MCPcopy Index your code
hub / github.com/sensepost/objection

github.com/sensepost/objection @1.12.5 sqlite

repository ↗ · DeepWiki ↗ · release 1.12.5 ↗
1,104 symbols 3,093 edges 179 files 356 documented · 32% 4 cross-repo links
README

📱objection - Runtime Mobile Exploration

objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak.

Twitter PyPi Black Hat Arsenal Black Hat Arsenal

objection

  • Supports both iOS and Android.
  • Inspect and interact with container file systems.
  • Bypass SSL pinning.
  • Dump keychains.
  • Perform memory related tasks, such as dumping & patching.
  • Explore and manipulate objects on the heap.
  • And much, much more...

Screenshots are available in the wiki.

installation

Installation is simply a matter of pip3 install objection. This will give you the objection command. You can update an existing objection installation with pip3 install --upgrade objection.

For more detailed update and installation instructions, please refer to the wiki page here.

license

objection is licensed under a GNU General Public v3 License. Permissions beyond the scope of this license may be available at http://sensepost.com/contact/.

Extension points exported contracts — how you extend this code

IFridaInfo (Interface)
(no doc)
agent/src/lib/interfaces.ts
IIosPackage (Interface)
(no doc)
agent/src/lib/interfaces.ts
IAndroidPackage (Interface)
(no doc)
agent/src/lib/interfaces.ts
IIosBundlePaths (Interface)
(no doc)
agent/src/lib/interfaces.ts
IAndroidFilesystem (Interface)
(no doc)
agent/src/android/lib/interfaces.ts

Core symbols most depended-on inside this repo

capture
called by 115
tests/helpers.py
get_api
called by 102
objection/state/connection.py
wrapJavaPerform
called by 62
agent/src/android/lib/libjava.ts
addImplementation
called by 36
agent/src/lib/jobs.ts
qsend
called by 28
agent/src/lib/helpers.ts
attach
called by 27
objection/utils/agent.py
addInvocation
called by 25
agent/src/lib/jobs.ts
bytesToUTF8
called by 20
agent/src/ios/lib/helpers.ts

Shape

Function 428
Method 426
Route 145
Class 77
Interface 23
Enum 5

Languages

Python75%
TypeScript25%

Modules by API surface

tests/commands/test_filemanager.py77 symbols
objection/utils/patchers/android.py36 symbols
tests/commands/test_memory.py34 symbols
tests/commands/android/test_hooking.py30 symbols
objection/commands/filemanager.py30 symbols
tests/commands/ios/test_keychain.py25 symbols
tests/commands/test_ui.py22 symbols
agent/src/android/hooking.ts22 symbols
tests/utils/patchers/test_android.py21 symbols
objection/commands/android/hooking.py21 symbols
objection/utils/patchers/ios.py20 symbols
agent/src/lib/color.ts19 symbols

Dependencies from manifests, versioned

@types/frida-gum19 · 1×
@types/node24 · 1×
frida-compile19 · 1×
frida-fs7.0.0 · 1×
frida-java-bridge7 · 1×
frida-objc-bridge8 · 1×
frida-screenshot6 · 1×
macho-ts0.1.0 · 1×
tslint6 · 1×
click8.2.0 · 1×
delegator-py0.1.1 · 1×
flask3.0.0 · 1×

For agents

$ claude mcp add objection \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact