nowsecure/r2frida

Health v2 · maintenance only

Adoption not part of the score

1434 stars · 141 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

r2frida is a radare2 plugin that integrates the Frida dynamic instrumentation toolkit, letting users inspect and manipulate local or remote processes using r2 commands instead of writing Frida scripts. It supports attaching, spawning, hooking, memory read/write, and tracing across Linux, Windows, macOS, iOS, and Android on x64, arm32, and arm64.

Use cases

• hook and trace functions in a running Android app
• inspect memory of an iOS process over USB
• reverse engineer a native binary with dynamic instrumentation
• enumerate classes and methods in an Objective-C or Java process
• patch code and change page permissions in a live process
• run Frida scripts from within radare2
• analyze malware behavior by attaching to a local process

When to choose

• you want to combine radare2's static analysis with Frida's dynamic instrumentation
• you need to analyze mobile apps on iOS or Android
• you prefer r2 commands over writing raw Frida JavaScript
• you need cross-platform process inspection without installing frida-tools on the host

When to avoid

• you only need static analysis without dynamic instrumentation
• you are not familiar with radare2 or Frida concepts
• you need a GUI-based reverse engineering tool
• your target platform is not supported by Frida

Facets

plugin · maturity active

reverse-engineering security plugin-system developer-tools security reverse-engineering developer-tools mobile-development windows cli cross-platform frida radare2 dynamic-analysis static-analysis binary-analysis instrumentation mobile-security memory-inspection hooking debugging linux macos android ios

Member repositories

For agents

markdown · JSON · MCP: product_card(name="nowsecure/r2frida")