{
  "added_at": "2026-10-31",
  "additional_evidence_urls": [
    "https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/README.md#L36-L60",
    "https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/README.md#L99-L118",
    "https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/package.json",
    "https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/rms.js#L101-L112",
    "https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/LICENSE",
    "https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/releases/tag/1.5.25"
  ],
  "category": "dynamic-analysis",
  "description_en": "Frida-based web interface for observing Android and iOS apps at run time on a test device. It lists the classes and methods loaded in memory, traces method arguments and return values, generates hook templates for a selected class, finds class instances on the heap, and on Android monitors categorized framework APIs and a few libc file functions; a beta file browser covers the app's private folders.",
  "description_zh": "基于 Frida 的 Web 界面，用于在测试设备上观察运行中的 Android 与 iOS 应用。它可列出内存中已加载的类和方法，跟踪方法参数与返回值，为选定的类生成 Hook 模板，在堆上查找类实例；在 Android 上还能按类别监控框架 API 以及少数 libc 文件函数。另有处于测试阶段的文件浏览器，可查看应用的私有目录。",
  "entry_url": "https://awesomerea.org/resources/rms-runtime-mobile-security/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/rms-runtime-mobile-security/",
  "evidence_url": "https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/blob/d07212e7edec20b14e3108860bebb4f0e8fffe40/README.md",
  "group": "tools",
  "id": "rms-runtime-mobile-security",
  "json_url": "https://awesomerea.org/resources/rms-runtime-mobile-security/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/rms-runtime-mobile-security/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/rms-runtime-mobile-security/index.md",
  "name": "Runtime Mobile Security (RMS)",
  "name_zh": "Runtime Mobile Security（RMS）移动应用运行时分析界面",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Latest release at review: 1.5.25, published 2026-07-01, matching the reviewed master commit; it installs from npm as rms-runtime-mobile-security and its package.json depends on Frida 17 node bindings. The README says it was tested on macOS with Android emulators, an Amazon Fire Stick 4K, an iPhone 7 and Chrome, and may need minor adjustments on Windows and Linux.",
    "Requires Node.js, Frida's CLI tools and a frida-server already running on a single connected test device; RMS cannot handle several devices at once. It also attaches to a default system process to list preloaded classes. Use it only on apps and devices the user is authorized to analyze.",
    "The web interface defaults to port 5491; rms.js passes only a port to server.listen, so Node's default all-interface binding applies, and the reviewed code adds no login. The README notes that complex methods sometimes fail to load and that Safari is unsupported.",
    "GPL-3.0."
  ],
  "requirements_zh": [
    "审阅时的最新版本为 1.5.25，发布于 2026-07-01，与所审阅的 master 提交一致；可通过 npm 安装（包名 rms-runtime-mobile-security），package.json 依赖 Frida 17 的 Node 绑定。README 称它在 macOS 上配合 Android 模拟器、Amazon Fire Stick 4K、iPhone 7 和 Chrome 测试过，在 Windows 和 Linux 上可能需要少量调整。",
    "需要 Node.js、Frida 命令行工具，并在唯一连接的测试设备上预先运行 frida-server；RMS 无法同时处理多台设备。它还会附加到一个默认系统进程，以列出预先加载的类。仅应在使用者有权分析的应用和设备上使用。",
    "Web 界面默认使用 5491 端口；rms.js 调用 server.listen 时只传入端口，因此适用 Node 默认的全接口绑定，所审阅的代码也没有登录验证。README 提到复杂方法有时无法加载，且不支持 Safari。",
    "采用 GPL-3.0 许可。"
  ],
  "targets": [
    "app"
  ],
  "url": "https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security",
  "verification": "source-reviewed",
  "verified_at": "2026-10-19"
}