objection

No entries match these filters. Clear filters

1. 1.12.5 Jun 2, 2026 · release notes

   objection 1.12.5 adds a local connection option for iOS simulator targets.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.12.5 https://github.com/sensepost/objection.git
   # already have the repo? check out this version:
   $ git checkout 1.12.5

   • Adds a local connection option for attaching to iOS simulators, enabling direct in-process Frida attachment without a network/USB bridge.

   1 detail in Everything

2. 1.12.4 Mar 25, 2026 · release notes

   objection 1.12.4 adds reconnect and reconnect_spawn commands to re-attach or respawn a target process without restarting a session.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.12.4 https://github.com/sensepost/objection.git
   # already have the repo? check out this version:
   $ git checkout 1.12.4

   └──▷ TRY IT
   Re-attach to a target app mid-session after a connection drop, without restarting objection.
   copy

   $ reconnect

   Force-respawn a crashed or exited target process and re-attach — useful during long iOS testing sessions.
   copy

   $ reconnect_spawn

   • New reconnect command re-attaches objection to a running target process after a connection drop.
   • New reconnect_spawn command attempts to respawn the target process and re-attach (iOS support has caveats).

   2 details in Everything

3. 1.12.0 Nov 21, 2025 · release notes

   objection 1.12.0 adds Android keystore inspection, implicit intent analysis, memory replace, iOS/Android pattern hooking, and new bypass support for JailMonkey and RootBeer.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.12.0 https://github.com/sensepost/objection.git
   # already have the repo? check out this version:
   $ git checkout 1.12.0

   └──▷ TRY IT
   Patch an APK without re-signing, useful when you manage signing separately in a CI pipeline.
   copy

   $ objection patchapk -s target.apk --skip-signing

   • New android keystore listdetails command to inspect Android keystore entries.
   • Adds JailMonkey jailbreak detection bypass for iOS apps using the JailMonkey library.
   • Adds RootBeer root detection bypass for Android apps using the RootBeer library.
   • New iOS pattern hooking support to hook methods by pattern match.
   • New Android pattern hooking support to hook methods by pattern match.

   +8 more show less

   • Adds --uid flag to the objection CLI for targeting processes by UID.
   • Adds update and remove operations for iOS keychain items.
   • Adds --watch flag (and related options) to the notify command for continuous monitoring.
   • New memory replace command to overwrite values in process memory.
   • Adds detection and analysis of Android implicit intents, with optional backtrace support.
   • Adds --only-main-classes support for apktool decompilation during APK patching.
   • Adds option to skip APK signing during the patch workflow.
   • Minor HTTP server feature additions.

   13 details in Everything

4. 1.11.0 Apr 6, 2021 · release notes

   Adds -b flag to patchipa command for manual bundle ID specification

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.11.0 https://github.com/sensepost/objection.git
   # already have the repo? check out this version:
   $ git checkout 1.11.0

   └──▷ USE IT
   Manually override the inferred bundle ID when patching an iOS app IPA file
   shell copy

   objection patchipa -b com.example.customid path/to/app.ipa

   • Adds -b flag on the patchipa command to manually specify the iOS app's bundle identifier
   • Default behavior now parses the bundle ID automatically from .mobileprovision files

   2 details in Everything

5. 1.10.0 Feb 24, 2021 · release notes

   Objection 1.10 adds signapk command, wildcard class hooking, Android proxy set, and iOS crypto monitor.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.10.0 https://github.com/sensepost/objection.git
   # already have the repo? check out this version:
   $ git checkout 1.10.0

   └──▷ USE IT
   Sign multiple APKs in the current directory using the configured objection certificate
   shell copy

   objection signapk *.apk

   Set a proxy for only the current Android app session rather than system-wide
   shell copy

   android proxy set http://127.0.0.1:8080

   Monitor CommonCrypto API calls in real time on an iOS app
   shell copy

   ios monitor crypto

   • Add the android hooking list class_loaders command to list the available class loaders
   • Add the objection signapk command to sign multiple apk's using the objection certificate
   • Add wildcard class name support for Android method hooking
   • Add the ability to specify an already decoded AndroidManifest to the patchapk command
   • Improve the iOS biometrics bypass hook by also hooking evaluateAccessControl.

   +3 more show less

   • Add a new ios monitor crypto command to monitor CommonCrypto usage in real time.
   • Add a new android proxy set command to set the proxy server used by a specific Android app and not the whole OS.
   • Add a new android deoptimize command to disable all optimizations, forcing the android VM to execute via the interpreter.

   8 details in Everything

6. 1.9.6 Aug 13, 2020 · release notes

   Plugins can extend the HTTP API via Flask Blueprints in the explore -a command

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.9.6 https://github.com/sensepost/objection.git
   # already have the repo? check out this version:
   $ git checkout 1.9.6

   • pwd now acts as an alias for pwd print (fixing #395).
   • Plugins can expose custom endpoints by returning a Flask Blueprint from the http_api method, visible when using the -a flag with the explore command.
   • Added hooks in the iOS jailbreak bypass module for calls to fopen and -[UIApplication canOpenURL:].

   3 details in Everything

7. 1.9.2 May 10, 2020 · release notes

   Add the ping CLI command to verify agent responsiveness

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.9.2 https://github.com/sensepost/objection.git
   # already have the repo? check out this version:
   $ git checkout 1.9.2

   └──▷ USE IT
   Verify the Frida agent on the target device is responsive before running instrumentation commands.
   shell copy

   objection --gadget "MyApp" ping

8. 1.9.1 Apr 7, 2020 · release notes

   Objection 1.9.1 adds iOS IPA gadget embeddingembeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG., extractNativeLibs toggle, and refactors ios keychain add

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.9.1 https://github.com/sensepost/objection.git
   # already have the repo? check out this version:
   $ git checkout 1.9.1

   └──▷ USE IT
   Automate embedding a gadget into an iOS IPA for runtime instrumentation.
   shell copy

   objection --gadget-config gadget.yaml embed-ios-gadget -i path/to/app.ipa -o path/to/output.ipa

   Modify an Android APK without forcing extractNativeLibs to false.
   shell copy

   objection --patch-app -p app.apk --keep-extractNativeLibs

   Add a keychain item using the new granular flags.
   shell copy

   objection ios keychain add --account 'user' --service 'myapp'

   • Extends embed-ios-gadget command to support iOS IPA files for automated gadget configuration embedding.
   • Adds --keep-extractNativeLibs flag to Android manifest modification commands to preserve the existing extractNativeLibs value instead of forcing it to false.
   • Refactors ios keychain add command to replace the deprecated --key flag with --account and --service flags for granular attribute control.

   3 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !The --key flag is removed from the ios keychain add command; use --account and --service instead.
9. 1.9.0 Mar 29, 2020 · release notes

   Objection 1.9.0 adds ios heap execute js --inline, Android gadget patching, and android keystore watch

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 1.9.0 https://github.com/sensepost/objection.git
   # already have the repo? check out this version:
   $ git checkout 1.9.0

   └──▷ USE IT
   Evaluate JavaScript directly on iOS heap objects without saving a file first.
   shell copy

   objection ios heap execute js --inline 'JSON.stringify(heap.find("SomeClass"))'

   Monitor Java keystore access to capture credentials as they are loaded.
   shell copy

   objection android keystore watch

   • Add the --inline flag to the ios heap execute js command for inline JavaScript evaluation on iOS heap objects.
   • Add a new --unzip-unicode flag to the iOS IPA patcher.
   • Add ability to patch in a gadget configuration and script to Android APKs to eternalise scripts without needing a computer.
   • Improve the Android method watcher by dumping information about objects instead of showing [object, object] for arguments.
   • Improve anti-frida evasion by using a different prefix for .dex files generated by Java.registerClass().

   +1 more show less

   • Add a new android keystore watch command to report usages of the java.security.KeyStore class and reveal passwords.

   6 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Remove support for Python 3.5
10. 1.8.0 Oct 19, 2019 · release notes

    Objection 1.8.0 adds libboringssl bypass, iOS dump_raw command, Frida hook generator commands, and file cat

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.8.0 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.8.0

    └──▷ TRY IT
    Inspect target file contents directly in the objection shell without downloading.
    copy

    $ file cat /etc/hosts

    Dump raw keychain entries to capture data that standard parsing might miss or corrupt.
    copy

    $ ios keychain dump_raw

    • Adds the file cat command to echo ASCII printable characters from target files
    • Adds the ios keychain dump_raw command to dump unparsed keychain data
    • Adds new Frida hook generator commands (simple and class flavors) for boilerplate code generation
    • Adds --sync flag to the sqlite connect command for modifying target databases via litecli REPL
    • Adds a libboringssl SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. pinning bypass for iOS 11+

    5 details in Everything

11. 1.7.5 Oct 1, 2019 · release notes

    Adds a plugins directory with sample plugins for extension.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.7.5 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.7.5

12. 1.7.3 Aug 21, 2019 · release notes

    Adds an Android Cordova SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. pinning bypass for apps using SSLCertificateChecker-PhoneGap-Plugin

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.7.3 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.7.3

13. 1.7.1 Aug 14, 2019 · release notes

    Add --pause flag to patchipa command to allow manual changes during iOS IPA patching

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.7.1 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.7.1

14. 1.7.0 Aug 11, 2019 · release notes

    Objection 1.7.0 adds heap interaction commands, JS editor, iOS protections enum, and on-device HTTP server

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.7.0 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.7.0

    └──▷ USE IT
    Run a simple JavaScript script directly on the target without external file management
    shell copy

    objection --gadget "<app_name>" explore
    evaluate '<script_content>'

    • Adds multiple <target> heap subcommands for iOS and Android heap manipulation under the heap command context
    • Adds JavaScript script editing capability via the existing evaluate command

    2 details in Everything

15. 1.6.5 Jun 7, 2019 · release notes

    Objection 1.6.5 adds --smart decoding and dataHex field to iOS keychain dumper

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.6.5 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.6.5

    └──▷ USE IT
    Dump iOS keychain entries with automatically decoded data fields and hex values.
    shell copy

    objection explore ios keychain dump --smart --json

    • Adds --smart flag to the iOS keychain dumper for automatic decoding of data fields
    • Adds dataHex key to JSON output when dumping iOS keychain entries with --json

    2 details in Everything

16. 1.6.4 May 22, 2019 · release notes

    Adds ios bundles list_frameworks, Android --target-class flag, and iOS Cordova SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. pinning bypass to objection 1.6.4

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.6.4 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.6.4

    └──▷ TRY IT
    List all frameworks observable by NSBundle in a connected iOS application bundle.
    copy

    $ objection ios bundles list_frameworks

    Inject the Frida gadget into MyCustomClass instead of the main activity for Android patching.
    copy

    $ objection android patch --target-class MyCustomClass

    • New ios bundles list_frameworks command enumerates frameworks observable by NSBundle.
    • Android patcher gains --target-class flag to inject a Frida gadget's loadLibrary call into an arbitrary class' constructor.
    • New SSL Pinning bypass hook for iOS Cordova applications using the EddyVerbruggen/SSLCertificateChecker-PhoneGap-Plugin.

    3 details in Everything

17. 1.6.3 Apr 11, 2019 · release notes

    Adds android hooking get current_activity command and an R class helper for Android hooks

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.6.3 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.6.3

    └──▷ USE IT
    Get the active Android activity name from a connected device.
    shell copy

    objection --gadget-name "com.example.app" explore android hooking get current_activity

18. 1.6.2 Apr 2, 2019 · release notes

    Adds --json flag to save module exports as JSON.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.6.2 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.6.2

19. 1.6.0 Mar 29, 2019 · release notes

    Objection 1.6.0 adds Android method search, live heap inspection, Frida crash reporting, rm command, and plugin support

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.6.0 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.6.0

    └──▷ USE IT
    Search for methods matching a pattern in the target Android app's hooking namespace
    shell copy

    objection -g <pid> android hooking search methods "<search string>"

    Inspect all live instances of a specific Java class in the Android heap
    shell copy

    objection -g <pid> android heap print_instances "<class>"

    Delete a file on the connected Android device using the built-in rm command
    shell copy

    objection -g <pid> rm "<path>"

    • Adds android hooking search methods subcommand for searching Android methods by string
    • Adds android heap print_instances subcommand to inspect live Java object instances
    • Adds frida command output that reports the Frida runtime version in use
    • Adds plugin support framework with configuration via Python modules
    • Adds rm command for deleting files on Android devices

    +1 more show less

    • Adds warnings before clearing iOS keychain or Android Keystore

    6 details in Everything

20. 1.5.0 Feb 22, 2019 · release notes

    Objection 1.5.0 adds an RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. API, TypeScript agent, Android app spawning on rooted devices, and SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. pinning hooks.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.5.0 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.5.0

    • Exposes a new API for programmatic interaction via Frida RPC
    • Rewrites the Frida agent in TypeScript for stable hook execution
    • Adds support for spawning Android applications on rooted devices
    • Includes new SSL pinning disabling hooks

    4 details in Everything

21. 1.4.0 Jul 12, 2018 · release notes

    Adds ios nsurlcredentialstorage dump command to extract stored iOS credentials

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.4.0 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.4.0

22. 1.3.0 Jun 14, 2018 · release notes

    Objection 1.3.0 adds --serial flag for multi-device targeting and new keychain entry creation

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.3.0 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.3.0

    • Adds the --serial CLI flag to target specific device instances during runtime injection
    • Enables creation of new kSecClassGenericPassword keychain entries via existing hooks

    2 details in Everything

23. 1.2.8 Apr 8, 2018 · release notes

    Objection v1.2.8 adds --skip-resources flag and inverts Android resource decoding default

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.2.8 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.2.8

    └──▷ USE IT
    Skip resource decoding when patching an Android APK to reduce size or time.
    shell copy

    objection explore --patch <apk_path> --skip-resources

    • Changes the Android patcher's default behavior to decode resources (previously it did not).

    1 detail in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Android patcher now decodes resources by default; use --skip-resources to restore previous behavior.
24. 1.2.7 Mar 12, 2018 · release notes

    Adds --network-security-config flag to patchapk and a hook on TrustManagerImpl.verifyChain()

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.2.7 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.2.7

    └──▷ USE IT
    Patching an APK with network security config for Android 7+ to handle CA certificate changes
    shell copy

    objection patchapk -s sample.apk --network-security-config

    Disabling SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. pinning using the new verifyChain hook which suppresses exceptions for non-trusted CAs
    shell copy

    objection -g process_name explore && android sslpinning disable

    • Adds a hook on the verifyChain() method in com.android.org.conscrypt.TrustManagerImpl for the android sslpinning disable command

    1 detail in Everything

25. 1.2.3 Jan 10, 2018 · release notes

    objection 1.2.3 adds android hooking watch class command and JSON output for ios cookies get

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.2.3 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.2.3

    └──▷ HOW TO FIND IT
    Monitor all method calls for a specific class during dynamic analysis.
    📍objection android hooking watch class com.example.MyClass
    Retrieve device cookies in a parseable JSON format for scripting or logging.
    📍objection ios cookies get --json
    • android hooking watch class to watch all methods within a class.
    • --json flag on ios cookies get to output cookies as a JSON structure.

    2 details in Everything

26. 1.2.2 Nov 10, 2017 · release notes

    Adds the zipalign command to the Android APK patcher in Objection v1.2.2

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.2.2 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.2.2

27. 1.2.1 Oct 22, 2017 · release notes

    Adds --quiet flag for quieter sslpinning output and expands iOS hook targets

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.2.1 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.2.1

    └──▷ USE IT
    Run sslpinning disable with minimal output during automated testing.
    shell copy

    objection --gadget myapp ios sslpinning disable --quiet

    Bypass iOS 10 TLS helper issues by ignoring the specific hook.
    shell copy

    objection --gadget myapp ios sslpinning disable --ignore-ios10-tls-helper

    • Adds the --quiet flag to the Android and iOS sslpinning disable commands to reduce terminal output.
    • Adds the --ignore-ios10-tls-helper flag to the ios sslpinning disable command to prevent TLS connection breaks on iOS 10.
    • Improves iOS SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. pinning bypass by hooking additional functions including SecTrustEvaluate, -[AFSecurityPolicy setSSLPinningMode:], and -[AFSecurityPolicy setAllowInvalidCertificates:].

    3 details in Everything

28. 1.2.0 Oct 21, 2017 · release notes

    objection 1.2.0 adds APK debug patching, file-based REPL startup, and command history management

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.2.0 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.2.0

    • Adds --enable-debug flag to the Android patcher to set android:debuggable in the output AndroidManifest.xml
    • Adds --file-commands / -c flag to the explore command for reading objection commands from a file at startup
    • Adds new commands history, commands save, and commands clear subcommands to manage session command history
    • Adds --dump-args, --dump-backtrace, and --dump-return flags to iOS/Android class method watcher commands, replacing older dump_args commands
    • Enables tab completion for flags within the CLI

    +2 more show less

    • Allows multiple -s flags in startup commands to add several initial commands when starting the REPL
    • Adds command arguments to the output of the jobs list command

    7 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The older dump_args commands for iOS and Android class method watchers have been removed; use the new flags (--dump-args, --dump-backtrace, --dump-return) on the watcher commands instead.
29. 1.1.11 Oct 5, 2017 · release notes

    objection 1.1.11 adds hook debugging, APK patcher control flags, and Appcelerator Titanium SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. bypass

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.11 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.1.11

    └──▷ TRY IT
    Debug custom hook behavior by inspecting the compiled payload and its response data during runtime exploration.
    copy

    $ objection --gadget "MyApp" explore --hook-debug

    Pause the Android patching process before final assembly to manually edit resources if apktool encounters an error.
    copy

    $ objection package patchapk --path /app.apk --pause

    • Adds --hook-debug flag to the explore command to dump compiled hooks and their responses
    • Adds --skip-cleanup flag to package patchers to preserve temporary files for inspection
    • Adds --pause flag to the patchapk command to allow manual Android resource fixes when apktool fails
    • Adds Android SSL pinning bypass logic for applications built using Appcelerator Titanium

    4 details in Everything

30. 1.1.9 Sep 28, 2017 · release notes

    Adds background version checker that notifies of available updates on startup

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.9 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.1.9

31. 1.1.8 Sep 27, 2017 · release notes

    Adds --include-backtrace flag to android hooking watch class_method in Objection 1.1.8

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.8 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.1.8

    └──▷ USE IT
    Capture the full call stack for every invocation of a specific Android class method during runtime hooking.
    shell copy

    objection -g com.example.app explore android hooking watch class_method --include-backtrace

32. 1.1.5 Sep 21, 2017 · release notes

    objection v1.1.5 adds android ui FLAG_SECURE toggle and objection run REPL-less mode

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.5 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.1.5

    └──▷ TRY IT
    Run a one-off objection command in scripts or CI without interactive shell overhead.
    copy

    $ objection run -g my_process app_processes list

    • Adds the android ui FLAG_SECURE command to toggle the secure flag on Android activities.
    • Adds the objection run subcommand for executing single commands without entering the REPL.

    2 details in Everything

33. 1.1.0 Sep 11, 2017 · release notes

    Adds android keystore list, android keystore clear, android clipboard monitor commands and improved class searching for iOS/Android.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.1.0 https://github.com/sensepost/objection.git
    # already have the repo? check out this version:
    $ git checkout 1.1.0

    └──▷ USE IT
    List the available Android keystores on a connected device
    shell copy

    objection --gadget <pid> explore
    android keystore list

    Clear all Android keystores for the target process
    shell copy

    objection --gadget <pid> explore
    android keystore clear

    Monitor clipboard data on a connected Android device
    shell copy

    objection --gadget <pid> explore
    android clipboard monitor

    • Adds android keystore list subcommand to enumerate Android keystores
    • Adds android keystore clear subcommand to clear Android keystores
    • Adds android clipboard monitor subcommand to monitor Android clipboard
    • Adds class and method search for iOS and class search for Android

    4 details in Everything