house: runtime mobile application analysis toolkit
House: A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python. It is designed for helping assess mobile applications by implementing dynamic function hooking and intercepting and intended to make Frida script writing as simple as possible.
To tackle this complexity, I wrote House, a runtime mobile application analysis toolkit with a Web GUI that is powered by Frida and written in Python. House is designed for helping assess mobile applications by implementing dynamic function hooking and intercepting and intended to make Frida script writing as simple as possible.
House is an open source web application that simplifies the testing process with Frida. With House, security researchers can easily generate Frida scripts to perform various tasks including enumeration, function hooking and intercepting. It also provides an easy-to-use web UI for researchers to generate, customize, and manage their Frida scripts. House is currently focused on Android testing, but the plan is to extend it in the future to generalize it.
House provides the following key features through its UI by automatically generating the underlying Frida scripts implementing them:
Class Enumeration: Enumerates both defined and loaded Java classes within an application, with the ability to filter by package name.
Method Enumeration: Enumerates all methods within a given class.
Multiple Function Tracing: Traces and logs call to functions declared through the UI.
Customize Generated Scripts: House provides a user interface to tweak its generated scripts.
Function Interception: House provides users with the ability to inspect and interdict live function calls through the use of hook snippets, an interception UI, and a live REPL.
Copyright (c) 2018 NCC Group