Releases: sensepost/objection
Releases · sensepost/objection
Release list
v1.6.4
new
- Add the ability to enumerate an iOS apps' included frameworks observable by
NSBundle. This is available as the newios bundles list_frameworkscommand. - Add a new
--target-classflag to the Android patcher to inject aloadLibrarycall for a Frida gadget in any arbitrary class' constructor (for example, to run before an applications onCreate()). The default is still to use the apps main launchable activity. - Add a new SSL Pinning bypass hook for iOS Cordova applications making use of this plugin. Thanks @aph3rson.
fixes
- Improve application stability for the Android patcher when injecting a
loadLibrarycall into an existing class constructor by correctly incrementing the.localscount.
other
- Bump agent dependencies
Code Changes Since v1.6.3
v1.6.3
new
- Add the ability to enumerate the currently active Android activity. This can be done with the new
android hooking get current_activitycommand. - Add a new
Rclass helper to the agent for Android hooks.
fixes
- Fix networked Frida connections. The the
--hostand--networkflags will work again as intended. - Fix spawning on iOS (using a jailbroken environment) (thanks @aph3rson)
Code Changes Since v1.6.2
v1.6.2
v1.6.1
fixes
- Fix Frida remote connection capability. Specifying a host and port will be done in a future release.
- Small typing fixes in the agent
Code Changes Since v1.6.0
v1.6.0 - Crash reporting, plugins and more!
new
- Implement Frida crash reporting.
- Add warnings before clearing the iOS keychain or the Android Keystore.
- Report the Frida runtime in use as part of the
fridacommand. - Add inspection of live instances of Java objects. This feature is available as a new command:
android heap print_instances <class>. - Add an Android method searcher. This is available as a new command:
android hooking search methods <search string>. - Add plugin support (thanks @SpeedyFireCyclone). For more information, see the wiki article here. Sample plugins can be seen here (Sample plugin used in tests), here (Stetho sideloader) and here (Objections clipboard monitor as a plugin).
- Add the ability to delete files on an Android device. This is implemented as the
rmcommand.
fixes
- Fix class enumeration in the Android class watcher where methods with generics broke parsing.
- Fix a cache key invalidation issue when uploading files.
Code Changes Since v1.5.4
v1.5.4
fixes
- Enumerate writable pages when searching memory with the
memory searchcommand
new
- Improve the visual feedback of the
memory searchcommand. Small hexdump snippets will now be returned unless the--offsets-onlyflag is provided.
other
- Bump the Frida agents' dependencies.
Code Changes Since v1.5.3
v1.5.3
v.1.5.2 - Bug fixes
fixes
- Fix the iOS generic method return value override module. #193
- Fix agent loading on operating systems that don't use UTF-8 encoding by default. #191
Thanks goes to @aph3rson for the fixes in this release.
Code Changes Since v1.5.1
v1.5.1
v1.5.0 - TypeScript agent, API and more!
new
- Completely rewritten Frida agent using TypeScript. All of the old hooks have been ported into this agent, replacing the old method of constantly loading and unloading Frida scripts with a single instance exposing methods via the Frida RPC.
- An API! Read more about that here.
- Support spawning Android applications when running on a rooted Android device.
- Job output is no longer a single, random colour, but instead contains a job ID and more useful colouring of the overall output.
- Include new SSL pinning disabling hooks.
- Add command fuzzy completion.
- Upgrade dependencies, most notably, prompt-toolkit to version 2.
fixes
- A crazy amount of hook specific bug fixes (no really). This is primarily thanks to the TypeScript agent port work together with the help of the frida-gum TypeScript type definitions.
- Vastly improved filesystem interactions for both Android and iOS, primarily when uploading/downloading files.
- Better error reporting when the Frida server (both in a Gadget mode and server mode) goes away/crashes.
- Improved data decoding for the iOS keychain dumping module.
- Added a check when using
--skip-resourcesflag for the APK builder to not try and inject the Internet permission. - Fix the directory separator when using on Windows.
- Improve error handling when dumping memory regions.