Mobile
objection
Runtime mobile exploration toolkit built on Frida, for lab-device assessments.
What it is
objection wraps common Frida workflows: explore the filesystem sandbox, inspect keychain/SharedPreferences, and exercise SSL pinning hooks on a lab build. Use it to confirm what MobSF hypothesized, not to attack devices you do not own.
Reach for it when
Lab iOS/Android runtime after Frida is attached, especially for storage, pinning, and IPC checks on a test build.
Watch-outs
Pinning bypass is a test technique against the lab BFF, not a product recommendation you leave enabled. Do not disable biometrics on a device that leaves the lab. Same token/PAN handling rules as Frida.
Typical invocation
objection --gadget com.helio.mobile explore
Authorized assessments only. Stay inside the rules of engagement.
Pin to a kit
Open an engagement first.
Related
- Frida
Dynamic instrumentation toolkit for lab iOS/Android processes during authorized mobile tests.
- MobSF
Mobile Security Framework for static and basic dynamic analysis of iOS and Android builds.
- Burp Suite
Intercepting proxy and scanner for authorized web and API testing, mapping, and manual review.