Phantom-Frida Builder Skill

Claude Code skill for automating the compilation of anti-detection Frida servers using phantom-frida.

Overview

This skill automates the complete workflow of building stealth Frida servers that evade common detection mechanisms. It handles:

• Environment setup and dependency checking
• Repository cloning
• Random configuration generation (name + port)
• Compilation with extended anti-detection
• Deployment instruction generation

Features

• Automated Build Process: Complete workflow from clone to deployment
• Random Configuration: Generates unique names and ports for maximum stealth
• Extended Anti-Detection: Cleans 300+ residual "frida" strings from binaries
• 16 Detection Vectors: Covers string-based, behavioral, and advanced detection
• Utility Scripts: Dependency checker and version fetcher included

Installation

This skill is designed for use with Claude Code. Place it in your project's .claude/skills/ directory:

# The skill is already in the correct location
.claude/skills/phantom-frida/
├── SKILL.md
├── scripts/
│   ├── check-dependencies.sh
│   └── get-latest-version.sh
└── references/
    └── phantom-frida-details.md

Usage

Simply ask Claude Code to compile phantom-frida:

"Compile phantom-frida"
"Build anti-detection Frida"
"Create stealth Frida server"

The skill will automatically:

1. Check dependencies
2. Clone the repository
3. Generate random configuration
4. Compile with extended anti-detection
5. Provide deployment commands

Requirements

• Python 3.10+
• Git
• curl
• unzip
• make
• ~20GB free disk space

Build Output

• Server binary: <name>-server-<version>-android-arm64 (~50MB)
• Gadget library: <name>-gadget-<version>-android-arm64.so (~87MB)
• Compressed versions: .gz files (~22MB and ~28MB)

Anti-Detection Features

• String obfuscation (all "frida" references replaced)
• Thread name randomization
• SELinux label modification
• Binary-level string cleaning (extended mode)
• Custom port configuration
• Random naming

Compilation Time

• First build: ~30-35 minutes (includes NDK download)
• Subsequent builds: ~13-20 minutes (NDK cached)

License

MIT License - See LICENSE file for details.

Credits

• phantom-frida: TheQmaks/phantom-frida
• Frida: frida.re

Disclaimer

This tool is for authorized security research, penetration testing, and educational purposes only. Users are responsible for ensuring compliance with applicable laws and regulations.