Grapefruit requires Node.js to be installed. If you can't install the frida-node dependency, please check out the troubleshooting section to choose another version of Node.js.
Setup frida on your iOS device: https://www.frida.re/docs/ios/
Start
Cydiaand add Frida’s repository by going toManage->Sources->Edit->Addand enterhttps://build.frida.re. You should now be able to find and install theFridapackage which lets Frida inject JavaScript into apps running on your iOS device. This happens over USB, so you will need to have your USB cable handy, though there’s no need to plug it in just yet.
Grapefruit is now on npm as igf! Interprets as iGrapefruit or maybe iOS Graphical Frida
npm install -g igf
Now you have the grapefruit cli as igf:
~ igf --help
Usage: igf [options]
Options:
-h, --host <string> hostname (default: "127.0.0.1")
-p, --port <number> port of the server side (default: 31337)
--help display help for command
Default URL for the web UI is http://localhost:31337
Security Warning
At this moment, grapefruit has no authentication. It's possible to use it to inject arbitrary code to your iPhone for anyone that has the access to the web UI. Please limit it to localhost as much as possible. Contribution welcomed.
If you have experienced anything wrong or want to suggest new features, please join my Discord channel! https://discord.gg/pwutZNx
FAQs
Unknown package
The npm package igf receives a total of 62 weekly downloads. As such, igf popularity was classified as not popular.
We found that igf demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm invalidated all granular access tokens that bypass 2FA after a fresh Mini Shai-Hulud wave compromised 323 npm packages. Staged publishing also entered public preview.
Research
/Security News
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.
Company News
As AI accelerates how code is written and shipped, Socket is scaling to protect the software supply chain from the growing wave of attacks targeting open source dependencies.