# Grapefruit

> Inspect and hook running iOS and Android apps from a Frida-based web interface, with method and crypto-API hooks, filesystem and SQLite browsers, iOS keychain and UI-hierarchy views, and HTTP capture from common networking libraries.

- Type: Tool
- Targets: App
- Category: Debugging and dynamic analysis
- Relationship: Foundation tool
- Sources reviewed: 2026-10-17
- Added to the catalog: 2026-10-17
- Original resource: <https://github.com/ChiChou/grapefruit>
- Primary source: <https://github.com/ChiChou/grapefruit/blob/b7176b409793a1395503fe78153e3b0ba888f77d/README.md>
- Catalog page: <https://awesomerea.org/resources/grapefruit/>
- Record JSON: <https://awesomerea.org/resources/grapefruit/record.json>
- Chinese version: [简体中文](https://awesomerea.org/zh/resources/grapefruit/index.md)

## Requirements & limits

- Requires a Frida server running on the target device, set up through Frida's iOS or Android guides; the reviewed release works with Frida 16 or 17 (default 17).
- Reviewed release: v1.1.2 (npm package igf), published 2026-03-30. The npm package requires Node.js >=22.18.0 and is not compatible with bunx; prebuilt binaries cover macOS arm64/x64, Linux x64 and Windows x64. The server binds to localhost port 31337 by default; the default-branch README warns that it has no built-in authentication.
- Optional AI features, including hook-script generation, use an LLM configured through LLM_* environment variables: Anthropic, OpenAI, Gemini, OpenRouter or an OpenAI-compatible endpoint such as local Ollama. Prompts are sent to the configured endpoint.
- Upstream deliberately ships no Frida-detection, certificate-pinning or jailbreak/root-detection bypasses and suggests combining it with dedicated bypass tooling for authorized assessments. The default branch was 47 commits ahead of v1.1.2 and adds Dart AOT snapshot exploration that the release README does not list. MIT-licensed.

## Primary sources

1. <https://github.com/ChiChou/grapefruit/blob/b7176b409793a1395503fe78153e3b0ba888f77d/README.md>
2. <https://github.com/ChiChou/grapefruit/blob/b7176b409793a1395503fe78153e3b0ba888f77d/package.json>
3. <https://github.com/ChiChou/grapefruit/blob/b7176b409793a1395503fe78153e3b0ba888f77d/src/lib/env.ts>
4. <https://github.com/ChiChou/grapefruit/blob/b7176b409793a1395503fe78153e3b0ba888f77d/docs/llm.md>
5. <https://github.com/ChiChou/grapefruit/blob/b7176b409793a1395503fe78153e3b0ba888f77d/LICENSE>
6. <https://github.com/ChiChou/grapefruit/releases/tag/v1.1.2>
7. <https://github.com/ChiChou/grapefruit/blob/05852a9b6e32dcc5f1c7e5ca8d91bfabc9d691b9/README.md>

## More in Apps

- [Blutter](https://awesomerea.org/resources/blutter/index.md) · Tool
- [hermes-dec](https://awesomerea.org/resources/hermes-dec/index.md) · Tool
- [Recaf](https://awesomerea.org/resources/recaf/index.md) · Tool
- [nibkit](https://awesomerea.org/resources/nibkit/index.md) · Tool
- [AOTopsy](https://awesomerea.org/resources/aotopsy/index.md) · Tool
- [hbctool](https://awesomerea.org/resources/hbctool/index.md) · Tool

## About this entry

The description was reviewed against primary sources.
Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.
