Tool

Description

Parameters

attach_to_process

Attach to a running process by PID. Returns attachment status without creating a persistent session. Use

create_interactive_session

for session-based instrumentation.

pid

(number)

device_id

(optional string or connection string hostname:port)

spawn_process

Spawn a process with Frida attached in paused state. The process will be paused at startup. Use

resume_process()

after loading scripts to continue execution.

program

(string)

args

(optional string[])

device_id

(optional string or connection string)

resume_process

Resume a spawned process.

pid

(number)

device_id

(optional string or connection string)

kill_process

Kill a process by PID.

pid

(number)

device_id

(optional string or connection string)

Tool

Description

Parameters

create_interactive_session

Create an interactive session for dynamic instrumentation. Establishes a Frida session for injecting JavaScript, hooking functions, and monitoring the target process. The session persists until explicitly closed or the process terminates.

process_id

(number)

device_id

(optional string or connection string)

execute_in_session

Execute JavaScript code within an existing Frida session.

Modes:

•

keep_alive=false

(default): Script runs once, results in initial_logs

•

keep_alive=true

: Script persists for hooks, retrieve messages via

frida://sessions/{session_id}/messages

resource

session_id

(string)

javascript_code

(string)

keep_alive

(optional boolean, default: false)

load_script_file

Load and execute a Frida JavaScript file into an existing session.

session_id

(string)

script_path

(string)

keep_alive

(optional boolean, default: true)

Tool

Description

Parameters

download_file

Download a file from remote system using Frida instrumentation. Uses double backslashes for Windows paths. Attaches to specified PID or finds explorer.exe. Works best for files up to ~500MB with 60s timeout.

file_path

(string)

output_path

(string)

pid

(optional number)

device_id

(optional string or connection string)

URI

Description

frida://devices

List all connected Frida devices

frida://sessions

List all active Frida sessions and their statuses

URI Template

Description

frida://devices/{device_id}

Get detailed information about a specific device by ID

frida://devices/{device_id}/processes

List processes on a specific Frida device. Use "local", "usb", or "remote" for automatic device selection, provide a specific device ID, or use a connection string (hostname:port or hostname).

frida://devices/{device_id}/processes/by-name/{process_name}

Find a process by name (case-insensitive partial match) on a specific device. Supports connection strings (hostname:port or hostname).

frida://devices/{device_id}/processes/{pid}/module

Get main module information for a process (path, base address, size). Supports connection strings (hostname:port or hostname).

frida://sessions/{sessionId}/messages

Retrieve messages from persistent scripts. Append

/last:N

to limit results (e.g.,

/last:10

for last 10 messages) or

/all

for unlimited. Default limit is 100 messages. Messages are consumed when retrieved.