frida-mobile-security skillA
frida-mobile-security is agent-read markdown (skill) from index-login/mobilere-skill: 用于 Android/iOS 移动应用安全逆向分析：Frida 动态插桩、绕过反调试/反注入/加固壳、脱壳、加密与 native SO 层 hook、运行时行为分析、jadx-mcp 静态攻击面分析、离线 SO 静态分析（ELF 侦察/字符串/交叉引用/反汇编/JNI 判型）。用户提到"绕过检测/闪退/脱壳/加密/抓包/行为摸底/内存扫描/分析 so/ELF 侦察/快速反汇编/JNI/检查证书"等意图时使用。.
Indexed from public GitHub and served as immutable, content-addressed versions. Install it pinned to an exact SHA-256 with the mdr CLI, and every file is verified against the hash recorded here before it reaches your agent. The deterministic audit below grades the latest version, and the same file always earns the same grade.
What the file says
# Frida Mobile Security — 逆向分析总控 **模块优先，决策树驱动。** 本文件是总控：任务路由 + 决策树导航 + 模块目录。各技巧域的详细打法在项目根 `references/` 分域文件（全量索引 `references/_index.md`），按需读取。 > 路径基准：`references/*` 相对项目根；`scripts/*` 相对本文件所在目录（`.kilo/skill/frida-mobile-security/`）。**给用户的 frida CLI 命令必须写全路径**（如 `-l .kilo/skill/frida-mobile-security/scripts/core/utils.js`），或让用户先 `cd .kilo/skill/frida-mobile-security`；`tools/frida_run.py -l scripts/...` 短路径自动解析（实测：短路径直接跑 frida CLI 会 `Errno 2`）。 **硬性规则：`scripts/core/utils.js` 必须作为第一个 `-l` 参数加载。** --- ## 快速命令卡片 ```bash # 从项目根执行：先 cd .kilo/skill/frida-mobile-security，或把 scripts/ 展开为 .kilo/skill/frida-mobile-security/scripts/ # 例：frida -U -f com.app -l .kilo/skill/frida-mobile-security/scripts/core/utils.js -l .kilo/skill/frida-mobile-security/scripts/monitors/crypto_monitor.js # 加解密自吐 frida -U -f com.app -l scripts/core/utils.js -l scripts/monitors/crypto_monitor.js # 行为摸底 frida -U -f com.app -l scripts/core/utils.js -l scripts/monitors/file_monitor.js -l scripts/monitors/network_monitor.js -l scripts/monitors/thread_monitor.js # 反检测 Phase 1 (保活 + 定位检测 so) frida -U -f com.app -l scripts/core/utils.js -l scripts/bypass/exit_blocker.js -l scripts/bypass/so_loader_tracer.js …
Read the whole file at its exact version.
How to install
mdr add index-login/mobilere-skill/frida-mobile-security@git:20260924.aeb9e2fmdr add index-login/mobilere-skill/frida-mobile-security@sha256:56c1f7c90bb991d4Pin to a label to follow the author's releases, or to a sha256 to freeze the exact bytes forever. Either way the resolved hash is written to mdr.lock, and mdr install reproduces it on any machine.
[](https://markdownregistry.com/a/art_xeuxdan7b5wg5ehc)
1 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260924.aeb9e2f latest | 2026-09-24 | aeb9e2f | 16,154 B | A | view · diff |
| git:20260923.f751cce | 2026-09-23 | f751cce | 16,813 B | A | view · diff |
| git:20260923.11daeaa | 2026-09-23 | 11daeaa | 16,181 B | A | view · diff |
| git:20260921.c8d1b94 | 2026-09-21 | c8d1b94 | 12,767 B | A | view · diff |
| git:20260804.8e42194 | 2026-08-04 | 8e42194 | 11,627 B | A | view · diff |
| git:20260803.71f8be9 | 2026-08-03 | 71f8be9 | 34,665 B | C | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (16154 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
index-login/mobilere-skill · 54 stars · license MIT · pushed 2026-09-24 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_xeuxdan7b5wg5ehc GET https://markdownregistry.com/api/v1/resolve?ref=index-login/mobilere-skill/frida-mobile-security GET https://markdownregistry.com/api/v1/blob/56c1f7c90bb991d4d27d77b0b47daccbfba3b37895fa9c098d7207e774b379fb
Your agent does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.