frida-ps
frida-ps
Command-line tool for listing processes on local or remote systems. Useful for identifying process names and PIDs before attaching with frida or killing with frida-kill.
Prerequisites: frida-tools Python package (pip install frida-tools). For remote/USB targets, frida-server must be running on the target device.
Synopsis
frida-ps [options]
Device Selection Options
| Flag | Description |
|---|---|
-D ID, --device ID | Connect to device with the given ID (obtain IDs via frida-ls-devices) |
-U, --usb | Connect to USB-attached device |
-R, --remote | Connect to remote frida-server (default host) |
-H HOST, --host HOST | Connect to remote frida-server on HOST |
--certificate CERT | Speak TLS with HOST, expecting CERTIFICATE |
--origin ORIGIN | Set Origin header when connecting to remote server |
--token TOKEN | Authenticate with HOST using TOKEN |
--keepalive-interval N | Keepalive interval in seconds; 0 to disable (default: -1) |
--p2p | Establish peer-to-peer connection with target |
--stun-server ADDRESS | Set STUN server ADDRESS (used with --p2p) |
--relay addr,user,pass,turn-TYPE | Add TURN relay for --p2p (repeatable) |
--device-option option | Override backend-specific option (repeatable) |
Filter Options
| Flag | Description |
|---|---|
-a, --applications | List only running applications (not all OS processes) |
-i, --installed | Include all installed applications (implies -a; shows apps not currently running) |
Output Options
| Flag | Description |
|---|---|
-j, --json | Output results as JSON instead of text table |
-e, --exclude-icons | Exclude app icons from JSON output (reduces output size) |
Global Options
| Flag | Description |
|---|---|
-O FILE, --options-file FILE | Text file containing additional command line options |
--version | Print Frida version and exit |
Usage Examples
1# List all running processes on the local machine
2frida-ps
3
4# List all running processes on USB-attached device
5frida-ps -U
6
7# List only running applications on USB device
8frida-ps -Ua
9
10# List all installed applications on USB device (including those not running)
11frida-ps -Uai
12
13# Connect to a specific device by ID and list processes
14frida-ps -D 0216027d1d6d3a03
15
16# Output as JSON (e.g. for scripting)
17frida-ps -U --json
18
19# JSON output without icons
20frida-ps -U --json --exclude-icons
Output Format (text)
Default text output — all processes:
PID Name
---- ---------------
1 launchd
312 kernel_task
1234 Safari
...
With -a (applications only):
PID Name Identifier
---- --------- --------------------------
1234 Safari com.apple.mobilesafari
4001 Cydia com.saurik.Cydia
With -ai (all installed, including not running):
PID Name Identifier
---- --------- --------------------------
1234 Safari com.apple.mobilesafari
- Notes com.apple.mobilenotes
Notes
- Device IDs for
-Dare obtained fromfrida-ls-devices. -iwithout-ais treated the same as-ai— it implicitly filters to applications.- JSON output includes icon data (base64-encoded PNG) unless
--exclude-iconsis set. - On Android,
frida-ps -Ualists package names as identifiers; on iOS, it lists bundle IDs.