hooker

Why we included this project

Anyone doing hands-on security analysis of Android apps will find a lot to work with here. The toolkit wraps Frida into a command-line workflow that handles the tedious setup, from pushing frida-server to listing installed apps and attaching or spawning a target by package name, so you can get to hooking quickly. The bundled JavaScript hooks cover the common chores: pinning bypass via JustTrustMe and BoringSSL unpinning, DEX and keystore dumping, JNI tracing, and spotting checks for root, Frida, or a VPN. It can also auto-generate hook scripts and expose app internals over an embedded web server so other automation can call them. If you regularly audit Android apps or need to inspect their behavior and traffic, this is a convenient workbench that saves a lot of script wiring and manual frida-server fiddling.