Objection

Reverse Engineering

Intermediatemedium risk

Objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security of your mobile applications without needing a jailbroken or rooted device.

Installation

pip install objection

Basic Syntax

objection -g <package_name> explore

Quick Facts

Full Name

Objection

License

MIT

Language

Python

Platforms

Linux, macOS, Windows (with Frida)

Category

Mobile Security Testing

Created By

sensepost

Tool Overview

Objection is a runtime mobile exploration toolkit powered by Frida. It provides pre-built commands for common mobile security testing tasks without writing code.

The tool supports both Android and iOS. It can bypass SSL pinning, disable root/jailbreak detection, hook methods, and dump memory.

Objection is ideal for mobile app security assessments where you need quick results without writing custom Frida scripts.

Common Commands

objection -g com.example.app exploreAttach to an app by package/bundle ID and open the interactive REPL

objection --gadget com.example.app explore -qStart exploration quietly without the ASCII banner

objection -S <serial> -g com.example.app exploreAttach to a specific device by serial then explore

objection --network --host 10.10.10.10 --port 27042 exploreConnect to a remote frida-server over the network and explore

objection -g com.example.app explore --startup-command "android sslpinning disable"Attach and immediately run a startup command in the REPL

objection patchapk -s app.apkRepackage an APK with the Frida gadget injected

objection patchipa -s app.ipaPatch an iOS IPA with the Frida gadget

objection signapk app.objection.apkZipalign and sign a patched APK for installation

android hooking list activitiesList all activities of the target Android app

android hooking list classesList all loaded Java classes in the running app

android hooking search classes <name>Search loaded classes for a keyword

android hooking watch class com.example.app.LoginActivityHook and log all methods of a class as they are called

android hooking watch class_method com.example.app.Login.check --dump-args --dump-returnWatch a method and dump its arguments and return value

android hooking set return_value com.example.app.Auth.isValid trueForce a Java method to return a fixed value

android sslpinning disableAttempt to bypass common SSL certificate pinning on Android

Step-by-Step Guide

1Install the tool suite on your host computer
2Verify the background server is communicating with your test device
3Open the application you intend to audit
4Connect to the app using the 'explore' parameter
5Disable internal security checks like pinning if necessary
6Map out the internal code structures
7Intercept and modify specific methods in real-time
8Extract memory segments for sensitive data review

Use Cases

SSL Pinning Bypass

Bypass certificate pinning on Android/iOS.

Root Detection Bypass

Bypass root/jailbreak detection.

Method Hooking

Watch and modify method calls.

Memory Dump

Extract sensitive data from memory.

Key Features

SSL Bypass: One-command SSL pinning bypass.
Root Bypass: Bypass root/jailbreak detection.
REPL: Interactive exploration interface.
Memory Dump: Extract data from app memory.
Hooking: Watch and modify method calls.

Related Tools

Frida

Dynamic Instrumentation

Dynamic instrumentation toolkit.

Frequently Asked Questions

What is Objection used for?

Objection is a runtime mobile exploration toolkit for Android and iOS. It provides pre-built commands for SSL pinning bypass, root detection bypass, and more.

Does Objection need root?

Yes, Objection requires a rooted Android device or jailbroken iOS device since it is built on Frida.

How do I bypass SSL pinning with Objection?

Run 'android sslpinning disable' after connecting to the app to bypass SSL certificate pinning.

Is Objection better than Frida?

Objection is easier for common tasks. Frida is more flexible for custom instrumentation. Use Objection for quick tests, Frida for custom hooks.