Ch0pin/medusa

Health v2 · maintenance only

Adoption not part of the score

2332 stars · 318 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

MEDUSA is a modular automation framework and script repository for runtime testing and investigating Android and iOS apps, built on FRIDA. It ships with 90+ reusable modules for bypassing protections, tracing API calls, inspecting network/WebView activity, and monitoring malware behavior from a single coordinated script.

Use cases

• bypass ssl pinning in android apps
• trace api calls in an ios app at runtime
• analyze android malware behavior dynamically
• inspect webview activity in a mobile app
• hook crypto functions to examine memory
• automate repeated frida-based pentest checks
• compile multiple frida scripts into one unified script

When to choose

• you need runtime instrumentation of Android or iOS apps during a pentest
• you want a curated library of ready-made FRIDA modules instead of writing scripts from scratch
• you are performing dynamic malware analysis on mobile apps
• you need repeatable, scalable mobile security testing workflows

When to avoid

• you need static analysis of mobile binaries without a rooted device or emulator
• you are testing non-mobile platforms like desktop or web apps
• you want a fully automated CI pipeline tool rather than an interactive CLI
• you cannot run a FRIDA server on the target device

Facets

framework · maturity active

security penetration-testing reverse-engineering developer-tools cli security penetration-testing mobile-development reverse-engineering android-tools windows python cli frida android ios malware-analysis ssl-pinning-bypass runtime-instrumentation mobile-security linux macos docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Ch0pin/medusa")