{
  "added_at": "2026-10-19",
  "additional_evidence_urls": [
    "https://github.com/httptoolkit/frida-interception-and-unpinning/blob/560dd29d410fe785f9f390e3c7f86ca8359c8d67/LICENSE"
  ],
  "category": "android",
  "description_en": "A set of Frida scripts from HTTP Toolkit for inspecting a mobile app's HTTPS traffic while analysing apps you own or are authorized to test. Injected into a running Android or iOS app, they redirect its connections to an interception proxy, add a user-supplied CA certificate to the trust stores, and disable certificate pinning and transparency checks so the proxy can read the traffic. Individual scripts can also be used on their own to hook specific behaviour.",
  "description_zh": "来自 HTTP Toolkit 的一组 Frida 脚本，用于在分析自有或经授权测试的应用时检查移动应用的 HTTPS 流量。将其注入运行中的 Android 或 iOS 应用后，可把连接重定向到检查代理、将用户提供的 CA 证书加入信任库，并关闭证书固定与证书透明度检查，使代理能够读取流量。各脚本也可单独使用以挂钩特定行为。",
  "entry_url": "https://awesomerea.org/resources/frida-interception-and-unpinning/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/frida-interception-and-unpinning/",
  "evidence_url": "https://github.com/httptoolkit/frida-interception-and-unpinning/blob/560dd29d410fe785f9f390e3c7f86ca8359c8d67/README.md",
  "group": "tools",
  "id": "frida-interception-and-unpinning",
  "json_url": "https://awesomerea.org/resources/frida-interception-and-unpinning/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/frida-interception-and-unpinning/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/frida-interception-and-unpinning/index.md",
  "name": "Frida Mobile Interception Scripts",
  "name_zh": "Frida 移动端拦截脚本",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Delivered as Frida scripts injected into a target app with the Frida CLI; the README's Android workflow requires a rooted device or emulator running frida-server as root, and the iOS workflow requires a jailbroken device with Frida installed.",
    "The analyst supplies their own interception proxy and CA certificate and edits config.js before use; the scripts are intended only for mobile apps you own or are authorized to test, not for circumventing protections on third-party software.",
    "AGPL-3.0 licensed and funded by NLnet as part of the HTTP Toolkit project; the repository ships scripts only and no application packages."
  ],
  "requirements_zh": [
    "以 Frida 脚本形式通过 Frida 命令行注入目标应用；README 的 Android 流程要求已 root 的设备或模拟器，并以 root 身份运行 frida-server，iOS 流程要求已越狱并安装 Frida 的设备。",
    "使用者需自行提供检查代理与 CA 证书，并在使用前编辑 config.js；这些脚本仅适用于使用者拥有或有权测试的移动应用，不得用于绕过第三方软件的保护。",
    "采用 AGPL-3.0 许可证，由 NLnet 资助，是 HTTP Toolkit 项目的一部分；仓库仅包含脚本，不含任何应用安装包。"
  ],
  "targets": [
    "app",
    "protocol"
  ],
  "url": "https://github.com/httptoolkit/frida-interception-and-unpinning",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}