Spade-sec/First
WMPFDebugger 二开微信小程序多功能集成工具 observed · 2026-08-28
Health v2 · maintenance only
74/100
- Activity 91
- Release rhythm 89
- Longevity 10
Flags: young no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 4.0
- age_days: 153
- days_rel: 76
- days_push: 55
- n_releases_24m: 13
Adoption not part of the score
1015 stars · 205 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
A WeChat mini-program security debugging tool (fork/extension of WMPFDebugger) that uses Frida injection and Chrome DevTools Protocol bridging to analyze mini-programs on macOS and Windows. It captures wx.* API calls and cloud function invocations, unpacks wxapkg packages, scans for sensitive information, and integrates an MCP server for AI-assisted analysis.
Use cases
- debug wechat mini programs with chrome devtools
- capture and replay wx.cloud.callFunction requests
- decrypt and unpack wxapkg mini-program packages
- scan decompiled mini-program code for sensitive information
- enumerate mini-program routes and test navigation guards
- hook wx.login and wx.request api calls
- analyze wechat mini programs with ai via mcp
When to choose
- you need dynamic analysis of WeChat mini-programs on macOS or Windows
- you want to intercept and modify cloud function parameters during security testing
- you need to unpack wxapkg files and search decompiled source
- you want AI-assisted mini-program analysis through an MCP server
When to avoid
- you need to audit the source code - the project is closed-source since v1.1.0
- you target unauthorized systems - it is for security research only
- you need Linux support
- you cannot disable SIP or re-sign WeChat on macOS
Facets
application · maturity active
security reverse-engineering penetration-testing mcp developer-tools security reverse-engineering penetration-testing developer-tools windows python wechat mini-program frida cdp wxapkg dynamic-analysis closed-source macos
1 source
- readme: https://github.com/Spade-sec/First · fetched 2026-08-28 · 243a00c602ad
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| Spade-sec/First | main | 74 |
For agents
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem