hooker is a Frida-based Android reverse engineering toolkit with a CLI, auto hook/script generation, memory roaming, JustTrustMe, SSL unpinning, and a built-in embedded webserver for exposing interfaces.
Collecting history — the radar snapshots this repo daily. The trend line appears after 3 days of data (1 so far).
What it is
hooker is a Frida-based reverse engineering toolkit for Android. It provides a command-line interface, universal scripts, auto generation of hook scripts, memory roaming to detect activities/services, Frida JustTrustMe, and BoringSSL unpinning for all apps. It also includes an embedded webserver to expose internal controllers and debugging interfaces.
How it works
The project integrates Frida to attach or spawn hooks, automates generation of frida scripts, and offers commands to manage proxies, run JustTrustMe, and unpin SSL checks. It also serves a lightweight HTTP API inside the target app via an embedded webserver for UI automation, app information, class/method invocation, and MCP-style UI tooling.
Getting started
- Cloning the repository and installing dependencies (example commands shown in README):
git clone https://github.com/CreditTone/hooker.git
cd hooker
pip3 install -r requirements.txt
- Connect a device via adb and run hooker from its directory:
adb devices
python3 hooker.py
- Interact to select an app, create a working directory, and generate frida scripts at runtime.
Recent releases
- RELEASES (latest 0): - none
Traction
- Stars: 5263
- Forks: 1265
- Open issues: 48
Behind the repo
- Language: JavaScript
- License: none listed
- Created: 2020-03-29
- Last push: 2026-05-27
Caveats
- License information is not listed in the repository metadata.
- Documentation content includes Chinese language sections; an English readme is linked but not shown here.
- The project description notes usage for learning and research purposes and cautions about legal compliance.