# Runtime Mobile Security (RMS)

> Frida-based web interface for observing Android and iOS apps at run time on a test device. It lists the classes and methods loaded in memory, traces method arguments and return values, generates hook templates for a selected class, finds class instances on the heap, and on Android monitors categorized framework APIs and a few libc file functions; a beta file browser covers the app's private folders.

- Type: Tool
- Targets: App
- Category: Debugging and dynamic analysis
- Relationship: Foundation tool
- Sources reviewed: 2026-10-19
- Added to the catalog: 2026-10-31
- Original resource: <https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security>
- Primary source: <https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/README.md>
- Catalog page: <https://awesomerea.org/resources/rms-runtime-mobile-security/>
- Record JSON: <https://awesomerea.org/resources/rms-runtime-mobile-security/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/rms-runtime-mobile-security/index.md)

## Requirements & limits

- Latest release at review: 1.5.25, published 2026-07-01, matching the reviewed master commit; it installs from npm as rms-runtime-mobile-security and its package.json depends on Frida 17 node bindings. The README says it was tested on macOS with Android emulators, an Amazon Fire Stick 4K, an iPhone 7 and Chrome, and may need minor adjustments on Windows and Linux.
- Requires Node.js, Frida's CLI tools and a frida-server already running on a single connected test device; RMS cannot handle several devices at once. It also attaches to a default system process to list preloaded classes. Use it only on apps and devices the user is authorized to analyze.
- The web interface defaults to port 5491; rms.js passes only a port to server.listen, so Node's default all-interface binding applies, and the reviewed code adds no login. The README notes that complex methods sometimes fail to load and that Safari is unsupported.
- GPL-3.0.

## Primary sources

1. <https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/README.md>
2. <https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/README.md#L36-L60>
3. <https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/README.md#L99-L118>
4. <https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/package.json>
5. <https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/rms.js#L101-L112>
6. <https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/LICENSE>
7. <https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/releases/tag/1.5.25>

## More in Native binaries

- [Pharos](https://awesomerea.org/resources/pharos/index.md) · Tool
- [heimdall-rs](https://awesomerea.org/resources/heimdall-rs/index.md) · Tool
- [PE-bear](https://awesomerea.org/resources/pe-bear/index.md) · Tool
- [PE-sieve](https://awesomerea.org/resources/pe-sieve/index.md) · Tool
- [oletools](https://awesomerea.org/resources/oletools/index.md) · Tool
- [MonkeyDev](https://awesomerea.org/resources/monkeydev/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.