# CreditTone/hooker

🔥🔥 hooker is a Frida-based reverse engineering toolkit for Android. It offers a user-friendly CLI, universal scripts, auto hook generation, memory roaming to detect activities/services, one-click SOCKS5 proxy setup, Frida JustTrustMe, and BoringSSL unpinning for all apps.

Repository: https://github.com/CreditTone/hooker
Canonical: https://ross.abutalabs.com/products/hooker
Language: JavaScript
License Family: other
Topics: frida, android, xposed, apk, justtrustme, boringssl, mcp, reverse-engineering, sslunpinning
Last push: 2026-05-27T07:44:16+00:00

## Health v2 (maintenance only)
Score: 70/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 84, release rhythm 35, longevity 100
- inputs: {"age_days": 2348, "days_push": 98, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 5285, forks 1266 (observed 2026-08-28T04:09:14.222055+00:00)

## What it is
hooker is a Frida-based reverse engineering toolkit for Android that provides a comfortable command-line interface with universal hooking scripts. It includes auto-generated hook scripts, memory roaming to detect activities/services, a Frida version of JustTrustMe, BoringSSL SSL unpinning, an embedded webserver for exposing app capabilities as HTTP APIs, and one-click SOCKS5 proxy setup.

## Use cases
- bypass SSL certificate pinning in Android apps
- hook Java and native methods in an APK with Frida
- dump DEX files and keystores from a running app
- trace JNI method calls and ART method registration
- set up a SOCKS5 proxy on a rooted Android device without extra apps
- expose app internal functions as HTTP endpoints for automation
- detect anti-Frida protections in an app
- capture network traffic and SSL logs from an Android app

## When to choose
- you do Android reverse engineering with Frida and want a friendly CLI plus ready-made universal scripts
- you need maintained SSL unpinning (JustTrustMe/BoringSSL) that works across many apps
- you want to automate app analysis with auto-generated hook scripts or an embedded webserver API

## When to avoid
- you need a no-root solution or cannot attach Frida to the target device
- you only want static APK analysis without a rooted device or dynamic instrumentation
- you require a formally licensed project for commercial or compliance-sensitive use (no license is provided)

## Facets
- artifact type: cli-tool
- maturity: active
- function: reverse-engineering, security, cli, http-server, proxy, developer-tools
- domain: reverse-engineering, security, android-tools, developer-tools
- platform: python, cli, windows
- tags: frida, android, ssl-unpinning, justtrustme, boringssl, hook-scripts, xposed, apk-analysis, socks5-proxy, memory-roaming, mcp, command-line, linux, macos

## Member repositories
- CreditTone/hooker (main) score 70

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:09:14.222055+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:59:15.707274+00:00, confidence not recorded.
  - readme: https://github.com/CreditTone/hooker (fetched 2026-08-28T04:09:14.222055+00:00, sha b7db47ffb32a)
- Data as of 2026-08-30T08:39:29.467469+00:00.