • Follow the Codex CLI setup guide
    • Authenticate with your OpenAI account and ensure the codex command is available
  2. Configure MCP Servers (MUST):
    • Set up Ghidra MCP server for binary analysis
    • Configure JADX MCP server for APK analysis
    • Update paths in codex-bridge.py if needed
    • Copy .config.toml.example to .config.toml and adjust MCP server paths for your setup

Usage

Basic Usage

  1. Device Setup:
    • Connect your USB device and run Frida Server (root/jailbreak required)
    • For iPhone: Ensure Frida is installed via Cydia, Sileo, Zebra, or another package manager
  2. Run Scripts:
    • Open the web interface and select the target package and script
    • Click "Run Frida" to start the Frida process
    • View real-time output in the output container
  3. Script Management:
    • Android scripts: Place in Script Directory 1
    • iOS scripts: Place in Script Directory 2
    • See script.json for structure and naming conventions

AI-Powered Script Generation

Using the Web Interface:

  1. Navigate to the "AI Generate" tab
  2. Enter your request (e.g., "Hook the login function and log parameters")
  3. Click "Generate Script" to create a custom Frida script

Using the Codex Bridge Tester:

  1. Access http://localhost:8091 (when bridge is running)
  2. Test different prompts and refine your requests
  3. Generated scripts are optimized for ARM Android devices

Example Prompts:

  • "Intercept SSL pinning bypass for Android app"
  • "Hook Java method com.example.App.authenticate and modify return value"
  • "Monitor file operations and log file paths"
  • "Hook the main function and log all parameters"

Advanced Features

  • Binary Analysis: AI can access Ghidra/JADX data for accurate function names and addresses
  • Auto-Fix: Scripts automatically include ARM stability patterns and error handling
  • Real-time Analysis: MCP servers provide live binary analysis during script generation

Contributing

Contributions welcome! Please read our Contributing Guidelines.

  1. Fork the repository
  2. Create feature branch
  3. Test on Android & iOS
  4. Submit pull request

Contact: @zenalarifin_

Contributors

Acknowledgments

  • Frida Project - Instrumentation toolkit
  • Frida-ios-dump - IPA decryption
  • OpenAI - Codex-powered generation
  • Claude - Claude is a next generation AI
  • MCP Servers - Binary analysis
  • GhidraMCP - allowing LLMs to autonomously reverse engineer applications.
  • JadxMCP - It lets LLMs communicate with the decompiled Android app
  • Apktool - A tool for reverse engineering Android apk files

Made with ❤️ Secrash © 2025