Skip to content

Releases: sensepost/objection

v1.1.12

06 Oct 08:39
301542b
Compare
Choose a tag to compare

v1.1.12

fixes

  • Fix a bug introduced in 1.1.11 with the --skip-cleanup flag and the iOS IPA patcher.
  • Fix the exception message thrown when the Android frida-gadget download URL could not be determined.

other

  • Move the code used to patch mobile applications from a large single file into its own module at objection.utils.patchers.

v1.1.11

05 Oct 13:25
96acab4
Compare
Choose a tag to compare

v1.1.11

new

  • Added the --hook-debug flag on the explore command which will now dump compiled hooks and their responses.
  • Added a --skip-cleanup flag to the package patchers which will cause the patcher to not delete temporary files created.
  • Added the --pause flag to the patchapk command to allow for manual Android resource fixes when apktool fails to repackage patches apks.
  • Add Android SSL pinning bypass logic for applications built using Appcelerator Titanium

fixes

  • Fix a syntax typo in the iOS keychain dumpers ACL parsing logic.
  • Fix the Android APK patcher to rather append than override an existing class initialiser when adding a loadLibrary call for a frida-gadget.

other

  • Remove the duplicate calls to JSON.stringify() in hook send() calls.
  • Various other typo fixes and improvements.

v1.1.10

30 Sep 01:48
9cdb9e1
Compare
Choose a tag to compare

v1.1.10

improvements

  • Add the .png extension if its omitted for android ui screenshot.
  • Handle errors when unloading jobs from devices that may have already disconnected.

v1.1.9

28 Sep 22:12
197f159
Compare
Choose a tag to compare

v1.1.9

new

  • Added a background version checker. A background process is launched on startup to compare the local version number with the github reported version number to notify you of any updates if available.

fixes

  • Stop the iOS IPA patcher if a valid .mobileprovision file could not be found.
  • Fix the iOS ios sslpinning disable command to support iOS versions older than iOS 10.

v1.1.8

27 Sep 21:43
a477c29
Compare
Choose a tag to compare

v1.1.8

new

  • Add --include-backtrace flag for android hooking watch class_method.

fixes

  • Fix quotes breaking the Frida script used for the android hooking set return_value command when an overloaded method is specified.

v1.1.7

26 Sep 12:40
05e57d7
Compare
Choose a tag to compare

v1.1.7

new

  • Add ability to specify a PID with the --gadget argument. (Only applies when running with a jailbroken/rooted device).

v1.1.6

22 Sep 06:29
005ab64
Compare
Choose a tag to compare

v1.1.6

new

  • Added android intent launch_service command

v1.1.5

21 Sep 14:09
ea6d6d4
Compare
Choose a tag to compare

v1.1.5

new

  • new android ui FLAG_SECURE command to toggle the flag on activities.
  • new objection run subcommand to single run objection commands without the REPL.

fixes

  • iOS file listing optimizations.

v1.1.4

15 Sep 13:26
b88ff0f
Compare
Choose a tag to compare

v1.1.4

Add HTTPOnly flag in ios cookies get command output.

v1.1.3

14 Sep 08:17
2a9ea0a
Compare
Choose a tag to compare

v1.1.3

Fix an IPA naming bug when patching iOS applications.