ChiChou/grapefruit

Health v2 · maintenance only

Adoption not part of the score

1379 stars · 112 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Grapefruit is an open-source mobile security testing suite for iOS and Android that provides a browser-based GUI over Frida for runtime instrumentation, hooking, and data inspection. It also offers standalone binary analysis and decompilation (ELF/Mach-O, DEX, Hermes bytecode) powered by radare2 and WebAssembly, plus AI agent skills for automated audits.

Use cases

• hook and inspect iOS or Android app methods at runtime
• test mobile app URL schemes and deep links for input validation flaws
• decompile and disassemble Mach-O, ELF, DEX, and Hermes bytecode binaries
• browse an app's sandbox filesystem, keychain, and SQLite databases
• monitor cryptographic API calls in a mobile app
• run OWASP MASTG-aligned mobile security audits with Claude Code

When to choose

• you want a point-and-click web UI instead of writing Frida scripts by hand
• you need to audit both iOS and Android apps with one tool
• you want browser-based binary analysis and decompilation without a device
• you want to expose mobile security tooling to AI coding agents

When to avoid

• you need built-in RASP/jailbreak-detection bypasses — Grapefruit intentionally omits them
• you only need static analysis without any runtime instrumentation
• you cannot run a Frida server on the target device for dynamic features
• you need a fully headless CI pipeline — it is GUI- and browser-centric

Facets

application · maturity active

security penetration-testing reverse-engineering developer-tools gui cli security mobile-development reverse-engineering penetration-testing developer-tools windows browser cli cross-platform frida dynamic-instrumentation mobile-security ios android decompiler web-ui owasp-mastg radare2 hermes-bytecode macos linux nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ChiChou/grapefruit")