FridaForge: Automated Generation of Frida Scripts with Dynamic Application Context

• Francisco Sales UFAM
• Eduardo Souto UFAM
• Horácio Fernandes UFAM

DOI: https://doi.org/10.5753/sbseg_estendido.2026.33576

Abstract

Dynamic instrumentation with Frida allows Android security analysts to inspect internal behavior, intercept sensitive data, and bypass protection mechanisms, but it requires expertise in both the Frida API and the target application’s internal structure. This paper presents FridaForge, an open-source tool that generates and executes Frida scripts from natural language queries, using information collected from the running application to adapt scripts to the target. Evaluated on ten intentionally vulnerable Android applications (83 tasks, 92 queries, 460 executions), FridaForge achieved a 95.7% success rate. Source code, documentation, and demonstration materials are publicly available.

References

Chen, M., Tworek, J., Jun, H., et al. (2021). Evaluating large language models trained on code. ArXiv, abs/2107.03374.

D’Elia, D. C., Coppa, E., Nicchi, S., Palmaro, F., and Cavallaro, L. (2019). Sok: Using dynamic binary instrumentation for security (and how you may get caught red handed). In Proceedings of the 2019 ACM Asia Conference on Computer and Communications Security, ACM Asia CCS ’19, pages 15–27, New York, NY, USA.

Frida (2026). Frida: A world-class dynamic instrumentation toolkit. [link]. Acesso em: abril de 2026.

Frida CodeShare (2026). Frida CodeShare: Community Frida scripts repository. [link]. Acesso em: abril de 2026.

MEDUSA (2026). MEDUSA: Mobile edge-dynamic unified security analysis. [link]. Acesso em: abril de 2026.

Objection (2026). Objection: Runtime mobile exploration. [link]. Acesso em: abril de 2026.

OWASP MASTG (2026). OWASP MASTG – apps. [link]. Acessado em: abril de 2026.

Rozière, B., Gehring, J., Gloeckle, F., et al. (2023). Code llama: Open foundation models for code. ArXiv, abs/2308.12950.

Sutter, T., Kehrer, T., Rennhard, M., Tellenbach, B., and Klein, J. (2024). Dynamic security analysis on android: A systematic literature review. IEEE Access, 12:57261–57287.

Xu, H., Wang, S., Li, N., Wang, K., Zhao, Y., Chen, K., Yu, T., Liu, Y., and Wang, H. (2025). Large language models for cyber security: A systematic literature review. ACM Trans. Softw. Eng. Methodol.