mcpField
F
frida-codeshare-search

frida-codeshare-search

github.com/rudra-raviSecurity7107 installsUpdated 25w ago
Repository

About frida-codeshare-search

frida-codeshare-search is a skill for finding, reviewing, extracting, and running Frida CodeShare scripts. It guides security practitioners through source inspection, target compatibility checks, and authorized use.

Key features

  1. 01Search CodeShare scripts
  2. 02Extract project source locally
  3. 03Review scripts before execution
  4. 04Check platform and version fit
  5. 05Adapt and run Frida hooks

Use cases

  1. 01Find scripts for a target app
  2. 02Audit a script before running it
  3. 03Extract and adapt a CodeShare project

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/rudra-ravi/frida-skills --skill frida-codeshare-search

After installing, type/frida-codeshare-searchin Claude Code to confirm it loaded.

Bundled filesagents/openai.yamlscripts/codeshare_extract.py

Details

From the project README

Frida CodeShare Search

Use this skill when a user wants to find, inspect, download, adapt, or run Frida CodeShare scripts.

Rules

  • Confirm authorization and target scope before running third-party instrumentation.
  • Treat CodeShare scripts as reconnaissance first. Read the source before running it.
  • Prefer local review with -l script.js after extraction; use frida --codeshare only when the user accepts fetching and running public code directly.
  • Verify the script matches the target platform, app version, library names, symbols, and Frida version before changing behavior.

Search With Curl

Fetch the search page with URL-encoded query parameters:

curl -fsSL --get --data-urlencode "query=instagram" "https://codeshare.frida.re/search/" -o codeshare-search.html

Parse the result cards:

python3 /path/to/frida-codeshare-search/scripts/codeshare_extract.py search codeshare-search.html

The parser reports title, author, URL, likes, views, and description. Pick candidates by platform fit, recency/version in title, specific framework coverage, and enough source clarity to audit.

Extract A Project Script

Fetch the project page:

curl -fsSL "https://codeshare.frida.re/@Eltion/instagram-ssl-pinning-bypass/" -o codeshare-project.html

Extract the embedded projectSource into a local script:

python3 /path/to/frida-codeshare-search/scripts/codeshare_extract.py project codeshare-project.html -o agent.js

Then inspect before execution:

sed -n '1,220p' agent.js

Run Options

Run a reviewed local script:

frida -U -f com.instagram.android -l agent.js --no-pause

Run directly through CodeShare when direct execution is acceptable:

frida -U --codeshare Eltion/instagram-ssl-pinning-bypass -f com.instagram.android --no-pause

If the CodeShare page shows a placeholder like ${projectSlug}, use the slug from the project URL.

Adaptation Checklist

  • Android Java hooks are inside Java.perform() and overloads are explicit.
  • Native hooks wait for the module before resolving exports or symbols.
  • iOS hooks check ObjC.available and confirm class/selectors or symbols exist.
  • Broad SSL/root/integrity bypass bundles are reduced to the hooks that actually fire.
  • Logs prove which hook changed behavior; failures include the exact command, app version, Frida version, and target architecture.

References

Comments

Markdown supported