# dstmath/frida-unpack

基于Frida的脱壳工具

Repository: https://github.com/dstmath/frida-unpack
Canonical: https://ross.abutalabs.com/products/frida-unpack
Language: Python
License: MIT
License Family: permissive
Last push: 2025-06-11T00:59:09+00:00

## Health v2 (maintenance only)
Score: 44/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 26, release rhythm 35, longevity 100
- inputs: {"age_days": 2981, "days_push": 449, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1612, forks 336 (observed 2026-08-28T04:05:11.114990+00:00)

## What it is
A Frida-based unpacking tool for Android apps that hooks libart.so's OpenMemory (or OpenCommon on Android 10) to dump decrypted DEX files from memory. It ships as JavaScript injection scripts plus a Python driver for extracting DEX from packed/protected apps.

## Use cases
- unpack a packed android app to get its dex
- dump dex from memory using frida
- bypass legu or 360 packers on android apps
- extract dex files from a protected apk
- hook OpenMemory in libart.so to dump dex
- reverse engineer an obfuscated android application

## When to choose
- you need to dump DEX from Android apps protected by packers like legu or 360
- you already run Frida server on a rooted Android device
- you want a small script you can adapt to specific Android versions or packers

## When to avoid
- you need to unpack iOS or non-Android binaries
- you want a polished GUI tool with no manual symbol-signature adjustments
- your target runs on 64-bit Android without modifying the OpenMemory signature
- you need to bypass modern packers that defeat Frida-based hooking

## Facets
- artifact type: cli-tool
- maturity: maintenance
- function: reverse-engineering, security, cli
- domain: security, reverse-engineering, android-tools
- platform: python, cli
- tags: frida, unpacking, dex-dump, android, hooking, mobile-security

## Member repositories
- dstmath/frida-unpack (main) score 44

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:11.114990+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:51:09.450663+00:00, confidence not recorded.
  - readme: https://github.com/dstmath/frida-unpack (fetched 2026-08-28T04:05:11.114990+00:00, sha 9d01b4f3c375)
- Data as of 2026-08-30T08:39:29.467469+00:00.