Skip to main content

​
Overview

Objection wraps Frida into an interactive REPL with pre-built commands for the most common mobile pentesting tasks. No JavaScript needed for the bulk of day-to-day analysis, SSL unpinning, root bypass, file system exploration, and class enumeration are single commands. Built on top of Frida, Frida server must be running on the device first. Works on: Android · iOS

​
Install

Verify:
Requires Frida server on device. See Frida setup.

​
Connect to App

Spawn app (start fresh):
Attach to running process:
Attach by PID:

​
SSL Pinning Bypass

Single command, covers OkHttp, TrustManager, Cordova, Xamarin, and more:
iOS:
Run on spawn to catch pinning during app startup:

​
Root / Jailbreak Detection Bypass

Android:
iOS:

​
Environment Info

Shows: data directory, external storage path, bundle/package details, architecture.

​
File System

​
Memory

List loaded modules:
List exports from a module:
Search memory for string:
Dump memory region:

​
Java / Class Exploration (Android)

List all loaded classes:
Search classes by keyword:
List methods of a class:
Hook all methods of a class (log calls + args):
Hook specific method:

​
Intent / Activity

List activities:
Start an exported activity:

​
Shared Preferences

objection has no Android shared-preferences command. Read the XML files directly from the app’s data dir:

​
Keystore

List Android KeyStore entries:

​
iOS Extras

List all classes:
Hook Objective-C method:
Dump keychain:
Bypass biometric / TouchID:
List URL schemes (read from Info.plist — objection has no urlscheme command):

​
Run Commands on Startup

Bypass SSL pinning before the app code runs:

​
Patch APK (no Frida server needed)

Objection can repackage an APK with Frida gadget embedded, useful on non-rooted devices:
Patched APK must be signed. objection patchapk handles signing automatically if apksigner and keytool are in PATH.