Spade-sec/First
Some data may be outdated — see provenance labels.
WMPFDebugger 二开微信小程序多功能集成工具 observed · 2026-09-29
Health v2 · maintenance only
68/100
- Activity 83
- Release rhythm 81
- Longevity 14
Flags: no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 4.0
- age_days: 201
- days_rel: 124
- days_push: 103
- n_releases_24m: 13
Adoption not part of the score
1089 stars · 212 forks observed · 2026-09-29
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
A WeChat mini-program security debugging tool (fork/extension of WMPFDebugger) that uses Frida injection and Chrome DevTools Protocol bridging to analyze mini-programs on macOS and Windows. It captures wx.* API calls and cloud function invocations, unpacks wxapkg packages, scans for sensitive information, and integrates an MCP server for AI-assisted analysis.
Use cases
- debug wechat mini programs with chrome devtools
- capture and replay wx.cloud.callFunction requests
- decrypt and unpack wxapkg mini-program packages
- scan decompiled mini-program code for sensitive information
- enumerate mini-program routes and test navigation guards
- hook wx.login and wx.request api calls
- analyze wechat mini programs with ai via mcp
When to choose
- you need dynamic analysis of WeChat mini-programs on macOS or Windows
- you want to intercept and modify cloud function parameters during security testing
- you need to unpack wxapkg files and search decompiled source
- you want AI-assisted mini-program analysis through an MCP server
When to avoid
- you need to audit the source code - the project is closed-source since v1.1.0
- you target unauthorized systems - it is for security research only
- you need Linux support
- you cannot disable SIP or re-sign WeChat on macOS
Facets
application · maturity active
security reverse-engineering penetration-testing mcp developer-tools security reverse-engineering penetration-testing developer-tools windows python wechat mini-program frida cdp wxapkg dynamic-analysis closed-source macos
1 source
- readme: https://github.com/Spade-sec/First · fetched 2026-09-29 · 243a00c602ad
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| Spade-sec/First | main | 68 |
For agents
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem