Rev Frida

This generates Frida instrumentation scripts with modern API patterns baked in. It's tuned for the current CLI (no more --no-pause) and steers you toward event-driven native hooking instead of polling. The built-in module load helpers handle Android dlopen timing correctly, which saves you from the usual race conditions when targeting .so files. It also pushes back on blindly hooking constructors or .init_array, which is good advice since those tend to be fragile. If you're writing hooks for Android, iOS, or native targets and want something that generates working scripts instead of outdated Stack Overflow snippets, this is a solid starting point.

skills.sh installs: 2.3K
GitHub stars: 2.4K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add p4nda0s/reverse-skills --skill rev-frida --agent claude-code

Installs into .claude/skills of the current project.

Files

rev-frida - Frida Script Generator

Generate Frida instrumentation scripts for dynamic analysis, hooking, and runtime inspection.

Overview

Use Frida for:

native export hooks
Java or ObjC method hooks
runtime tracing
argument or return-value capture
memory dumping
loader-aware native instrumentation

Important: Modern Frida CLI

The modern Frida CLI does not use --no-pause. A spawned process resumes after the script is loaded.

# Spawn and hook
frida -U -f com.example.app -l hook.js

# Attach to running process
frida -U com.example.app -l hook.js

# Attach by PID
frida -U -p 1234 -l hook.js

Modern API Reference

Module & Symbol Lookup

const mod = Process.getModuleByName("libssl.so");

mod.name;
mod.base;
mod.size;
mod.path;

const ptr = mod.getExportByName("SSL_read");

Process.enumerateModules();
mod.enumerateExports();
mod.enumerateImports();

const addr = Module.getExportByName(null, "open");