# federicodotta/Brida

The new bridge between Burp Suite and Frida!

Repository: https://github.com/federicodotta/Brida
Canonical: https://ross.abutalabs.com/products/brida
Language: Java
License: MIT
License Family: permissive
Last push: 2025-10-30T13:47:46+00:00

## Health v2 (maintenance only)
Score: 49/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 49, release rhythm 21, longevity 100
- inputs: {"age_days": 3323, "days_push": 307, "days_rel": 314, "gap_med": null, "n_releases_24m": 1}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1889, forks 225 (observed 2026-08-28T04:05:49.400637+00:00)

## What it is
Brida is a Burp Suite extension that bridges Burp Suite and Frida, letting testers invoke and manipulate an application's own methods while tampering with traffic between the app and its backend. It supports all Frida platforms including Android, iOS, Windows, macOS, Linux, and QNX.

## Use cases
- tamper encrypted mobile app traffic in burp without knowing the crypto keys
- bypass ssl pinning and security checks on android and ios apps
- hook java and objective-c methods to inspect arguments and return values
- make an app encrypt or decrypt payloads for me during a pentest
- analyze a mobile app's classes and methods from a gui tree
- speed up mobile application security assessments with frida hooks

## When to choose
- you need to modify traffic protected by app-specific crypto or device-bound keys
- you want to reuse the app's own encryption/token routines instead of reimplementing them
- you do mobile assessments and want ready-made frida hooks callable from burp

## When to avoid
- you only need plain http interception without app-level crypto or hooks
- your target is not supported by frida or runs on an unsupported platform
- you need a fully automated CI pipeline rather than interactive manual testing

## Facets
- artifact type: plugin
- maturity: active
- function: security, reverse-engineering, penetration-testing, plugin-system
- domain: security, penetration-testing, reverse-engineering, mobile-development
- platform: windows, cross-platform
- tags: burp-suite-extension, frida, mobile-security, traffic-tampering, hooking, java, objc, android, ios, macos, linux

## Member repositories
- federicodotta/Brida (main) score 49

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:49.400637+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:13:05.970767+00:00, confidence not recorded.
  - readme: https://github.com/federicodotta/Brida (fetched 2026-08-28T04:05:49.400637+00:00, sha cebc3bc9ad19)
- Data as of 2026-08-30T08:39:29.467469+00:00.