notstarr/first

This page was translated automatically. Technical details may differ from the original. View the original

43 stars 5 forks Quality 72 Trend 16

WeChat Mini Program Security Debugging Framework | Frida+CDP | MCP Support | AI-driven penetration testing (personal dual account)

Overview

Based on Frida + CDP proxy · Windows/macOS dual platform · Dual GUI and CLI modes First, all debugging capabilities are encapsulated as . The AI Agent can complete the entire mini-program security testing process via natural language: enumerating routes, extracting credentials, hooking network requests, auditing cloud functions, scanning sensitive information...... No need to write scripts manually. - ：~/Library/Application Support/Claude/claude_desktop_config.json - ：.cursor/mcp.json - ：.vscode/mcp.json Replace /absolute path/first with the local actual path; Windows uses backslashes and notes JSON escaping. After the MCP Server starts, issue commands in natural language in Claude / Cursor / Copilot. It is recommended to start confirming the connection status from check_connection. In addition to the local stdio mode, MCP Server also supports booting in a certain way, suitable for remote calls or integration with automated penetration engines like Cairn: To access a host within a Docker container, use http://host.docker.internal:8889/sse。 - Frida dynamic injection into WeChat client, forwarding mini-program debugging protocol - CDP proxy bridging, Chrome DevTools direct connection debugging - route enumeration, classification, and one-click jumping - Cloud function call monitoring and parameter analysis (dynamic hook + static scanning) - UserScript automatic injection (supports URL matching and run-at timing control) - wxapkg decryption and depackaging + sensitive information scanning (IP / key / cloud storage / JWT, etc.) - dark/light theme switching - GUI (PySide6) and CLI dual modes

Overview (machine translated)

WeChat Mini Program Security Debugging Framework

Based on Frida + CDP proxy · Windows/macOS dual platform · Dual GUI and CLI modes

Supports MCP (Model Context Protocol)—allows Claude, Cursor, and Copilot to directly control the mini program for AI-driven automated penetration testing

Overview of MCP

First packages all debugging capabilities into 23 standard MCP tools. The AI Agent can complete the complete mini-program security testing process through natural language: enumerating routes, extracting credentials, hooking network requests, auditing cloud functions, scanning sensitive information… No manual scripting required.

Fast MCP Access

Step 1: Install the MCP dependency

Step 2: Launch the First Debugging Framework

Open WeChat →, enter the target mini program, → wait for the interface to display Frida injection successful.

Step 3: Configure the MCP Server in the AI tool

Add the following to your MCP profile:

Claude Desktop：~/Library/Application Support/Claude/claude_desktop_config.json
Cursor：.cursor/mcp.json
VS Code Copilot：.vscode/mcp.json

Replace /绝对路径/First with the local actual path; Windows uses backslashes and pays attention to JSON escaping.

Step 4: Start AI-assisted testing

After the MCP Server starts, simply issue commands in natural language in Claude / Cursor / Copilot. It is recommended to start confirming the connection status from check_connection.

SSE Remote Mode

In addition to the local stdio mode, MCP Server also supports starting as SSE (Server-Sent Events), suitable for remote calls or integration with automated penetration engines like Cairn:

MCP configuration in SSE mode:

To access the host within a Docker container, use http://host.docker.internal:8889/sse.

MCP Tool Reference

Connection and Information

Tools	Description
`check_connection`	Check the operating status of the First Debugging Framework and the connection to the CDP; it must be called first before each test
`get_miniapp_info`	Retrieve the current Mini Program AppID, name, version number, SDK version, entry page, and complete page list

This page was translated automatically. Technical details may differ from the original.

Install

This server does not publish a one-line install command.

Open the repository installation guide New to MCP? Start with the mcpskill.org guide →

Configuration

{
  "mcpServers": {
    "miniapp-pentest": {
      "command": "/绝对路径/First/.venv_mcp/bin/python",
      "args": ["/绝对路径/First/mcp_server.py"],
      "env": {
        "PYTHONPATH": "/绝对路径/First",
        "FIRST_CDP_PORT": "62000"
      }
    }
  }
}