Objection

Description

A runtime mobile exploration toolkit powered by Frida. Objection provides a simplified interface for performing common mobile application security assessments on both Android and iOS devices without requiring a jailbreak or root.

Usage 1: Mobile Application Security Assessment

Objection is used as a mobile exploration toolkit for penetration testing of Android and iOS applications. It is referenced alongside Frida in the SecJuice guide and the OWASP/HackTricks mobile security testing resources.

Resources:

SecJuice Intro to Frida & Objection (iOS specific): https://www.secjuice.com/objection-frida-guide/
HackTricks Checklist (Android): https://book.hacktricks.xyz/mobile-apps-pentesting/android-checklist
HackTricks Checklist (iOS): https://book.hacktricks.xyz/mobile-apps-pentesting/ios-pentesting-checklist
OWASP Mobile Security Testing Guide: https://mobile-security.gitbook.io/mobile-security-testing-guide/overview/0x03-overview

Notes

• Objection is powered by Frida and provides a higher-level, user-friendly interface for common mobile pentesting tasks.
• It supports both Android and iOS platforms.
• Common use cases include bypassing SSL pinning, exploring application storage, and dumping credentials.
• Refer to the OWASP Mobile Top 10 for common vulnerabilities: https://owasp.org/www-project-mobile-top-10/