Skip to content

Releases: sensepost/objection

v1.2.6

10 Mar 09:59
43db19a
Compare
Choose a tag to compare

v1.2.6

fixes

  • Fix method matching in the Android class watcher when the method signature contains a throw statement.

other

  • Add warnings about running objection on older mobile operating systems. These include Android 4 and lower and iOS 8 and lower.

v1.2.5

06 Mar 13:59
36455cf
Compare
Choose a tag to compare

v1.2.5

fixes

  • Fix the Android root simulation Frida script to return values for the methods called.
  • Improve the Android APK patcher by adding the -r flag to apktool by default to skip resource decoding.

v1.2.4

13 Feb 07:36
b957f57
Compare
Choose a tag to compare

v1.2.4

new

  • Add new --gadget-version flag to the mobile patchers to specify the version of the Frida gadget to use.

v1.2.3

10 Jan 10:40
3dd2aa4
Compare
Choose a tag to compare

v1.2.3

new

  • Add the android hooking watch class command to watch all methods within a class.
  • Add the --json flag to the ios cookies get command to output cookies as a JSON structure.

fixes

  • Fix a bug in the ios ui screenshot command that caused screenshots to fail to write to disk.
  • Conditionally check for the code cache dir in the env command to improve Android 4x compatibility.

v1.2.2

10 Nov 18:34
9065c3b
Compare
Choose a tag to compare

v1.2.2

new

  • Add the zipalign command to the Android APK patcher.

fixes

  • Reduce warnings generated by jarsigner by adding the -tsa flag.
  • Fix the iOS SSL pinning bypass command by removing the SecTrustEvaluate hook as this was breaking other SSL related calls.

v1.2.1

22 Oct 18:35
bc8352d
Compare
Choose a tag to compare

v1.2.1

new

  • Add the --quiet flag to the Android and iOS sslpinning disable commands to reduce terminal output during usage.
  • Improve the iOS SSL pinning by hooking more functions such as SecTrustEvaluate, -[AFSecurityPolicy setSSLPinningMode:] and -[AFSecurityPolicy setAllowInvalidCertificates:].

fixes

  • Add the --ignore-ios10-tls-helper flag to the ios sslpinning disable command as there were some cases where tls_helper_create_peer_trust would break TLS connections in general.

v1.2.0

21 Oct 15:53
f6eb83b
Compare
Choose a tag to compare

v1.2.0

new

  • Add the --enable-debug flag for the Android patcher that will set the android:debuggable property in the resultant AndroidManifest.xml file to true after patching an APK.
  • Add the --file-commands / -c flag to the explore command to read objection commands from a file and run them on start up.
  • Add the commands history, commands save and commands clear commands to work with the current sessions command history. Saved commands can be loaded using the previously mentioned -c flag.
  • Refactor the iOS and Android class method watcher commands to now have flags to toggle the dumping of arguments (--dump-args), stack traces (--dump-backtrace) and return values (--dump-return) to the screen. The older dump_args commands for both platforms have been removed in favour of the new flags.
  • Add the ability to tab complete flags.
  • Allow for multiple startup commands to be added when starting the REPL by using more than one -s flag.
  • Added command arguments to the output of the jobs list command to make it easier to distinguish commands of the same type.

fixes

  • Improve the error handling when starting the objection REPL.
  • Improve command argument validation, especially in commands where flags are used.

v1.1.15

15 Oct 14:16
2707ff0
Compare
Choose a tag to compare

This release only contains minor bug fixes and typo corrections. Test coverage is also up to 77% now! 🤖

v1.1.14

12 Oct 19:41
f81646c
Compare
Choose a tag to compare

v1.1.14

fixes

  • Fix the android method watching and argument dumping hooks so that they return the values intended by the method call.
  • Correctly interpret the --host and --port flags for network based Frida connections.
  • Fix the Writable / Readable output in filesystem listings that were incorrectly displayed.

v1.1.13

10 Oct 08:52
0042ac5
Compare
Choose a tag to compare

v1.1.13

new

  • Tests! Check out travis for the build status.

fixes

  • Catch Frida timeouts when issuing the reconnect command within the REPL.
  • Fix the path to the keystore used by jarsigner in the APK patcher.