High-risk tools in Ya Frida
31 of the 61 tools in Ya Frida are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
adb_connectExecuteConnect to a device over TCP/IP (e.g. '192.168.1.100:5555').
-
adb_disconnectExecuteDisconnect a TCP/IP device.
-
adb_forwardExecuteSet up port forwarding (e.g. local='tcp:27042' remote='tcp:27042').
-
adb_installExecuteInstall an APK on the device.
-
adb_rebootExecuteReboot the device.
-
adb_reverseExecuteSet up reverse port forwarding (device to host).
-
adb_rootExecuteRestart adbd with root permissions.
-
adb_shellExecuteRun a shell command on the device and return its output.
-
adb_unrootExecuteRestart adbd without root permissions.
-
frida_attachExecutefrida_attach
-
frida_compile_scriptExecutefrida_compile_script
-
frida_detachExecuteDetach from a process session.
-
frida_disable_child_gatingExecuteDisable child gating on a session.
-
frida_disable_spawn_gatingExecuteDisable spawn gating on the device.
-
frida_enable_child_gatingExecuteEnable child gating on a session.
-
frida_enable_spawn_gatingExecuteEnable spawn gating on the device.
-
frida_eternalize_scriptExecuteEternalize a script so it persists after detaching from the session.
-
frida_fix_usapExecutefrida_fix_usap
-
frida_injectExecutefrida_inject
-
frida_inject_library_blobExecutefrida_inject_library_blob
-
frida_inject_library_fileExecutefrida_inject_library_file
-
frida_memory_protectExecuteChange memory protection flags.
-
frida_memory_writeExecuteWrite bytes to process memory.
-
frida_post_messageExecutePost a message to an injected script.
-
frida_resumeExecuteResume a suspended process.
-
frida_rpc_callExecutefrida_rpc_call
-
frida_server_startExecuteStart frida-server on the device (must already be pushed).
-
frida_server_stopExecuteStop frida-server on the device.
-
frida_snapshot_scriptExecutefrida_snapshot_script
-
frida_spawnExecutefrida_spawn
-
frida_unload_scriptExecuteUnload a previously injected script.
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.