# nowsecure/r2frida

Radare2 and Frida better together.

Repository: https://github.com/nowsecure/r2frida
Canonical: https://ross.abutalabs.com/products/r2frida
Language: TypeScript
License: MIT
License Family: permissive
Topics: frida, radare2, ios-security, android-security, static-analysis, dynamic-analysis
Last push: 2026-08-24T23:25:59+00:00

## Health v2 (maintenance only)
Score: 94/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 85, longevity 100
- inputs: {"age_days": 4129, "days_push": 9, "days_rel": 23, "gap_med": 45.5, "n_releases_24m": 13}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1434, forks 141 (observed 2026-08-28T04:04:43.358330+00:00)

## What it is
r2frida is a radare2 plugin that integrates the Frida dynamic instrumentation toolkit, letting users inspect and manipulate local or remote processes using r2 commands instead of writing Frida scripts. It supports attaching, spawning, hooking, memory read/write, and tracing across Linux, Windows, macOS, iOS, and Android on x64, arm32, and arm64.

## Use cases
- hook and trace functions in a running Android app
- inspect memory of an iOS process over USB
- reverse engineer a native binary with dynamic instrumentation
- enumerate classes and methods in an Objective-C or Java process
- patch code and change page permissions in a live process
- run Frida scripts from within radare2
- analyze malware behavior by attaching to a local process

## When to choose
- you want to combine radare2's static analysis with Frida's dynamic instrumentation
- you need to analyze mobile apps on iOS or Android
- you prefer r2 commands over writing raw Frida JavaScript
- you need cross-platform process inspection without installing frida-tools on the host

## When to avoid
- you only need static analysis without dynamic instrumentation
- you are not familiar with radare2 or Frida concepts
- you need a GUI-based reverse engineering tool
- your target platform is not supported by Frida

## Facets
- artifact type: plugin
- maturity: active
- function: reverse-engineering, security, plugin-system, developer-tools
- domain: security, reverse-engineering, developer-tools, mobile-development
- platform: windows, cli, cross-platform
- tags: frida, radare2, dynamic-analysis, static-analysis, binary-analysis, instrumentation, mobile-security, memory-inspection, hooking, debugging, linux, macos, android, ios

## Member repositories
- nowsecure/r2frida (main) score 94

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:04:43.358330+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T04:36:55.338465+00:00, confidence not recorded.
  - readme: https://github.com/nowsecure/r2frida (fetched 2026-08-28T04:04:43.358330+00:00, sha 8379940986cc)
- Data as of 2026-08-30T08:39:29.467469+00:00.