Skip to content

hooky v0.1.0

Choose a tag to compare

@cpholguera cpholguera released this 18 Jan 18:22
· 31 commits to main since this release

We're excited to announce the first release of frooky, a Frida-powered dynamic instrumentation tool for Android and iOS applications.

Overview

frooky provides a streamlined approach to mobile application analysis using declarative JSON hook files. It combines the power of Frida with an intuitive configuration format, enabling security researchers and developers to capture runtime behavior without writing JavaScript.

Key Features

Frida-Style CLI

Full support for familiar Frida command-line options:

  • Device selection: -U (USB), -D (device ID)
  • Target selection: -F (frontmost app), -n (name), -N (identifier), -p (PID), -f (spawn)

Platform Support

  • Android: Full support for Java/Kotlin and native hooks
  • iOS: Full support for Objective-C/Swift and native hooks

JSON Hook Configuration

Declarative hook definitions supporting:

  • Java/Kotlin hooks: Class methods with overload resolution and stack traces
  • Native hooks: C/C++ functions with argument descriptors, filters, and return value capture
  • Objective-C hooks: iOS method hooking with class and symbol support
  • Multiple hook files: Automatic merging of hooks from multiple JSON files

Advanced Capabilities

  • Dynamic argument length resolution with lengthInArg
  • Outbound parameter capture with direction: "out"
  • Stack trace filtering with filterEventsByStacktrace
  • Value-based filtering to reduce noise
  • Flexible argument type support (string, int32, int64, bytes, pointers, CFData, CFDictionary, etc.)

Real-Time Monitoring

Live status display showing:

  • Total hooks loaded and any errors
  • Event count with live updates
  • Last captured event for immediate feedback

Structured Output

Events captured in JSON Lines format for easy processing with standard tools (jq, grep, Python, etc.)

Getting Started

# Install
pip install frooky

# Run with hook files
frooky -U -f com.example.app hooks.json

# Attach to running app
frooky -U -n "My App" hooks.json

Documentation

Comprehensive documentation available for now in the README, including:

  • Installation instructions
  • CLI reference
  • Hook file format and examples
  • Argument types and descriptors
  • Best practices

For bug reports and feature requests, please visit our issue tracker.

New Contributors

Full Changelog: https://github.com/cpholguera/frooky/commits/v0.1.0