AwesomeREA.org

Tool

Brida

Burp Suite extension by Federico Dotta and Piergiovanni Cipolloni that bridges Burp and Frida, so an analyst can run an app's own functions on the HTTP messages it exchanges with its backend instead of reimplementing its encryption, encoding or signing. A graphical plugin engine connects Frida-exported functions to Burp: they can process requests and responses in every Burp tool, or run from custom message-editor tabs, context-menu entries and buttons, and a Generate Stubs tool emits Java or Python code for external Burp extensions. An analysis tab shows the app's Java and Objective-C classes, methods, imports and exports as a tree, from which hooks that log arguments and return values, or replace return values, can be added; an editor holds the analyst's own Frida exports.

Targets
App · Protocol
Category
Debugging and dynamic analysis
Relationship
Foundation tool
Sources reviewed

Requirements & limits

  • Latest release at review: v0.6, published 2025-10-23 as a single Brida_0.6.jar; the reviewed master commit is two commits ahead, adding and then removing a BApp Store description. Version 0.6 was refactored for Frida 17's JavaScript API and needs Frida 17 or later; v0.6pre, used with frida-compile 10.2.5, remains the release for older Frida versions. The README also points to Burp's BApp Store and notes that the copy there can lag behind GitHub.
  • Needs Burp Suite Community or Pro, Node.js and npm on the system path (the README warns that this can be hard on macOS), and the frida, frida-tools and pyro4 Python packages; a bundled Pyro4 service script connects the extension to Frida. The README says Brida supports every platform Frida does (Windows, macOS, Linux, iOS, Android and QNX). Mobile targets need a jailbroken iOS or rooted Android device running frida-server, or an app patched with the Frida gadget.
  • Builds use Gradle's jar task, or Maven once the bundled modified RSyntaxTextArea jar (libs/rsyntaxtextarea-2.6.1.edited.jar) is installed locally; the extension uses the legacy Burp Extender API. Demo/ holds the authors' own conference demo apps and backend (HIP2021_demo.apk, DemoHIP.ipa, DemoHITB.ipa and BridaTestAppBackend-0.0.1-SNAPSHOT.jar), demo TLS certificates and keys, and exported demo plugins. The iOS demo README asks that its backend, which logs in to MySQL as root with an empty password, run only on a firewalled system or VM.
  • MIT license. This entry covers Brida for apps and backends the analyst owns or is authorized to test. It does not describe the default Android and iOS hook collections under res/, which the README credits to various Frida CodeShare and GitHub authors. No app was instrumented and no traffic was processed.

About this entry

The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.

Report an outdated entry Suggest a translation fix

Primary sources

  1. README.md GitHub · federicodotta/Brida · Revision f335034
  2. README.md#L13-L39 GitHub · federicodotta/Brida · Revision f335034
  3. README.md#L41-L89 GitHub · federicodotta/Brida · Revision f335034
  4. build.gradle GitHub · federicodotta/Brida · Revision f335034
  5. res/bridaServicePyro.py GitHub · federicodotta/Brida · Revision f335034
  6. Demo GitHub · federicodotta/Brida · Revision f335034
  7. Demo/iOS/README.md GitHub · federicodotta/Brida · Revision f335034
  8. LICENSE GitHub · federicodotta/Brida · Revision f335034
  9. https://github.com/federicodotta/Brida/releases/tag/v0.6

More in Native binaries

All 158 entries in Native binaries