Super Trouper

io.github.crissyfield由 GitHub 帳號 crissyfield 發布v0.5.1更新於 Oct 24, 2026

MCP server for the Frida reverse engineering toolkit.

已驗證STDIO僅桌面開發者工具安全與監控

概覽

AI 產生的概覽

針對 Frida 逆向工程工具包的 MCP 伺服器，讓助理檢查裝置、行程與記憶體並執行插樁腳本。

可以做什麼
  • 列出並連線本機、USB 與遠端 Frida 裝置，啟動、恢復或終止行程
  • 列出、尋找並檢視裝置上的應用程式、行程、模組與執行緒
  • 附加到行程，建立、載入、卸載插樁腳本並收發訊息
  • 讀寫小段記憶體，並在已附加的行程中執行 JavaScript
  • 搜尋、瀏覽並取得 Frida CodeShare 社群腳本
  • 管理 Frida Pattern 專案、將 npm 套件安裝到共用工作區，並查詢 Frida 版本與 API 文件
適用情境
適合逆向工程、動態分析與除錯情境：需要助理在本機、USB 連線或遠端目標上操作 Frida、取得社群插樁腳本，或檢視執行中行程的狀態。
執行需求
以本機 stdio 行程執行；可透過 npm 套件 @crissyfield/super-trouper（npx）、Homebrew cask、Docker 映像或發行版二進位檔安裝。提供 macOS 與 Linux 預先編譯版本；從原始碼建置需要 Frida Core DevKit。未宣告帳號、API 金鑰或環境變數。存取 CodeShare 與安裝 npm 套件需要網路。
安裝前請注意
它會附加並修改執行中的行程：memory_write 會改寫目標記憶體，device_kill 會終止行程，腳本會在目標內執行任意程式碼。它也能連線遠端 Frida 伺服器，並取得第三方 CodeShare 腳本與 npm 套件，這些內容會在目標中執行。僅用於你有權分析的系統與應用程式。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Super Trouper，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

[super-trouper logo]
[Build status] [npm version] [Go Reference] [MCP Rush score]

Super Trouper

An MCP server for the Frida reverse engineering toolkit.

Super Trouper runs an MCP server over STDIO that exposes Frida capabilities as tools for coding agents. It can connect to local, USB, and remote devices; inspect applications and processes; manage process sessions; and load, evaluate, and exchange messages with JavaScript instrumentation scripts. It can also search Frida CodeShare to discover community scripts and fetch them for use with the scripting tools. Device connections, sessions, and scripts are managed through the tools themselves and referenced by opaque handles.

[super-trouper]

Features

  • Single Go binary — no Python, Node, or Frida CLI tooling required on your host
  • Powered by Frida 17.x — statically linked against Frida Core DevKit v17.23.3
  • Full device support — list and connect to local, USB, and remote devices, attach to apps and processes
  • TypeScript and JavaScript instrumentation — create and load Frida scripts, evaluate directly in a target
  • Frida CodeShare integration — search, browse, and fetch the CodeShare catalog of community scripts
  • Runs anywhere — prebuilt binaries for macOS and Linux, install via Docker, Homebrew, or npm

Install

Homebrew

Install the macOS release through the project’s Homebrew tap:

sh
brew install --cask crissyfield/tap/super-trouper

npm

Install the launcher package through npm. It pulls in the platform-specific binary via optional dependencies:

sh
npm install -g @crissyfield/super-trouper

Release Binary

Download a binary for your platform from the Releases page.

From Source

Install a Frida Core DevKit matching your build host first. Then build and install Super Trouper with the following commands:

sh
# Set flags if the Frida devkit is not in a standard locationexport CGO_CFLAGS="-I/path/to/frida-core-devkit/include"export CGO_LDFLAGS="-L/path/to/frida-core-devkit/lib"
# Build and installexport CGO_ENABLED=1go install github.com/crissyfield/super-trouper@latest

Usage

Use the MCP server in your coding agent. Claude Code is the example below, but configuration is similar in Codex, OpenCode, Pi, Crush, and others.

Using the Binary

If the Super Trouper binary is not in your PATH, specify the full path in your MCP server configuration.

json
{  "mcpServers": {    "super-trouper": {      "command": "super-trouper"    }  }}

Using npx

npm users can run Super Trouper directly through npx without a global installation:

json
{  "mcpServers": {    "super-trouper": {      "command": "npx",      "args": ["-y", "@crissyfield/super-trouper"]    }  }}

Using Docker

Docker is a convenient way to run Super Trouper without installing it on your host.

json
{  "mcpServers": {    "super-trouper": {      "command": "docker",      "args": ["run", "-i", "--rm", "ghcr.io/crissyfield/super-trouper"]    }  }}

MCP Tools

Super Trouper exposes the following MCP tools:

ToolDescription
app_listLists the applications installed on a Frida device.
app_findFinds an application on a Frida device by identifier or name.
app_frontmostReturns the frontmost application on a Frida device.
codeshare_searchSearches Frida CodeShare for projects matching the given query.
codeshare_popularLists the most popular projects on Frida CodeShare.
codeshare_projectReturns a project from Frida CodeShare, including its JavaScript source, which can be run with the other scripting tools.
device_listLists the Frida devices detected by the host.
device_connectConnects to a Frida device by ID reported by device_list, by a remote Frida server address, or by type. Returns a device handle used by the other device tools; reconnecting to the same device returns the existing handle.
device_disconnectDisconnects from a Frida device. Fails while the device still has attached sessions.
device_paramsReturns the parameters of a Frida device.
device_spawnSpawns a process on a Frida device in a suspended state. Use device_resume to start it.
device_resumeResumes a suspended process on a Frida device.
device_killKills a process on a Frida device.
memory_readReads up to 4096 bytes of memory in an attached process and returns it as hex, base64, UTF-8, or a NUL-terminated C string. Fails if any byte of the range cannot be read.
memory_writeWrites up to 4096 bytes of memory in an attached process as hex (default) or base64, selected with the encoding parameter. Fails if memory cannot be written; patching code is out of scope.
module_listLists the modules loaded in an attached process. Results can be matched by name or path and paginated.
package_installInstalls an npm package in the shared Frida workspace for import from script_create source.
package_listLists direct npm packages installed in Super Trouper's shared Frida workspace.
pattern_createCreates a managed Frida Pattern project from .hexpat or .pat source files.
pattern_readReturns a source file from a managed Frida Pattern project.
pattern_listLists managed Frida Pattern projects.
pattern_deleteDeletes a managed Frida Pattern project.
pattern_describeCompiles a Pattern project for an attached target and returns diagnostics, types, and inputs.
pattern_decodeReads and decodes a bounded target-memory snapshot with a managed Frida Pattern project.
process_listLists the processes running on a Frida device.
script_createCreates a Frida script with TypeScript source in an attached session. The script is created unloaded; use script_load to load it.
script_loadLoads a Frida script into its target process.
script_unloadUnloads a Frida script from its target process.
script_closeUnloads a Frida script if loaded and releases its resources.
script_postPosts a JSON message to a Frida script.
script_messagesReturns messages sent by a Frida script. Messages are buffered (up to 256) and should be drained regularly.
script_bridge_listReturns the language bridges that can be exposed as globals in scripts created with script_create.
session_attachAttaches to a process on a Frida device by PID or name. Returns a session handle used by the session tools.
session_detachDetaches from a process, closing all of its scripts and its session.
session_evalEvaluates a JavaScript statement in an attached process and returns its JSON result. The first call sets up a persistent evaluator in the session.
frida_versionReturns the version of the linked Frida Core library.
frida_documentationReturns documentation links for the Frida JavaScript API.
thread_listLists the threads running in an attached process with their ID, state, and program counter.

來源：README.md，提交 d6dc245

工具

0
SourceWeft 曾在隔離沙箱中以無憑證方式啟動該軟體包一次，以列出其工具，但未能完成：伺服器未能啟動。

版本歷史

4
  1. v0.5.1最新Oct 21, 2026
  2. v0.5.0Oct 15, 2026
  3. v0.4.0Sep 27, 2026
  4. v0.3.0Sep 18, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分