Frida codeshare search
Ai skills for Frida dynamic instrumentation across Android, iOS, native hooks, agents, and troubleshooting
npx -y skills add Rudra-ravi/frida-skills --skill frida-codeshare-searchAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 1 stars1 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Search Frida CodeShare with curl, extract project metadata and script source, review snippets, and turn scripts into local agents or commands.
SKILL.md
2.8 KB, as published. Nobody here has run it
Frida CodeShare Search
Use this skill when a user wants to find, inspect, download, adapt, or run Frida CodeShare scripts.
Rules
- Confirm authorization and target scope before running third-party instrumentation.
- Treat CodeShare scripts as reconnaissance first. Read the source before running it.
- Prefer local review with
-l script.jsafter extraction; usefrida --codeshareonly when the user accepts fetching and running public code directly. - Verify the script matches the target platform, app version, library names, symbols, and Frida version before changing behavior.
Search With Curl
Fetch the search page with URL-encoded query parameters:
curl -fsSL --get --data-urlencode "query=instagram" "https://codeshare.frida.re/search/" -o codeshare-search.html
Parse the result cards:
python3 /path/to/frida-codeshare-search/scripts/codeshare_extract.py search codeshare-search.html
The parser reports title, author, URL, likes, views, and description. Pick candidates by platform fit, recency/version in title, specific framework coverage, and enough source clarity to audit.
Extract A Project Script
Fetch the project page:
curl -fsSL "https://codeshare.frida.re/@Eltion/instagram-ssl-pinning-bypass/" -o codeshare-project.html
Extract the embedded projectSource into a local script:
python3 /path/to/frida-codeshare-search/scripts/codeshare_extract.py project codeshare-project.html -o agent.js
Then inspect before execution:
sed -n '1,220p' agent.js
Run Options
Run a reviewed local script:
frida -U -f com.instagram.android -l agent.js --no-pause
Run directly through CodeShare when direct execution is acceptable:
frida -U --codeshare Eltion/instagram-ssl-pinning-bypass -f com.instagram.android --no-pause
If the CodeShare page shows a placeholder like ${projectSlug}, use the slug from the project URL.
Adaptation Checklist
- Android Java hooks are inside
Java.perform()and overloads are explicit. - Native hooks wait for the module before resolving exports or symbols.
- iOS hooks check
ObjC.availableand confirm class/selectors or symbols exist. - Broad SSL/root/integrity bypass bundles are reduced to the hooks that actually fire.
- Logs prove which hook changed behavior; failures include the exact command, app version, Frida version, and target architecture.
References
- Official Frida CLI docs: https://frida.re/docs/frida-cli/
- Official Frida JavaScript API docs: https://frida.re/docs/javascript-api/
- Frida CodeShare: https://codeshare.frida.re/
- OWASP MASTG Frida CodeShare tool note: https://mas.owasp.org/MASTG/tools/generic/MASTG-TOOL-0032/