sensepost/objection
1
0
Fork 0
mirror of https://github.com/sensepost/objection.git synced 2026-10-12 02:22:18 +00:00
Code Issues Packages Projects Releases Wiki Activity
850 Commits 2 Branches 80 Tags
master
Commit Graph
182 Commits
Author SHA1 Message Date
Megladon 6317edff92 (fix) agent android error handling (#792) 
Fixes some of the exception handling for okhttp and other android agent functions to not "crash" when an issue is encountered.
 2026-03-23 15:17:10 +02:00
Jeroen BeckersandJeroen 45a8eeea3c (fix) Missing method name [android sslpinning disable] (#772) 
Co-authored-by: Jeroen <[email protected]>
 2026-01-06 13:42:28 +02:00
Leon Jacobs 8c49080512 (chore) bump agent dependencies 2025-11-21 12:46:23 +02:00
ƁƖαηк キツネ 314c17385a fix: correct ObjC reference in Frida 17.x compatibility layer (#763) 
Fixes a typo in the Frida version compatibility check where
globalThis.Java was incorrectly assigned instead of globalThis.ObjC.

This typo caused a ReferenceError when the agent attempted to use
ObjC methods on iOS devices running Frida 17.x, specifically when
calling env_runtime() and other iOS-specific functions.

The fix ensures that when globalThis.ObjC exists (Frida < 17),
it is correctly assigned to the ObjC variable instead of Java.

Fixes #740

Tested-on:
- Frida 17.0.7
- iOS 17.x (jailbroken device)
- DVIA-v2 test application
 2025-11-10 17:44:06 +02:00
Megladon d32c1df114 (fix) Few bugfixes and QoL changes. 
* (feat) Attempt attach using identifier.

* (feat) Job handler fixes, and additional error detection.

* (fix) Compatibility with Apktool 2.12.0 and fix passing cli args.
 2025-10-30 08:25:18 +02:00
Megladon e282ea00ec (fix) frida v17 changes, webserver disabled. (#734) 
* (fix) frida v17 changes, webserver disabled.

* (feat) Frida < 17 backwards compatibility.

* (feat) objection backwards compatibility (-g explore). Bump dep versions.

* (chore) deprecated `pkg_resources` replaced with `packaging`.
 2025-06-11 09:23:36 +02:00
Megladon 8f51649922 Job handler refactoring. 
* (fix/feat) Job handler update.
* Fixed import, some crashes and jobs kill autocomplete
 2025-05-05 11:55:17 +02:00
Connor Armand Du Plooy 5b56bc73b4 (feat) Added optional backtrace for implicit intent analyzer. 2025-05-05 08:45:52 +02:00
Megladon bf39037478 (fix) Bugfixes and minor http server feature. (#698) 
* File size check for https://github.com/sensepost/objection/issues/554
* Modified device.attach to fix https://github.com/sensepost/objection/issues/694
* Fixed http server issues introduced by https://github.com/sensepost/objection/commit/3f9763bfd4179ecb20db18934430e30176cc650f (me)
* Added support for using "../" (previously this would mess with current directory display.)
* Add quotes when file/folder has space to fix https://github.com/sensepost/objection/issues/195
* Recursive directory support for http server. Previously you could not traverse directories.
 2025-03-21 17:13:44 +02:00
Lehasa Seoe 954ce3c65e Added Detection and Analysis of Android Implicit Intents (#714) 
* Added functionality to analyse detect and analyse implicit intents

* Included Jobs into the Implicit Intent Analyser
 2025-03-20 15:30:04 +02:00
Leon Jacobs d9c989d2da (fix) move to macho-ts and frida-screenshot ts 2024-06-07 08:32:37 +02:00
Megladon 3f9763bfd4 (chore) Bumping of dependencies. (#681) 
* (chore) Dependency bump

* Pin to major versions

* Version pinning syntax fix
 2024-05-24 10:02:35 +02:00
Megladon d98323470b (feat) Added memory replace command. (#656) 
* (feat) Added memory replace command.

* refactor duplicate code.
 2024-05-23 23:15:14 +02:00
Connor Armand Du Plooy 08df3fb248 Added --watch and friends to notify (#581) 2024-05-23 22:37:28 +02:00
gastontoth 5ed95764fc Adding functionalities: 'update' and 'remove' item from ios keychain. (#584) 2024-05-23 21:27:37 +02:00
Eric Le Guevelandeleguevel c941ead289 fix(agent): getBroadcastReceivers handle null (#591) 
Resolve https://github.com/sensepost/objection/issues/590

Co-authored-by: eleguevel <[email protected]>
 2023-03-30 13:24:35 +02:00
Apkunpacker 216a275c35 Fix some typo (#603) 
* Update crypto.ts

* Update ios.bundles.list_frameworks.txt

* Update bundles.py
 2023-03-30 13:23:13 +02:00
O.o 57237fc495 Fix biometry access constraints (#610) 2023-03-30 13:22:41 +02:00
Leon Jacobs 50817500c8 (chore) remove superfluous namesapce declarations 2022-02-13 20:17:17 +02:00
Leon Jacobs 0ce114555a (chore) style fixes, minor tweaks and remove old tests 2022-02-13 14:41:06 +02:00
Connor Armand Du Plooycduplooycduplooy
 		43d312dc80 Feat android pattern hooking (#511) 
* Added android pattern hooking

* Create a job per invocation of search/watch

* Cleaning up

* Added error when search pattern is incorrect

* fix job 'implementation'

Co-authored-by: cduplooy <[email protected]>
Co-authored-by: cduplooy <connor.plooy@com>
 2022-02-13 13:01:38 +02:00
Leon Jacobs 0b6413877c (chore) style fixes, tweaks and remove some tests 2022-02-13 12:14:14 +02:00
Connor Armand Du Plooyandcduplooy 5cc8b86f3b Feat ios pattern hooking (#510) 
* Added ios pattern hooking

* Create a job per invocation of search/watch

* Removed job from ios hooking search

* Removed job from ios hooking search

Co-authored-by: cduplooy <[email protected]>
 2022-02-13 09:30:00 +02:00
Leon Jacobs 6498db340f (chore) android root hook cleanup 2022-02-10 09:18:10 +02:00
Leon Jacobs 3d04df974b (feat) add rootbeer isSelinuxFlagInEnabled() check 2022-02-10 07:30:08 +02:00
Leon Jacobs dd4951737d (feat) fix rootbeer bypass 
remove obfuscated hooks, these are not predictable
remove dead code
rename function names
 2022-02-10 07:18:04 +02:00
haxxinen a3b15bbee6 Adding support for bypassing RootBeer library. (#463) 
app: https://github.com/scottyab/rootbeer
lib: https://github.com/scottyab/rootbeer/tree/master/rootbeerlib
apk: https://play.google.com/store/apps/details?id=com.scottyab.rootbeer.sample
blog: https://medium.com/@scottyab/detecting-root-on-android-97803474f694
 2022-02-10 07:04:26 +02:00
Leon Jacobs e89e455198 (chore) style tweaks 2021-10-24 13:41:20 +02:00
Richard Clifford ee7e94556a Update jailbreak.ts (#482) 2021-10-24 13:27:33 +02:00
Leon Jacobs 29846603b8 (chore) code style tweaks 2021-10-24 13:18:41 +02:00
Nicky Bloorandnickyb ddad47cfee Implement JailMonkey bypass (#455) 
* Implemented JailMonkey bypass in Android agent.

* Implemented JailMonkey bypass in iOS agent.

* Update root.ts

Lost a commit somewhere - fixed "false_object" references to refer to the actual object "JavaFalseObject".

* Update jailbreak.ts

Added check to ensure `ObjC.classes.JailMonkey` is defined before attempting to hook `- isJailBroken`.

Co-authored-by: nickyb <[email protected]>
 2021-10-24 12:59:31 +02:00
Leon Jacobs 61ce6e441d (feat/chore) refactor output for android keystore detail 
introduced in #452
 2021-10-24 12:54:13 +02:00
p0w1andmafe 749363f23e Added Command Android>Keystore>ListDetails (#452) 
Co-authored-by: mafe <[email protected]>
 2021-10-24 11:46:46 +02:00
Leon Jacobs 7f4db55812 (chore) bump agent dependencies 
this commit also fixes new type checking related errors
 2021-10-24 11:43:13 +02:00
Jan S 8560d75863 (fix) keychain dumper misses entries with kSecAttrSynchronizable=true (#448) 
* (fix) keychain dumper misses entries that were created with kSecAttrSynchronizable=true

* (fix) keychain empty() method misses entries that were created with kSecAttrSynchronizable=true
 2021-03-30 06:04:46 +02:00
Leon Jacobs 24582bb9fd (fix) don't crash if no matches are found 2021-03-13 19:25:54 +02:00
Leon Jacobs 3b8cc59316 (fix) correctly parse imports for ARC 
fixes #426
 2021-03-02 10:12:09 +02:00
Corey GagnonandCorey Gagnon ebd920e945 Simplify ios monitor command. (#440) 
* monitor CommonCrypto in real time

* typo

* improve output when job already registered

* fixed unpad

* attempt to convert dataOut to ascii on decrypt

* fixed output in CCCryptorUpdate

* cleaning up style with tslint

* removed dead code

* simplified `monitor` command for crypto

* removed duplicate helpfile

* renamed helpfile to work with new command

* renamed helpfile to work with new crypto monitor command

Co-authored-by: Corey Gagnon <[email protected]>
 2021-02-22 11:05:22 +02:00
Leon Jacobs a34359165f (feat) add the 'android deoptimize' command 
this is a useful command if you are having trouble with hooks
firing as a result of optimizations.
 2021-02-17 18:05:04 +02:00
GOAT-FARM3R 91d131174a Added command to setup proxy via objection (#439) 2021-02-17 17:15:37 +02:00
Leon Jacobs 03b41949c3 (chore) move ios crypto monitor to a monitoring sub command 
small formatting fixes
 2021-02-17 17:06:05 +02:00
Corey GagnonandCorey Gagnon 746d08d6bf Monitor iOS CommonCrypto Usage (#430) 
* monitor CommonCrypto in real time

* typo

* improve output when job already registered

* fixed unpad

* attempt to convert dataOut to ascii on decrypt

* fixed output in CCCryptorUpdate

* cleaning up style with tslint

Co-authored-by: Corey Gagnon <[email protected]>
 2021-02-17 16:06:22 +02:00
ido77778 675a88f174 Revert "Use JSON.stringify for dump args and return (#334)" (#414) 
This reverts commit ac40784b
 2021-02-17 15:59:15 +02:00
Leon Jacobs 4b4653794c (chore) formatting fixes 2021-02-17 15:58:22 +02:00
John Novak 2977c8a03a Adding iOS biometrics hook for evaluateAccessControl() (#411) 2021-02-17 15:55:05 +02:00
tothi 90044d7323 disable ssl pinning also by okhttp3.CertificatePinner.check$okhttp override (#404) 
Signed-off-by: tothi <[email protected]>
 2021-02-17 14:24:56 +02:00
Leon Jacobs dc104f8e80 (chore) reduce job id lengths 2021-02-17 13:05:17 +02:00
Leon Jacobs b0710ed221 Add ability to list the registered class loaders. 2020-09-21 22:20:01 +02:00
Leon Jacobs 2a917782ba Fix broken Frida API calls introduced in #390 2020-08-13 11:51:57 +02:00
haxxinen d59010d8be Update jailbreak.ts (#390) 2020-08-13 11:47:51 +02:00