{"id":13538432,"url":"https://github.com/chaitin/passionfruit","last_synced_at":"2025-04-02T05:31:17.533Z","repository":{"id":53856541,"uuid":"84626055","full_name":"chaitin/passionfruit","owner":"chaitin","description":"[WIP] Crappy iOS app analyzer","archived":true,"fork":false,"pushed_at":"2021-11-14T20:51:08.000Z","size":11629,"stargazers_count":1671,"open_issues_count":5,"forks_count":223,"subscribers_count":76,"default_branch":"master","last_synced_at":"2025-03-18T11:12:35.297Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Vue","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/chaitin.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-03-11T05:21:27.000Z","updated_at":"2025-03-12T18:00:36.000Z","dependencies_parsed_at":"2022-08-23T08:30:34.493Z","dependency_job_id":null,"html_url":"https://github.com/chaitin/passionfruit","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chaitin%2Fpassionfruit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chaitin%2Fpassionfruit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chaitin%2Fpassionfruit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/chaitin%2Fpassionfruit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/chaitin","download_url":"https://codeload.github.com/chaitin/passionfruit/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":246763805,"owners_count":20829795,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-01T09:01:11.887Z","updated_at":"2025-04-02T05:31:17.151Z","avatar_url":"https://github.com/chaitin.png","language":"Vue","funding_links":[],"categories":["\u003ca id=\"06fccfcc4faa7da54d572c10ef29b42e\"\u003e\u003c/a\u003e移动\u0026\u0026Mobile","Tools","Vue (45)","Vue","\u003ca id=\"58cd9084afafd3cd293564c1d615dd7f\"\u003e\u003c/a\u003e工具","Powered by Frida","Awesome Mobile Application Penetration Testing  ![awesome](https://awesome.re/badge.svg)"],"sub_categories":["\u003ca id=\"dbde77352aac39ee710d3150a921bcad\"\u003e\u003c/a\u003eiOS\u0026\u0026MacOS\u0026\u0026iPhone\u0026\u0026iPad\u0026\u0026iWatch","Dynamic Analysis Tools","\u003ca id=\"d0108e91e6863289f89084ff09df39d0\"\u003e\u003c/a\u003e新添加的","iOS Application Penetration Testing"],"readme":"**Discontinued Project**\n\nThis project has been discontinued. Please use the new [Grapefruit](https://github.com/chichou/grapefruit)\n\nhttps://github.com/chaitin/passionfruit/issues/74\n\n## frida@14 compatibility issues\n\nfrida@14 introduces lots of breaking changes. After struggling a bit, I was unable to solve them. If you still need passionfruit, please keep the frida on your device to stay at 12.x.\n\n----\n\n\u003cimg src=\"images/logo.png\" alt=\"Passionfruit\" width=\"400\" align=\"center\"\u003e\n\n[![npm version](https://badge.fury.io/js/passionfruit.svg)](https://badge.fury.io/js/passionfruit)\n[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)\n\nSimple iOS app blackbox assessment tool. Powered by [frida.re](https://www.frida.re) and [vuejs](https://www.vuejs.org).\n\n## TL;DR\n\n```shell\nnpm install -g passionfruit\npassionfruit\n```\n\n## Features\n\n* **Cross plarform web GUI!**\n* Also supports non-jailbroken device (see [Non-jailbroken device](#non-jailbroken-device)).\n* List all url schemes.\n* Check signature entitlements.\n* List human readable app meta info (Info.plist).\n* Capture screenshot.\n* Checksec: see if target app is encrypted, and has enabled PIE, ARC and stack canary.\n* App sandbox file browser. Directly preview images, SQLite databases and plist files on device. You can always download the file for further investigation.\n* Check the loaded frameworks. Hook exported native functions from these dylib to print the arguments and stack trace.\n* Log SQLite operations.\n* Log and try to bypass jailbreak detection.\n* List Objective-C classes from app, hook the methods and inspect the arguments and stack trace.\n* Dump KeyChain, BinaryCookies and UserDefaults.\n\n![General](images/metainfo.png)\n\nPlease check out Wiki for more information.\n\n* [Screenshots](https://github.com/chaitin/passionfruit/wiki/Screenshots)\n* [FAQ](https://github.com/chaitin/passionfruit/wiki/FAQ)\n\n## Setup\n\n### Desktop requirements:\n\n* [node.js](https://nodejs.org/) **LTS** and [npm](https://www.npmjs.com) to run the api server and web gui\n* Any modern desktop browser you like\n\nPassionfruit is now avaliable on npm, so just type following command to install:\n\n```shell\nnpm install -g passionfruit\n```\n\nThen launch it:\n\n```shell\npassionfruit\n```\n\nNote that if the port 31337 is in use, set environment variable `PORT` to use an alternative port. Also, setting `HOST` can force to listen on an alternative interface, but be careful because it has no authentication yet:\n\n```\nHOST=192.168.1.100 PORT=12345 passionfruit\n```\n\n**Security Warning**\n\nPassionfruit does not support authentication now, so any one that have access to the web page may control your connected devices!\n\n### Device setup:\n\n#### Jailbroken Device\n\nSee https://www.frida.re/docs/ios/\n\n\u003e Start `Cydia` and add Frida’s repository by going to `Manage` -\u003e `Sources` -\u003e `Edit` -\u003e `Add` and enter `https://build.frida.re`. You should now be able to find and install the `Frida` package which lets Frida inject JavaScript into apps running on your iOS device. This happens over USB, so you will need to have your USB cable handy, though there’s no need to plug it in just yet.\n\n#### Non-jailbroken Device\n\nOfficial documentation of frida.re (linked above) also introduces how to inject [FridaGadget.dylib](https://build.frida.re/frida/ios/lib/FridaGadget.dylib) to the ipa, requires repack and resign.\n\nHere are some articles about how to do so:\n\n* [MonkeyDev/wiki/非越狱App集成#集成frida](https://github.com/AloneMonkey/MonkeyDev/wiki/%E9%9D%9E%E8%B6%8A%E7%8B%B1App%E9%9B%86%E6%88%90#集成frida)（Chinese)\n* https://github.com/tanprathan/Fridpa\n* https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2016/october/ios-instrumentation-without-jailbreak/\n\n## Development setup\n\nClone this project and install requirements:\n\n```shell\ngit clone https://github.com/chaitin/passionfruit.git\nnpm install\n```\n\nFor those who wants to contribute, you may probably need to restart the api server and reload webpage each time you make a change. The following steps enable livereload.\n\n```shell\nnpm run dev\n```\n\nBrowser will be open (http://localhost:8080)\n\n## LICENCE\n\nMIT\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fchaitin%2Fpassionfruit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fchaitin%2Fpassionfruit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fchaitin%2Fpassionfruit/lists"}