Tool
Runtime Mobile Security (RMS)
Frida-based web interface for observing Android and iOS apps at run time on a test device. It lists the classes and methods loaded in memory, traces method arguments and return values, generates hook templates for a selected class, finds class instances on the heap, and on Android monitors categorized framework APIs and a few libc file functions; a beta file browser covers the app's private folders.
Requirements & limits
- Latest release at review: 1.5.25, published 2026-07-01, matching the reviewed master commit; it installs from npm as rms-runtime-mobile-security and its package.json depends on Frida 17 node bindings. The README says it was tested on macOS with Android emulators, an Amazon Fire Stick 4K, an iPhone 7 and Chrome, and may need minor adjustments on Windows and Linux.
- Requires Node.js, Frida's CLI tools and a frida-server already running on a single connected test device; RMS cannot handle several devices at once. It also attaches to a default system process to list preloaded classes. Use it only on apps and devices the user is authorized to analyze.
- The web interface defaults to port 5491; rms.js passes only a port to server.listen, so Node's default all-interface binding applies, and the reviewed code adds no login. The README notes that complex methods sometimes fail to load and that Safari is unsupported.
- GPL-3.0. The bundled custom Frida scripts were not reviewed and are not described here. Nothing was installed or run.
About this entry
- Type
- Tool
- Category
- Debugging and dynamic analysis
- Relationship
- Foundation tool
- Targets
- App
Sources reviewed
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- README.md GitHub · m0bilesecurity/RMS-Runtime-Mobile-Security · Revision d07212e
- README.md#L36-L60 GitHub · m0bilesecurity/RMS-Runtime-Mobile-Security · Revision d07212e
- README.md#L99-L118 GitHub · m0bilesecurity/RMS-Runtime-Mobile-Security · Revision d07212e
- package.json GitHub · m0bilesecurity/RMS-Runtime-Mobile-Security · Revision d07212e
- rms.js#L101-L112 GitHub · m0bilesecurity/RMS-Runtime-Mobile-Security · Revision d07212e
- LICENSE GitHub · m0bilesecurity/RMS-Runtime-Mobile-Security · Revision d07212e
- https://github.com/m0bilesecurity/RMS-Runtime-Mobile-Security/releases/tag/1.5.25
More in Native binaries
- Pharos · Tool
- heimdall-rs · Tool
- DownUnderCTF: masked-squares flag checker · Case study
- Show Your Work: a measured dissection of REA's evidence architecture · Case study
- Windows loader: static malware analysis with REA and Codex · Case study
- Ghidra · Tool