chaitin/passionfruit

Health v2 · maintenance only

Flags: no_releases archived

Adoption not part of the score

1668 stars · 226 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Passionfruit is a web-based GUI tool for blackbox assessment of iOS apps, built on the Frida instrumentation framework and Vue.js. It lets security researchers inspect app metadata, sandbox files, KeyChain, Objective-C classes, and hook native functions on jailbroken or non-jailbroken devices.

Use cases

• analyze an iOS app's security posture without source code
• dump the iOS keychain and cookies from a device
• hook Objective-C methods and inspect arguments at runtime
• browse and preview an app's sandbox files on a device
• check if an app binary is encrypted and has PIE, ARC, and stack canaries
• bypass jailbreak detection in an app under test
• log SQLite operations performed by an iOS app

When to choose

• you need a GUI-driven iOS app security assessment with Frida
• you are auditing an iOS app's entitlements, url schemes, and binary protections
• you want to explore app sandbox files and databases directly from a browser

When to avoid

• the project is discontinued - use its successor Grapefruit instead
• you need Frida 14+ compatibility, which this tool never gained
• you need authentication or multi-user access on the web interface

Facets

application · maturity abandoned

security reverse-engineering gui http-server security reverse-engineering mobile-development apple-ecosystem cross-platform ios frida penetration-testing mobile-security discontinued web-gui runtime-instrumentation nodejs web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="chaitin/passionfruit")