850 Commits
Author SHA1 Message Date
Radon Rosborough 35c4e2c9e6 (chore) add allowScripts to package.json (#819)
Unfortunately, NPM 12 adds a new feature, where it will silently skip
running post-install scripts, without telling you, unless you
explicitly configure it otherwise for every individual dependency.

As a result, if you checkout Objection onto a machine running NPM 12,
and run "npm install" in the agent directory, then it will error out
with:

    Error: Could not locate the bindings file.

Which happens because the npm install runs the prepare script in the
agent package.json, which runs the build script, which invokes
frida-compile, which expects for its frida dependency to have been
actually installed properly.

Unfortunately, the npm install output makes absolutely no mention of
the fact that a post-install script was silently skipped. Even in the
debug logfile that it tells you about in the command output. I don't
know why this is the case. If you npm install frida just by itself,
then it does print a warning explaining the problem, but not if it's a
dependency.
2026-09-17 09:20:15 +02:00
Megladon d9d50c206d (fix) update tests and minor bugfixes (#784)
* (fix) update tests

* (fix) Fixed bug with code dynamic+flag code completion.

* (fix) Fixed issue with `os.path.isabs` on Windows.

* Updated makefile for tests.
2026-07-23 15:40:22 +02:00
Ramada Aditya a5d6f3809c (fix) handle non-standard version strings from custom ROMs (#798)
Some Android distributions (e.g. crDroid, Evolution X) append
additional identifiers to ro.build.version.release, causing
packaging.version.Version to raise InvalidVersion.

This patch sanitizes the version string before parsing to ensure
compatibility and prevent crashes.
2026-07-23 15:39:46 +02:00
citizen204 b62c7e024b (fix) require Python >=3.11 to match tomllib import (#806)
objection/__init__.py imports tomllib at module level, which only
exists in the standard library from Python 3.11. With requires-python
set to >=3.10, installation succeeds on 3.10 but 'import objection'
immediately fails with ModuleNotFoundError.

Fixes #799
2026-07-23 15:38:30 +02:00
IPMegladon 2da035afe8 (chore) Bump bridge versions, small release 1.12.5 2026-06-02 11:13:21 +02:00
MegladonandCarlos Holguera 228c5e3399 (feat) Add local connection option for iOS simulator. (#795)
* (feat) --local connection option for iOS simulator.
* (feat) determine platform using available bridge.


---------

Co-authored-by: Carlos Holguera <[email protected]>
2026-04-12 20:32:50 +02:00
44e7c63f6c (fix) AttributeError in warn_about_older_operating_systems (#788)
warn_about_older_operating_systems() is called from the start command before
device_state.platform and device_state.version are populated (e.g. when
connecting to a remote frida-server). This caused:

  AttributeError: 'DeviceState' object has no attribute 'platform'

Guard with getattr(..., None) and return early when platform or version
are not set, so the version warnings are skipped until device state is
available.

Co-authored-by: uceka2 <[email protected]>
Co-authored-by: Cursor <[email protected]>
2026-04-12 13:50:10 +02:00
Megladon dd939c5cf3 (chore) bump version v1.12.4 1.12.4 2026-03-25 14:30:02 +02:00
Megladon 6317edff92 (fix) agent android error handling (#792)
Fixes some of the exception handling for okhttp and other android agent functions to not "crash" when an issue is encountered.
2026-03-23 15:17:10 +02:00
Megladon b084ffa061 (fix) Helpfiles updated (#785) 2026-03-23 14:33:17 +02:00
IPMegladon 3c3cde806f (fix) quickfix missing bracket 2026-03-12 09:25:58 +02:00
31dad9af0d (feat) Implement reconnect & reconnect_spawn (#791)
* `reconnect` command now allows recovering crashed agent.
* new `reconnect_spawn` command allows recovering crashed app.
* Can now spawn application with identifier or name, i.e. "My App" & "com.my.app" previously this only applied when attaching. This means the same -n <identifier> syntax will work with and without --spawn.


---------

Co-authored-by: 3rm-z <[email protected]>
Co-authored-by: Shlomo isaacs <[email protected]>
2026-03-11 21:01:09 +02:00
Megladon b36eef417f (chore) bump version 1.12.3 2026-01-27 15:32:32 +02:00
Jeroen BeckersandJeroen 45a8eeea3c (fix) Missing method name [android sslpinning disable] (#772)
Co-authored-by: Jeroen <[email protected]>
2026-01-06 13:42:28 +02:00
Leon Jacobs 50e047303d (chore) drop min python version and bump version # 1.12.2 2025-11-21 13:46:04 +02:00
Leon Jacobs 88ffd5bc5e Update pypi.yml to improve npm caching
Add cache-dependency-path for npm caching
1.12.1
2025-11-21 13:03:57 +02:00
Leon Jacobs 7c07387e4a Update PyPi workflow for release process 1.12.0 2025-11-21 12:56:49 +02:00
Leon Jacobs e104577d6f (build) replace setuptools with uv 2025-11-21 12:48:17 +02:00
Leon Jacobs 8c49080512 (chore) bump agent dependencies 2025-11-21 12:46:23 +02:00
ƁƖαηк キツネ 314c17385a fix: correct ObjC reference in Frida 17.x compatibility layer (#763)
Fixes a typo in the Frida version compatibility check where
globalThis.Java was incorrectly assigned instead of globalThis.ObjC.

This typo caused a ReferenceError when the agent attempted to use
ObjC methods on iOS devices running Frida 17.x, specifically when
calling env_runtime() and other iOS-specific functions.

The fix ensures that when globalThis.ObjC exists (Frida < 17),
it is correctly assigned to the ObjC variable instead of Java.

Fixes #740

Tested-on:
- Frida 17.0.7
- iOS 17.x (jailbroken device)
- DVIA-v2 test application
2025-11-10 17:44:06 +02:00
Megladon 24539edd85 (fix) Hotfix update of frida-java-bridge (#771) 2025-11-07 16:29:26 +02:00
Megladon d32c1df114 (fix) Few bugfixes and QoL changes.
* (feat) Attempt attach using identifier.

* (feat) Job handler fixes, and additional error detection.

* (fix) Compatibility with Apktool 2.12.0 and fix passing cli args.
2025-10-30 08:25:18 +02:00
Megladon e282ea00ec (fix) frida v17 changes, webserver disabled. (#734)
* (fix) frida v17 changes, webserver disabled.

* (feat) Frida < 17 backwards compatibility.

* (feat) objection backwards compatibility (-g explore). Bump dep versions.

* (chore) deprecated `pkg_resources` replaced with `packaging`.
2025-06-11 09:23:36 +02:00
Megladon 9fbf5afeb1 (fix) Added patch_stdout to REPL. (#732)
Resolves issue faced in #706
2025-06-11 09:16:12 +02:00
Connor Armand Du Plooy a9e216c47c (feat) Concurrency control for apktool (#730)
Ability to set the number of threads for apktool.
2025-05-10 10:40:33 +02:00
Megladon 8f51649922 Job handler refactoring.
* (fix/feat) Job handler update.
* Fixed import, some crashes and jobs kill autocomplete
2025-05-05 11:55:17 +02:00
Connor Armand Du Plooy 5b56bc73b4 (feat) Added optional backtrace for implicit intent analyzer. 2025-05-05 08:45:52 +02:00
Megladon c99e46e5d2 (fix) codeql-analysis.yml removed deprecated steps
Removed deprecated `checkout HEAD^2` step from CodeQL workflow. 
https://docs.github.com/en/code-security/code-scanning/troubleshooting-code-scanning/unnecessary-step-found
2025-04-30 10:45:24 +02:00
Megladon 9cd5f4210d (fix) Fix filesystem cat command missing parameter. (#725)
Updated deprecated commands and missing docstring param.
2025-04-04 10:55:19 +02:00
Megladon bf39037478 (fix) Bugfixes and minor http server feature. (#698)
* File size check for https://github.com/sensepost/objection/issues/554
* Modified device.attach to fix https://github.com/sensepost/objection/issues/694
* Fixed http server issues introduced by https://github.com/sensepost/objection/commit/3f9763bfd4179ecb20db18934430e30176cc650f (me)
* Added support for using "../" (previously this would mess with current directory display.)
* Add quotes when file/folder has space to fix https://github.com/sensepost/objection/issues/195
* Recursive directory support for http server. Previously you could not traverse directories.
2025-03-21 17:13:44 +02:00
Lehasa Seoe 954ce3c65e Added Detection and Analysis of Android Implicit Intents (#714)
* Added functionality to analyse detect and analyse implicit intents

* Included Jobs into the Implicit Intent Analyser
2025-03-20 15:30:04 +02:00
Megladon d0edeb06bd Bump codeql workflow to v3
* Update actions codeql to v3
2025-03-20 15:25:08 +02:00
Isak Van Der Walt 5f22e0acf7 (feat) Add folder download functionality. 2024-09-13 14:20:15 +02:00
Leon Jacobs d9c989d2da (fix) move to macho-ts and frida-screenshot ts 2024-06-07 08:32:37 +02:00
Leon Jacobs e6db48bd6a (fix) update debugger support.
this is an implementation from #579. thanks @CDuPlooy!
2024-05-24 10:29:42 +02:00
Leon Jacobs 012b6cb540 (chore) bump dependenices 2024-05-24 10:05:14 +02:00
Megladon 3f9763bfd4 (chore) Bumping of dependencies. (#681)
* (chore) Dependency bump

* Pin to major versions

* Version pinning syntax fix
2024-05-24 10:02:35 +02:00
Leon Jacobs 5e45507d19 (chore) fix dependencies 2024-05-23 23:54:08 +02:00
Leon Jacobs 8f531f870c (feat) force keychain flags 2024-05-23 23:50:12 +02:00
Altay Akkus bf4d0101ab Support for apktool d --only-main-classes (#660)
* Support for apktool d --only-main-classes
Fixes #659

* Minor fixes, working now.
2024-05-23 23:34:59 +02:00
Megladon d98323470b (feat) Added memory replace command. (#656)
* (feat) Added memory replace command.

* refactor duplicate code.
2024-05-23 23:15:14 +02:00
Connor Armand Du Plooy 08df3fb248 Added --watch and friends to notify (#581) 2024-05-23 22:37:28 +02:00
gastontoth 5ed95764fc Adding functionalities: 'update' and 'remove' item from ios keychain. (#584) 2024-05-23 21:27:37 +02:00
Darion Reyes 6c55d7e462 Added the option to skip APK signing. (#635) 2023-09-10 07:49:42 +02:00
Kevin Wu f47926e90c Fix typos (#614) 2023-04-22 21:13:24 +02:00
Eric Le Guevelandeleguevel c941ead289 fix(agent): getBroadcastReceivers handle null (#591)
Resolve https://github.com/sensepost/objection/issues/590

Co-authored-by: eleguevel <[email protected]>
2023-03-30 13:24:35 +02:00
Apkunpacker 216a275c35 Fix some typo (#603)
* Update crypto.ts

* Update ios.bundles.list_frameworks.txt

* Update bundles.py
2023-03-30 13:23:13 +02:00
O.o 57237fc495 Fix biometry access constraints (#610) 2023-03-30 13:22:41 +02:00
Leon Jacobs c6be9333e7 (chore) bump dependencies 2023-02-28 09:21:26 +02:00
dependabot[bot] b2b8030718 Bump terser from 5.10.0 to 5.14.2 in /agent (#559)
Bumps [terser](https://github.com/terser/terser) from 5.10.0 to 5.14.2.
- [Release notes](https://github.com/terser/terser/releases)
- [Changelog](https://github.com/terser/terser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/terser/terser/commits)

---
updated-dependencies:
- dependency-name: terser
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-28 09:16:26 +02:00