List all available Frida devices (USB, remote, local)

List running processes on a device

List installed applications on a device

Connect to an app by bundle ID, name, or PID. Must call this before using other tools. When spawn=True, uses reliable adb-based launch instead of Frida spawn.

Disconnect from the current session

Check if Frida session is still alive and healthy. Returns connection status, PID, and device info.

List all active Frida sessions. Supports multi-device workflows.

Switch to a different active session by ID. Use list_sessions to see available sessions.

Get PID of a running app by package name. Useful before attaching with connect().

Launch an app via adb and return its PID (smart wait - polls for process).

Force stop an app by package name

Force stop app, launch fresh, and attach Frida. The reliable alternative to connect(spawn=True) which often times out.

List all loaded modules (libraries) in the process

List exports (functions) from a specific module

Search process memory for a pattern

Read memory at a specific address

List loaded Java classes, optionally filtered by pattern

List methods of a Java class

Hook a Java method to monitor calls. Logs arguments, return values, and optionally backtraces.

Search for Java classes matching a pattern

Disable SSL certificate pinning to allow traffic interception

Get the current foreground activity

List files in a directory on the device

Read a text file from the device

Download a file from device to local machine

Execute custom Frida JavaScript code. Java bridge is auto-imported, so Java.perform(), Java.use(), etc. work directly.

Install a persistent hook script that stays active and collects messages. Use get_hook_messages to retrieve collected output.

Get collected messages from persistent hooks installed via install_hook

Clear the hook message buffer without retrieving

Unload all persistent hook scripts

List all installed persistent hooks with their names and indices

Get base address of a module by name (partial match). Returns {module: {name, base, size, path}}

Hook a native function by module+offset. Messages collected via get_hook_messages().

Search Java heap for live instances of a class

Write bytes to memory address (for patching)

Dump all methods, fields, and constructors of a Java class

Run arbitrary Java code within Java.performNow context. Has access to Java.use(), Java.choose(), send(), etc. Return value is the result of the last expression.