High-risk tools in Frida
4 of the 8 tools in Frida are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
start_frida_serverExecute启动设备上的 frida-server。 - 来源: 使用 config.json 的 server_path/server_name/server_port - 返回: {status, path, port, message}
-
stop_frida_serverExecute停止设备上的 frida-server。 - 返回: {status, message}
-
spawnExecute拉起应用（挂起态）并附加，可选在恢复前注入脚本。 Args: - package_name: 应用包名 - initial_script: 可选注入的 Frida JS 代码字符串 - script_file_path: 可选注入的 JS 文件绝对路径（优先于 initial_script） -...
-
attachExecute附加到运行中的进程，并可选注入脚本。 Args: - target: PID 字符串或包名 - initial_script: 可选注入的 Frida JS 代码字符串 - script_file_path: 可选注入的 JS 文件绝对路径（优先于 initial_script） - outpu...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.