# Spade-sec/First

WMPFDebugger 二开微信小程序多功能集成工具

Repository: https://github.com/Spade-sec/First
Canonical: https://ross.abutalabs.com/products/first
Language: Python
License Family: other
Last push: 2026-07-10T02:19:10+00:00

## Health v2 (maintenance only)
Score: 74/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 91, release rhythm 89, longevity 10
- inputs: {"age_days": 153, "days_push": 55, "days_rel": 76, "gap_med": 4.0, "n_releases_24m": 13}
- flags: young, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1015, forks 205 (observed 2026-08-28T04:03:14.170747+00:00)

## What it is
A WeChat mini-program security debugging tool (fork/extension of WMPFDebugger) that uses Frida injection and Chrome DevTools Protocol bridging to analyze mini-programs on macOS and Windows. It captures wx.* API calls and cloud function invocations, unpacks wxapkg packages, scans for sensitive information, and integrates an MCP server for AI-assisted analysis.

## Use cases
- debug wechat mini programs with chrome devtools
- capture and replay wx.cloud.callFunction requests
- decrypt and unpack wxapkg mini-program packages
- scan decompiled mini-program code for sensitive information
- enumerate mini-program routes and test navigation guards
- hook wx.login and wx.request api calls
- analyze wechat mini programs with ai via mcp

## When to choose
- you need dynamic analysis of WeChat mini-programs on macOS or Windows
- you want to intercept and modify cloud function parameters during security testing
- you need to unpack wxapkg files and search decompiled source
- you want AI-assisted mini-program analysis through an MCP server

## When to avoid
- you need to audit the source code - the project is closed-source since v1.1.0
- you target unauthorized systems - it is for security research only
- you need Linux support
- you cannot disable SIP or re-sign WeChat on macOS

## Facets
- artifact type: application
- maturity: active
- function: security, reverse-engineering, penetration-testing, mcp, developer-tools
- domain: security, reverse-engineering, penetration-testing, developer-tools
- platform: windows, python
- tags: wechat, mini-program, frida, cdp, wxapkg, dynamic-analysis, closed-source, macos

## Member repositories
- Spade-sec/First (main) score 74

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:14.170747+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:11:24.758387+00:00, confidence not recorded.
  - readme: https://github.com/Spade-sec/First (fetched 2026-08-28T04:03:14.170747+00:00, sha 243a00c602ad)
- Data as of 2026-08-30T08:39:29.467469+00:00.