Use this skill when choosing a Frida command-line tool or building a command from scratch.
Tool Picker
frida: interactive REPL, load scripts, spawn or attach to a target.frida-ps: list processes and installed apps.frida-ls-devices: list local, USB, and remote devices.frida-trace: generate temporary handlers for matching functions, ObjC methods, Java methods, or modules.frida-discover: discover internal functions by observing activity.frida-kill: kill a process on a selected device by PID.frida-create: scaffold an agent project when TypeScript or packaging is needed.
Target Selectors
frida-ls-devices
frida-ps -Uai
frida -U -f com.example.app -l agent.js --no-pause
frida -U -n "App Name" -l agent.js
frida -p 1234 -l agent.js
frida -H 127.0.0.1:27042 -n target -l agent.js
Prefer package/bundle identifiers for mobile spawn commands and PID when process names are ambiguous.
Trace Examples
frida-trace -U -f com.example.app -j '*!*certificate*/isu' --no-pause
frida-trace -U -f com.example.app -i 'Java_*' --no-pause
frida-trace -p 1234 -i '*open*' -x 'libSystem*!*open*'
frida-trace -U -f com.example.ios -m '-[NSURLSession *]' --no-pause
Option order matters for include and exclude filters: build the working set with includes, then remove noise with excludes.
Direct CodeShare
frida -U --codeshare author/project-slug -f com.example.app --no-pause
Prefer frida-codeshare-search when the script must be fetched, reviewed, and saved locally first.
Proof To Report
- Exact command used.
- Device selector and target selector.
- Frida version.
- Whether the command attaches, spawns, traces, or kills.
- First useful output or full error.
References
Read references/tool-docs.md for official Frida tool documentation links and option notes.