
grapefruit
Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

Open-source mobile security testing suite for iOS and Android. Previously Passionfruit

A collection of my Frida instrumentation scripts to reverse engineer mobile apps and more.

Inspects, decompiles and structurally patches Hermes bytecode (HBC) from React Native apps, with a GDB-style REPL, CFG, decompiler and re-serializing…

A powerful decompiler that lets you reverse-engineer React Native mobile apps by converting their compiled Hermes bytecode (.hbc) files back into…

PoC for CVE-2026-28990, an ImageIO bug patched in iOS/macOS 26.5

Runtime Mobile Security (RMS) 📱🔥 - is a powerful web interface that helps you to manipulate Android and iOS Apps at Runtime

The Mobile App Pentest cheat sheet was created to provide concise collection of high value information on specific mobile application penetration…

Coverage-guided in-process fuzzer for iOS Bluetooth daemon (bluetoothd) using FRIDA, with over-the-air fuzzing for MagicPairing protocol and crash…

Mobile Edge-Dynamic Unified Security Analysis

Unofficial frida extension for VSCode

Coverage-guided kernel fuzzing framework that runs XNU as a userspace library and discovers vulnerabilities across BSD, Mach, virtual memory, and…

This is POC for IOS 0click CVE-2025-43300