{
  "added_at": "2026-11-03",
  "additional_evidence_urls": [
    "https://github.com/Nightbringer21/fridump/blob/3e64ee0b0e3dbd7e1aa295077c9ba0728a2bc68f/fridump.py",
    "https://github.com/Nightbringer21/fridump/blob/3e64ee0b0e3dbd7e1aa295077c9ba0728a2bc68f/dumper.py",
    "https://github.com/Nightbringer21/fridump/blob/3e64ee0b0e3dbd7e1aa295077c9ba0728a2bc68f/utils.py",
    "https://frida.re/news/2025/05/17/frida-17-0-0-released/"
  ],
  "category": "dynamic-analysis",
  "description_en": "Small Python command-line tool that attaches to a running process through Frida and writes its accessible memory ranges to files, run from a Windows, Linux or macOS host against iOS, Android or Windows applications. By default it saves ranges that are readable and writable, -r also takes read-only ones, ranges above a size limit (20 MiB unless set with --max-size) are split into chunks, and -s runs a basic strings pass that collects printable text from every dump into strings.txt. Its README presents it for penetration testers and developers.",
  "description_zh": "一个小型 Python 命令行工具，通过 Frida 附加到正在运行的进程，把其中可访问的内存区域写入文件；可在 Windows、Linux 或 macOS 主机上运行，面向 iOS、Android 或 Windows 应用。默认只保存可读写的内存区域，-r 会连同只读区域一并保存；超过大小上限（默认 20 MiB，可用 --max-size 调整）的区域会拆分成多块；-s 会对所有转储文件做一遍简单的字符串提取，把可打印文本汇总到 strings.txt。其 README 称该工具主要面向渗透测试人员和开发者。",
  "entry_url": "https://awesomerea.org/resources/fridump/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/fridump/",
  "evidence_url": "https://github.com/Nightbringer21/fridump/blob/3e64ee0b0e3dbd7e1aa295077c9ba0728a2bc68f/README.md",
  "group": "tools",
  "id": "fridump",
  "json_url": "https://awesomerea.org/resources/fridump/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/fridump/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/fridump/index.md",
  "name": "Fridump",
  "name_zh": "Fridump 基于 Frida 的进程内存转储工具",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "The README calls this version 0.1 and warns that bugs are expected. The newest commit on master dates from 2019-04-25, and the repository has no tags or releases. The README reports testing only from Windows 7 and Mac OS X hosts, against an iPad Air 2 on iOS 8.2, a Galaxy Tab running CyanogenMod 4.4.4 and a Windows 7 laptop.",
    "Run fridump.py from a clone with Python and the frida package from pip; there is no requirements file and no Frida version is pinned. Its embedded agent calls Process.enumerateRangesSync and Memory.readByteArray, legacy APIs that Frida's 17.0.0 release notes (May 2025) say are now gone, so the unmodified script appears to need an earlier Frida release.",
    "Mobile targets need a frida-server matching the host's Frida on the device, which the README says must run as root on Android; -U selects a USB-connected device and frida-ps lists process names. Output is one raw file per memory range, named by its base address, with no structure or symbol recovery; ranges that cannot be read are skipped with a warning.",
    "Dumps can hold credentials and personal data from the target process, so use it only on apps and devices you own or are authorized to test. The repository has no license file and GitHub detects no license, so it grants no explicit reuse terms; it contains only three Python files and the README."
  ],
  "requirements_zh": [
    "README 称当前为 0.1 版，并提醒可能存在缺陷。master 分支最新提交为 2019-04-25，仓库没有标签或发布版本。README 报告的测试仅限于以 Windows 7 和 Mac OS X 为主机，目标为运行 iOS 8.2 的 iPad Air 2、运行 CyanogenMod 4.4.4 的 Galaxy Tab 和一台 Windows 7 笔记本。",
    "从克隆的仓库运行 fridump.py，需要 Python 和用 pip 安装的 frida 包；仓库没有依赖清单，也未固定 Frida 版本。其内嵌代理脚本调用 Process.enumerateRangesSync 和 Memory.readByteArray，而 Frida 17.0.0 的发布说明（2025 年 5 月）表示这类旧式 API 已被移除，因此未经修改的脚本看来需要更早的 Frida 版本。",
    "移动设备上需要运行与主机 Frida 版本匹配的 frida-server，README 指出在 Android 上它必须以 root 身份运行；-U 用于选择通过 USB 连接的设备，frida-ps 可列出进程名。输出为每个内存区域一个原始文件，以其基地址命名，不做结构或符号恢复；无法读取的区域会给出警告并跳过。",
    "转储中可能包含目标进程里的凭据和个人数据，因此只应用于自己拥有或获得授权测试的应用和设备。仓库没有许可证文件，GitHub 也未识别出许可证，因此没有明确的再使用授权；仓库仅包含三个 Python 文件和 README。"
  ],
  "targets": [
    "app",
    "binary"
  ],
  "url": "https://github.com/Nightbringer21/fridump",
  "verification": "source-reviewed",
  "verified_at": "2026-10-27"
}