📱 objection - runtime mobile exploration
--inline
flag to the ios heap execute js
command, allowing for inline JavaScript evaluation on iOS heap objects. (https://github.com/sensepost/objection/commit/956056aab6d18bbc37105902996102f02a492a67)--unzip-unicode
flag to the iOS IPA patcher to treat the IPA name as unicode. Thanks @Fabiano1107 (#309)[object, object]
for the argument. Thanks @arielmiki (#334).dex
files generated by Java.registerClass()
. An example patch to recompile the Android frida-server with the name frida
renamed to freeda
can be seen here. (https://github.com/sensepost/objection/commit/d1035e566cef7e4e4c139258ee6d112adafa09af)android keystore watch
command. This command will report usages of the java.security.KeyStore
class, revealing the password used when accessing items. (https://github.com/sensepost/objection/commit/0513b2d780092eedc95390db51c27c895606f241)android hooking set return_value
crashing when no optional overload is set. Thanks @root-intruder (#307)jarsigner
on Linux. Thanks @RomainL972 (#327)apktool
version 2.4.1 and up, as well as by automatically running the empty-framework-dir
command before patching. Information about upgrading apktool
can be found in the wiki here. (https://github.com/sensepost/objection/commit/46288b5c7b708837bf15e03e44f3d45fa24f148f)aapt2
with apktool
and better error handling. (thanks @dnet via #282, #283 and #284)ios keychain dump_raw
command and should be used in conjunction with the original dump
command to make sure no parsing errors have occurred.file cat
command that will perform cat
-like activities, added for convenience. Only ASCII printable characters in the target file will be echoed to screen. For any other processing, files should still be downloaded and processed locally.simple
and class
version. The version you choose will depend on your use case, so feel free to experiment!sqlite connect database.sqlite
command will now automatically drop you into a litecli REPL. If you want to make changed to the target database, add the --sync
flag. This way, once you quit
from the litecli REPL, the modified database will be synchronized back to the device.@types/frida-gum
to version 14.P
. Lower case was conflicting with the --pause
/ -p
flag.