Tool
Fridump
Small Python command-line tool that attaches to a running process through Frida and writes its accessible memory ranges to files, run from a Windows, Linux or macOS host against iOS, Android or Windows applications. By default it saves ranges that are readable and writable, -r also takes read-only ones, ranges above a size limit (20 MiB unless set with --max-size) are split into chunks, and -s runs a basic strings pass that collects printable text from every dump into strings.txt. Its README presents it for penetration testers and developers.
- Targets
- App · Binary
- Category
- Debugging and dynamic analysis
- Relationship
- Foundation tool
- Sources reviewed
Requirements & limits
- The README calls this version 0.1 and warns that bugs are expected. The newest commit on master dates from 2019-04-25, and the repository has no tags or releases. The README reports testing only from Windows 7 and Mac OS X hosts, against an iPad Air 2 on iOS 8.2, a Galaxy Tab running CyanogenMod 4.4.4 and a Windows 7 laptop.
- Run fridump.py from a clone with Python and the frida package from pip; there is no requirements file and no Frida version is pinned. Its embedded agent calls Process.enumerateRangesSync and Memory.readByteArray, legacy APIs that Frida's 17.0.0 release notes (May 2025) say are now gone, so the unmodified script appears to need an earlier Frida release.
- Mobile targets need a frida-server matching the host's Frida on the device, which the README says must run as root on Android; -U selects a USB-connected device and frida-ps lists process names. Output is one raw file per memory range, named by its base address, with no structure or symbol recovery; ranges that cannot be read are skipped with a warning.
- Dumps can hold credentials and personal data from the target process, so use it only on apps and devices you own or are authorized to test. The repository has no license file and GitHub detects no license, so it grants no explicit reuse terms; it contains only three Python files and the README. The reviewed sources mention no AI or REA use, and nothing was run for this record.
About this entry
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- README.md GitHub · Nightbringer21/fridump · Revision 3e64ee0
- fridump.py GitHub · Nightbringer21/fridump · Revision 3e64ee0
- dumper.py GitHub · Nightbringer21/fridump · Revision 3e64ee0
- utils.py GitHub · Nightbringer21/fridump · Revision 3e64ee0
- https://frida.re/news/2025/05/17/frida-17-0-0-released/
More in Native binaries
- Redress · Tool
- ghidra-nanomips · Tool
- SMDA · Tool
- frida-trace (NowSecure library) · Tool
- BTD (Bin To DNN) · Tool
- Boomerang Decompiler · Tool