skills.rest
skurtyyskirts
skurtyyskirtsCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

dynamic-analysis

Instrument running processes with Frida for breakpoints, tracing, and memory inspection.

Updated Aug 23, 2026
Search Tags:#trace#jsonl#reverse-engineering#frida#dynamic-analysis#live-debugging#memory-inspection
One-click install
npx skills add https://github.com/skurtyyskirts/TombRaiderLegendRTX- --skill dynamic-analysis-skurtyyskirts
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: dynamic-analysis
Source: https://github.com/skurtyyskirts/TombRaiderLegendRTX-/tree/main/.cursor/skills/dynamic-analysis
Command: npx skills add https://github.com/skurtyyskirts/TombRaiderLegendRTX- --skill dynamic-analysis-skurtyyskirts

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Frida-based live process analysis toolkit for reverse engineering. Use when attaching to a running process, setting breakpoints, tracing functions, collecting execution data, inspecting registers/memory/stack at runtime, stepping through code, patching live memory, analyzing JSONL trace dumps, or performing any dynamic analysis task. Provides blocking breakpoints, non-blocking function tracing, Stalker-based instruction recording, interval-aware data collection, offline aggregation, and module enumeration.

Core Features & Use Cases

  • Blocking and non-blocking tracing of functions
  • Live memory inspection and breakpoints in running processes
  • JSONL trace dumps for offline analysis and aggregation
  • Module enumeration and runtime instrumentation for RE and debugging
  • Use Case: Attach to a process to observe function calls, capture memory, then analyze traces offline.

Quick Start

Run livetools to attach, trace, and analyze a running process with a single command.

Frequently Asked Questions about dynamic-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I trace function calls in a running process using Frida?▼

Frida instrumentation enables live process tracing by attaching to a running application, setting blocking or non-blocking breakpoints, and recording function calls. It captures execution behavior directly at runtime without requiring source code access.

What is the best way to inspect live memory and registers during runtime debugging?▼

Live memory inspection with Frida allows you to observe registers, stack, and memory regions by attaching to a running process with breakpoints. You can selectively collect data and patch live memory during execution to analyze application state.

How do I record execution traces for offline reverse engineering analysis?▼

Stalker-based instruction recording captures execution data and dumps it into JSONL trace files for offline aggregation. You can then analyze these JSONL dumps to reproduce and evaluate the collected runtime behavior.

Can I use Frida Stalker tracing to analyze specific modules across a live process?▼

Yes, Frida dynamic analysis supports module enumeration and selective instrumentation across a live process. You can target specific modules for Stalker-based instruction recording and interval-aware data collection during execution.

Does dynamic analysis with Frida support patching live memory during execution?▼

Yes, Frida live process analysis supports patching live memory during execution. You can attach to a running application, set breakpoints, inspect memory regions, and apply runtime patches to modify behavior as it executes.

Why use JSONL format for dumping runtime trace data?▼

JSONL trace dumps store interval-aware execution data in a structured, line-delimited format that enables offline aggregation and reproducible results. This format allows efficient parsing of Stalker traces and function call records during analysis.

Related Skills

Explore More Software Engineering Skills→
RheasilviaRheasilvia

node-inspect-debugger

Debug Node.js applications via V8 inspector and Chrome DevTools Protocol.

Community
Advanced
844196844196
8

analyze-session

Analyze Claude Code session logs to extract tool usage events and recovery patterns.

Community
Advanced
rainoftimerainoftime
17

control-flow-analysis

Build control flow graphs and identify basic blocks, dominators, and loops.

Community
Intermediate
2389-research2389-research
90

binary-re:dynamic-analysis

Execute and trace binaries with QEMU, GDB, and Frida.

Official
Advanced