Frida Dynamic Instrumentation Toolkit
Frida is a free open-source dynamic instrumentation toolkit for developers, reverse engineers, and security researchers created and supported by NowSecure researchers.
Dynamic Instrumentation Toolkit for Mobile Apps
Frida is often used to understand the internal behavior and network communications of mobile apps in use cases ranging from security research to debugging production code.
The Support Behind Frida
Frida was created by NowSecure Researcher Ole André V. Ravnås and is supported by a wide community of tool makers and security researchers. NowSecure researchers support the Frida community and its ongoing mission. Learn more about Ole André and the history of Frida here and follow @oleavr and the Frida project on Twitter. Access the Frida GitHub Repo. In 2017, Frida and Radare were integrated as R2Frida to get the best of both, learn more here.
Frida Powers Testing for Mobile Apps
Simply put, Frida lets you inject snippets of JavaScript or your own library into native apps on Windows, macOS, GNU/Linux, iOS, Android, FreeBSD, and QNX.
Inside Frida
The Frida core is written in C and gets injected along with JavaScript into the target processes, where your JS gets executed with full access to memory, hooking functions and calling native functions. It enables a bi-directional communication channel that is used between your app and the JS running. Using Python and JS allows for quick development with a risk-free API. Frida can help catch errors in JS and provide an exception rather than crashing, and can use Python, C, Node.js, Swift, .NET, Qml, and more. Frida can run in 3 modes: Injected, the most common approach, Embedded and Preloaded through Frida’s Gadget, a shared library meant to be loaded by programs.
Frida Powers NowSecure Solutions
Frida and r2Frida are leveraged across the NowSecure Solution portfolio as part of our blackbox testing capabilities. Frida is used in NowSecure Platform for continuous security testing, NowSecure Workstation for pen tester toolkit, and NowSecure Pen Testing Services, available on demand or through Pen Testing as a Service (PTaaS), for deep expert mobile app analysis.
See Frida In Action with NowSecure
Learn About Automated or Manual Testing