objection is a runtime mobile exploration toolkit, powered by Frida, built to help you assess the security posture of your mobile applications, without needing a jailbreak. Supports both iOS and Android. Inspect and interact with container file systems. Bypass SSL pinning. Dump keychains. Perform memory related tasks, such as dumping & patching. Explore and manipulate objects on the heap. And much, much more... Screenshots are available in the wiki. Installation is simply a matter of pip3 install objection. This will give you the objection command. You can update an existing objection installation with pip3 install --upgrade objection. For more detailed update and installation instructions, please refer to the wiki page here. objection is licensed under a GNU General Public v3 License. Permissions beyond the scope of this license may be available at http://sensepost.com/contact.
FEATURES
ALTERNATIVES
A free and open platform for detecting and preventing email attacks like BEC, malware, and credential phishing, utilizing Message Query Language (MQL) for behavior description.
An open-source project for dynamic analysis of Android applications using the Android Substrate framework.
An open-source phishing toolkit for businesses and penetration testers.
House: A runtime mobile application analysis toolkit with a Web GUI, powered by Frida, written in Python.
A tool for analyzing Android applications in local storage with various functionalities.
PLCinject is a tool for injecting and patching blocks on PLCs with a call instruction.
Extract local data storage of an Android application in one click.
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.