objection
Runtime mobile exploration toolkit powered by Frida that provides a CLI and REPL for SSL pinning bypass, keychain dumps, and app inspection.
Technical Architecture & Overview
objection is a runtime mobile exploration toolkit that wraps Frida in a command-line interface and REPL. It is maintained by Leon Jacobs and SensePost and is designed to assess Android and iOS applications without a jailbreak or root for many operations.
Targeted Technical Use Cases
Inspect filesystems, bypass SSL pinning, dump keychains, and patch mobile applications during security assessments.
Evaluation & Trade-offs
Core Strengths
- +Does not require a jailbroken or rooted device for many tasks.
- +Includes built-in commands for common mobile security assessments.
- +Provides an accessible CLI and REPL over raw Frida scripting.
Trade-Offs & Limitations
- -Some features require the target application to be repackaged with a Frida gadget.
- -Capabilities are bounded by Frida and target platform support.
- -Feature parity and documentation vary between iOS and Android.
Defensive Security Application
Test and harden SSL pinning, root or jailbreak detection, keychain storage, and runtime data handling before production release.
Frequently Asked Questions
What is objection?→
objection is a runtime mobile exploration toolkit that wraps Frida in a command-line interface and REPL. It is maintained by Leon Jacobs and SensePost and is designed to assess Android and iOS applications without a jailbreak or root for many operations.
What is objection used for?→
Inspect filesystems, bypass SSL pinning, dump keychains, and patch mobile applications during security assessments.
What are the strengths of objection?→
- +Does not require a jailbroken or rooted device for many tasks.
- +Includes built-in commands for common mobile security assessments.
- +Provides an accessible CLI and REPL over raw Frida scripting.
What are the limitations of objection?→
- +Some features require the target application to be repackaged with a Frida gadget.
- +Capabilities are bounded by Frida and target platform support.
- +Feature parity and documentation vary between iOS and Android.
How is objection used defensively?→
Test and harden SSL pinning, root or jailbreak detection, keychain storage, and runtime data handling before production release.