objection #frida #objection #android #ios #patch #hook

objection Android.md

pip3 install objection

(Android)

patch apk

objection patchapk -s xxx.apk

explore app

objection -g xxx.xxx.xxx explore

android hooking list classes

监控方法调用

android hooking watch class_method (eg: com.example.test dologin) (optional: --dump-args) (optional: --dump-backtrace) (optional: --dump-return)

example:

android hooking watch class_method xxx.xxx.Log i --dump-args --dump-return

搜索类

example:

android hooking search classes login

objection iOS(without jailbreak).md

PRE

pip3 install objection

security find-identity(find your dev identities)

npm install -g applesign npm install -g ios-deploy

git clone https://github.com/Tyilo/insert_dylib && cd insert_dylib &&xcodebuild && cp build/Release/insert_dylib /usr/local/bin/insert_dylib

• create an empty iOS project，and run it on your iPhone，trust it，so you will have an embedded.mobileprovision on your Mac。

iOS

patch ipa

objection patchipa -s xxx.ipa -c [YOUR_DEV_IDENTITY] -p embedded.mobileprovision

then you will get an "xxxx-frida-codesigned.ipa"

deploy app

unpack "xxxx-frida-codesigned.ipa"

ios-deploy -W -b ./Payload/xxx.app

explore app

objection -g xxx.xxx.xxx explore

ios hooking list classes

监控方法调用

android hooking watch class_method (eg: com.example.test dologin) (optional: --dump-args) (optional: --dump-backtrace) (optional: --dump-return)

example:

android hooking watch class_method xxx.xxx.Log i --dump-args --dump-return

搜索类

example:

android hooking search classes login