From 7033407b7c2ef5c97719f0c52b641f459b361341 Mon Sep 17 00:00:00 2001 From: IPMegladon Date: Fri, 30 Jan 2026 19:14:54 +0200 Subject: [PATCH 1/2] (fix) Claude updated the helpfiles. --- .../console/helpfiles/android.deoptimize.txt | 10 ++++++++++ .../console/helpfiles/android.heap.evaluate.txt | 10 ++++++++++ .../console/helpfiles/android.heap.execute.txt | 13 +++++++++++++ .../helpfiles/android.heap.print.fields.txt | 9 +++++++++ .../helpfiles/android.heap.print.methods.txt | 13 +++++++++++++ .../console/helpfiles/android.heap.print.txt | 9 +++++++++ .../console/helpfiles/android.heap.search.txt | 8 ++++++++ .../android.hooking.generate.class.txt | 10 ++++++++++ .../android.hooking.generate.simple.txt | 10 ++++++++++ .../helpfiles/android.hooking.generate.txt | 9 +++++++++ .../android.hooking.get.current_activity.txt | 9 +++++++++ .../console/helpfiles/android.hooking.get.txt | 8 ++++++++ .../android.hooking.list.class_loaders.txt | 9 +++++++++ .../helpfiles/android.hooking.notify.txt | 17 +++++++++++++++++ .../helpfiles/android.hooking.search.txt | 4 ++++ .../helpfiles/android.hooking.watch.class.txt | 10 +++++++++- objection/console/helpfiles/android.ui.txt | 9 +++++++++ objection/console/helpfiles/commands.clear.txt | 9 +++++++++ .../console/helpfiles/commands.history.txt | 9 +++++++++ objection/console/helpfiles/commands.save.txt | 9 +++++++++ objection/console/helpfiles/commands.txt | 10 ++++++++++ objection/console/helpfiles/evaluate.txt | 10 ++++++++++ objection/console/helpfiles/file.download.txt | 11 ----------- objection/console/helpfiles/file.txt | 1 - objection/console/helpfiles/file.upload.txt | 14 -------------- objection/console/helpfiles/filesystem.cat.txt | 10 ++++++++++ .../console/helpfiles/filesystem.download.txt | 14 ++++++++++++++ objection/console/helpfiles/filesystem.txt | 10 ++++++++++ .../console/helpfiles/filesystem.upload.txt | 10 ++++++++++ .../console/helpfiles/ios.heap.evaluate.txt | 13 +++++++++++++ .../console/helpfiles/ios.heap.execute.txt | 13 +++++++++++++ .../console/helpfiles/ios.heap.print.ivars.txt | 13 +++++++++++++ .../helpfiles/ios.heap.print.methods.txt | 13 +++++++++++++ objection/console/helpfiles/ios.heap.print.txt | 9 +++++++++ .../helpfiles/ios.heap.search.instances.txt | 10 ++++++++++ objection/console/helpfiles/ios.heap.search.txt | 8 ++++++++ .../helpfiles/ios.hooking.generate.class.txt | 10 ++++++++++ .../helpfiles/ios.hooking.generate.simple.txt | 10 ++++++++++ .../console/helpfiles/ios.hooking.generate.txt | 9 +++++++++ .../console/helpfiles/ios.hooking.search.txt | 4 ++++ objection/console/helpfiles/ios.info.binary.txt | 9 +++++++++ objection/console/helpfiles/ios.info.txt | 8 ++++++++ .../console/helpfiles/ios.keychain.dump.txt | 12 ++++++------ .../console/helpfiles/ios.keychain.dump_raw.txt | 10 ++++++++++ .../console/helpfiles/ios.keychain.remove.txt | 13 +++++++++++++ .../console/helpfiles/ios.keychain.update.txt | 13 +++++++++++++ .../ios.nsurlcredentialstorage.dump.txt | 9 +++++++++ .../helpfiles/ios.nsurlcredentialstorage.txt | 8 ++++++++ .../helpfiles/ios.ui.biometrics_bypass.txt | 9 +++++++++ objection/console/helpfiles/memory.replace.txt | 14 ++++++++++++++ objection/console/helpfiles/ping.txt | 9 +++++++++ objection/console/helpfiles/resume.txt | 9 +++++++++ objection/console/helpfiles/sqlite.connect.txt | 6 +++++- 53 files changed, 491 insertions(+), 34 deletions(-) create mode 100644 objection/console/helpfiles/android.deoptimize.txt create mode 100644 objection/console/helpfiles/android.heap.evaluate.txt create mode 100644 objection/console/helpfiles/android.heap.execute.txt create mode 100644 objection/console/helpfiles/android.heap.print.fields.txt create mode 100644 objection/console/helpfiles/android.heap.print.methods.txt create mode 100644 objection/console/helpfiles/android.heap.print.txt create mode 100644 objection/console/helpfiles/android.heap.search.txt create mode 100644 objection/console/helpfiles/android.hooking.generate.class.txt create mode 100644 objection/console/helpfiles/android.hooking.generate.simple.txt create mode 100644 objection/console/helpfiles/android.hooking.generate.txt create mode 100644 objection/console/helpfiles/android.hooking.get.current_activity.txt create mode 100644 objection/console/helpfiles/android.hooking.get.txt create mode 100644 objection/console/helpfiles/android.hooking.list.class_loaders.txt create mode 100644 objection/console/helpfiles/android.hooking.notify.txt create mode 100644 objection/console/helpfiles/android.ui.txt create mode 100644 objection/console/helpfiles/commands.clear.txt create mode 100644 objection/console/helpfiles/commands.history.txt create mode 100644 objection/console/helpfiles/commands.save.txt create mode 100644 objection/console/helpfiles/commands.txt create mode 100644 objection/console/helpfiles/evaluate.txt delete mode 100644 objection/console/helpfiles/file.download.txt delete mode 100644 objection/console/helpfiles/file.txt delete mode 100644 objection/console/helpfiles/file.upload.txt create mode 100644 objection/console/helpfiles/filesystem.cat.txt create mode 100644 objection/console/helpfiles/filesystem.download.txt create mode 100644 objection/console/helpfiles/filesystem.txt create mode 100644 objection/console/helpfiles/filesystem.upload.txt create mode 100644 objection/console/helpfiles/ios.heap.evaluate.txt create mode 100644 objection/console/helpfiles/ios.heap.execute.txt create mode 100644 objection/console/helpfiles/ios.heap.print.ivars.txt create mode 100644 objection/console/helpfiles/ios.heap.print.methods.txt create mode 100644 objection/console/helpfiles/ios.heap.print.txt create mode 100644 objection/console/helpfiles/ios.heap.search.instances.txt create mode 100644 objection/console/helpfiles/ios.heap.search.txt create mode 100644 objection/console/helpfiles/ios.hooking.generate.class.txt create mode 100644 objection/console/helpfiles/ios.hooking.generate.simple.txt create mode 100644 objection/console/helpfiles/ios.hooking.generate.txt create mode 100644 objection/console/helpfiles/ios.info.binary.txt create mode 100644 objection/console/helpfiles/ios.info.txt create mode 100644 objection/console/helpfiles/ios.keychain.dump_raw.txt create mode 100644 objection/console/helpfiles/ios.keychain.remove.txt create mode 100644 objection/console/helpfiles/ios.keychain.update.txt create mode 100644 objection/console/helpfiles/ios.nsurlcredentialstorage.dump.txt create mode 100644 objection/console/helpfiles/ios.nsurlcredentialstorage.txt create mode 100644 objection/console/helpfiles/ios.ui.biometrics_bypass.txt create mode 100644 objection/console/helpfiles/memory.replace.txt create mode 100644 objection/console/helpfiles/ping.txt create mode 100644 objection/console/helpfiles/resume.txt diff --git a/objection/console/helpfiles/android.deoptimize.txt b/objection/console/helpfiles/android.deoptimize.txt new file mode 100644 index 00000000..75f07c67 --- /dev/null +++ b/objection/console/helpfiles/android.deoptimize.txt @@ -0,0 +1,10 @@ +Command: android deoptimize + +Usage: android deoptimize + +Forces the Android Runtime VM to execute code in the interpreter instead of +using any compiled/optimized code. This is useful for dynamic analysis and can +help with hooking and tracing operations. + +Examples: + android deoptimize diff --git a/objection/console/helpfiles/android.heap.evaluate.txt b/objection/console/helpfiles/android.heap.evaluate.txt new file mode 100644 index 00000000..2e2b618c --- /dev/null +++ b/objection/console/helpfiles/android.heap.evaluate.txt @@ -0,0 +1,10 @@ +Command: android heap evaluate + +Usage: android heap evaluate + +Evaluates JavaScript on a Java object handle. This allows complex operations +and transformations using Frida's JavaScript runtime. + +Examples: + android heap evaluate 0x12345678 "this.myMethod()" + android heap evaluate 0x12345678 "this.toString()" diff --git a/objection/console/helpfiles/android.heap.execute.txt b/objection/console/helpfiles/android.heap.execute.txt new file mode 100644 index 00000000..88624e8d --- /dev/null +++ b/objection/console/helpfiles/android.heap.execute.txt @@ -0,0 +1,13 @@ +Command: android heap execute + +Usage: android heap execute [--return-string] + +Executes a method on a Java object handle on the heap. This allows dynamic +invocation of object methods for testing and exploration. + +Flags: + --return-string Convert the return value to a string + +Examples: + android heap execute 0x12345678 toString + android heap execute 0x12345678 toString --return-string diff --git a/objection/console/helpfiles/android.heap.print.fields.txt b/objection/console/helpfiles/android.heap.print.fields.txt new file mode 100644 index 00000000..1a75ca4c --- /dev/null +++ b/objection/console/helpfiles/android.heap.print.fields.txt @@ -0,0 +1,9 @@ +Command: android heap print fields + +Usage: android heap print fields + +Prints instance fields for a Java object handle. This displays all accessible +field values for the specified object, useful for inspecting object state. + +Examples: + android heap print fields 0x12345678 diff --git a/objection/console/helpfiles/android.heap.print.methods.txt b/objection/console/helpfiles/android.heap.print.methods.txt new file mode 100644 index 00000000..cc085cab --- /dev/null +++ b/objection/console/helpfiles/android.heap.print.methods.txt @@ -0,0 +1,13 @@ +Command: android heap print methods + +Usage: android heap print methods [--without-arguments] + +Prints instance methods available for a Java object handle. This displays all +methods that can be called on the object, with optional method signatures. + +Flags: + --without-arguments Do not display method argument information + +Examples: + android heap print methods 0x12345678 + android heap print methods 0x12345678 --without-arguments diff --git a/objection/console/helpfiles/android.heap.print.txt b/objection/console/helpfiles/android.heap.print.txt new file mode 100644 index 00000000..9b70609f --- /dev/null +++ b/objection/console/helpfiles/android.heap.print.txt @@ -0,0 +1,9 @@ +Command: android heap print + +Usage: android heap print + +Contains subcommands to print information about objects on the Android heap. + +Examples: + android heap print fields + android heap print methods diff --git a/objection/console/helpfiles/android.heap.search.txt b/objection/console/helpfiles/android.heap.search.txt new file mode 100644 index 00000000..a5a32a45 --- /dev/null +++ b/objection/console/helpfiles/android.heap.search.txt @@ -0,0 +1,8 @@ +Command: android heap search + +Usage: android heap search + +Contains subcommands to search for information about the Android heap. + +Examples: + android heap search instances diff --git a/objection/console/helpfiles/android.hooking.generate.class.txt b/objection/console/helpfiles/android.hooking.generate.class.txt new file mode 100644 index 00000000..fb18b7e0 --- /dev/null +++ b/objection/console/helpfiles/android.hooking.generate.class.txt @@ -0,0 +1,10 @@ +Command: android hooking generate class + +Usage: android hooking generate class + +Generates a generic Frida hook manager for the specified Android Java class. +This creates a template hook that can be customized for various hooking operations. + +Examples: + android hooking generate class com.example.MyClass + android hooking generate class android.app.Activity diff --git a/objection/console/helpfiles/android.hooking.generate.simple.txt b/objection/console/helpfiles/android.hooking.generate.simple.txt new file mode 100644 index 00000000..6b0ab1cb --- /dev/null +++ b/objection/console/helpfiles/android.hooking.generate.simple.txt @@ -0,0 +1,10 @@ +Command: android hooking generate simple + +Usage: android hooking generate simple + +Generates simple Frida hooks for each method in the specified Android Java class. +This creates basic hooks that log method invocations without complex processing. + +Examples: + android hooking generate simple com.example.MyClass + android hooking generate simple android.app.Activity diff --git a/objection/console/helpfiles/android.hooking.generate.txt b/objection/console/helpfiles/android.hooking.generate.txt new file mode 100644 index 00000000..450095ba --- /dev/null +++ b/objection/console/helpfiles/android.hooking.generate.txt @@ -0,0 +1,9 @@ +Command: android hooking generate + +Usage: android hooking generate + +Contains subcommands to generate Frida hooks for Android classes. + +Examples: + android hooking generate class + android hooking generate simple diff --git a/objection/console/helpfiles/android.hooking.get.current_activity.txt b/objection/console/helpfiles/android.hooking.get.current_activity.txt new file mode 100644 index 00000000..6b9a2852 --- /dev/null +++ b/objection/console/helpfiles/android.hooking.get.current_activity.txt @@ -0,0 +1,9 @@ +Command: android hooking get current_activity + +Usage: android hooking get current_activity + +Gets the currently foregrounded Android Activity. This is useful for identifying +which Activity is currently displayed to the user. + +Examples: + android hooking get current_activity diff --git a/objection/console/helpfiles/android.hooking.get.txt b/objection/console/helpfiles/android.hooking.get.txt new file mode 100644 index 00000000..56f626a9 --- /dev/null +++ b/objection/console/helpfiles/android.hooking.get.txt @@ -0,0 +1,8 @@ +Command: android hooking get + +Usage: android hooking get + +Contains subcommands to get various values from the Android application. + +Examples: + android hooking get current_activity diff --git a/objection/console/helpfiles/android.hooking.list.class_loaders.txt b/objection/console/helpfiles/android.hooking.list.class_loaders.txt new file mode 100644 index 00000000..084d39f2 --- /dev/null +++ b/objection/console/helpfiles/android.hooking.list.class_loaders.txt @@ -0,0 +1,9 @@ +Command: android hooking list class_loaders + +Usage: android hooking list class_loaders + +Lists the registered class loaders in the Android application. +This is useful for understanding the class loading hierarchy. + +Examples: + android hooking list class_loaders diff --git a/objection/console/helpfiles/android.hooking.notify.txt b/objection/console/helpfiles/android.hooking.notify.txt new file mode 100644 index 00000000..d1efb909 --- /dev/null +++ b/objection/console/helpfiles/android.hooking.notify.txt @@ -0,0 +1,17 @@ +Command: android hooking notify + +Usage: android hooking notify [--dump-args] [--dump-return] [--dump-backtrace] [--watch] + +Notifies when a class becomes available in the application. This is useful +for hooking classes that may be loaded dynamically at runtime. Additional +flags can be used to dump arguments, return values, and backtraces. + +Flags: + --dump-args Dump method arguments + --dump-return Dump method return values + --dump-backtrace Dump call stack backtrace + --watch Continue watching for invocations after class is found + +Examples: + android hooking notify com.example.MyClass + android hooking notify com.example.MyClass --dump-args --watch diff --git a/objection/console/helpfiles/android.hooking.search.txt b/objection/console/helpfiles/android.hooking.search.txt index f79cd381..9aff3e37 100644 --- a/objection/console/helpfiles/android.hooking.search.txt +++ b/objection/console/helpfiles/android.hooking.search.txt @@ -1 +1,5 @@ Contains subcommands helpful when searching for classes and methods. + +Flags: + --json Output results as JSON + --only-classes Only show classes in search results, not methods diff --git a/objection/console/helpfiles/android.hooking.watch.class.txt b/objection/console/helpfiles/android.hooking.watch.class.txt index 23505bfc..86c2da26 100644 --- a/objection/console/helpfiles/android.hooking.watch.class.txt +++ b/objection/console/helpfiles/android.hooking.watch.class.txt @@ -1,7 +1,15 @@ Command: android hooking watch class -Usage: android hooking watch class +Usage: android hooking watch class [!method] [--dump-args] [--dump-backtrace] [--dump-return] + Hooks a specified class' methods and reports on invocations. +Flags: + --dump-args Dump method arguments when invoked + --dump-backtrace Dump the call stack backtrace + --dump-return Dump method return values + Examples: android hooking watch class com.example.test + android hooking watch class com.example.test --dump-args --dump-return + android hooking watch class com.example.test!onCreate diff --git a/objection/console/helpfiles/android.ui.txt b/objection/console/helpfiles/android.ui.txt new file mode 100644 index 00000000..3abcb182 --- /dev/null +++ b/objection/console/helpfiles/android.ui.txt @@ -0,0 +1,9 @@ +Command: android ui + +Usage: android ui + +Contains subcommands for Android user interface operations. + +Examples: + android ui screenshot + android ui FLAG_SECURE diff --git a/objection/console/helpfiles/commands.clear.txt b/objection/console/helpfiles/commands.clear.txt new file mode 100644 index 00000000..f89dad1b --- /dev/null +++ b/objection/console/helpfiles/commands.clear.txt @@ -0,0 +1,9 @@ +Command: commands clear + +Usage: commands clear + +Clears the current session's command history. After this command, no previous +commands will be available in the history. + +Examples: + commands clear diff --git a/objection/console/helpfiles/commands.history.txt b/objection/console/helpfiles/commands.history.txt new file mode 100644 index 00000000..7b350506 --- /dev/null +++ b/objection/console/helpfiles/commands.history.txt @@ -0,0 +1,9 @@ +Command: commands history + +Usage: commands history + +Lists all unique commands that have been run in the current session. +Duplicate commands are only shown once. + +Examples: + commands history diff --git a/objection/console/helpfiles/commands.save.txt b/objection/console/helpfiles/commands.save.txt new file mode 100644 index 00000000..514e0526 --- /dev/null +++ b/objection/console/helpfiles/commands.save.txt @@ -0,0 +1,9 @@ +Command: commands save + +Usage: commands save + +Saves all unique commands that have been run in the current session to a file. +The file path will be displayed after saving. + +Examples: + commands save diff --git a/objection/console/helpfiles/commands.txt b/objection/console/helpfiles/commands.txt new file mode 100644 index 00000000..cd9a7aea --- /dev/null +++ b/objection/console/helpfiles/commands.txt @@ -0,0 +1,10 @@ +Command: commands + +Usage: commands + +Contains subcommands for working with commands executed in the current session. + +Examples: + commands history + commands save + commands clear diff --git a/objection/console/helpfiles/evaluate.txt b/objection/console/helpfiles/evaluate.txt new file mode 100644 index 00000000..05bc9ab3 --- /dev/null +++ b/objection/console/helpfiles/evaluate.txt @@ -0,0 +1,10 @@ +Command: evaluate + +Usage: evaluate + +Evaluates JavaScript within the agent context. This allows direct execution of +Frida scripts for advanced manipulation and testing. + +Examples: + evaluate "send({msg: 'hello'})" + evaluate "console.log(Java.enumerateLoadedClasses())" diff --git a/objection/console/helpfiles/file.download.txt b/objection/console/helpfiles/file.download.txt deleted file mode 100644 index 994ddb7a..00000000 --- a/objection/console/helpfiles/file.download.txt +++ /dev/null @@ -1,11 +0,0 @@ -Command: file download - -Usage: file download (optional: ) - -Download a file from a location on the mobile device, to a local destination. -If no destination is provided, the downloaded file will be saved in the -current directory with the same name - -Examples: - file download Document/Preferences/test.sqlite foo.sqlite - file download Document/Preferences/preferences.plist diff --git a/objection/console/helpfiles/file.txt b/objection/console/helpfiles/file.txt deleted file mode 100644 index 88b0c9ec..00000000 --- a/objection/console/helpfiles/file.txt +++ /dev/null @@ -1 +0,0 @@ -Contains subcommands to work with files on the remote filesystem diff --git a/objection/console/helpfiles/file.upload.txt b/objection/console/helpfiles/file.upload.txt deleted file mode 100644 index 27b9ef07..00000000 --- a/objection/console/helpfiles/file.upload.txt +++ /dev/null @@ -1,14 +0,0 @@ -Command: file upload - -Usage: file upload (optional: ) - -Upload a file from the local filesystem to the remote filesystem. -If a full path is not specified for the remote destination, the current -working directory is assumed as the relative directory for the upload -destination. If the file already exists on the remote filesystem, it -will be overridden. If no remove filename is specified, the same filename -of the source file will be used. - -Examples: - file upload test.sqlite Document/Preferences/test.sqlite - file upload foo.txt diff --git a/objection/console/helpfiles/filesystem.cat.txt b/objection/console/helpfiles/filesystem.cat.txt new file mode 100644 index 00000000..d5a22cdc --- /dev/null +++ b/objection/console/helpfiles/filesystem.cat.txt @@ -0,0 +1,10 @@ +Command: filesystem cat + +Usage: filesystem cat + +Prints a file's contents to the console. The file path should be relative to +the current working directory or an absolute path. + +Examples: + filesystem cat config.txt + filesystem cat /var/mobile/Preferences/config.plist diff --git a/objection/console/helpfiles/filesystem.download.txt b/objection/console/helpfiles/filesystem.download.txt new file mode 100644 index 00000000..3f09ba4a --- /dev/null +++ b/objection/console/helpfiles/filesystem.download.txt @@ -0,0 +1,14 @@ +Command: filesystem download + +Usage: filesystem download [--folder] + +Downloads a file or folder from the remote device to the local machine. The +remote path can be relative to the current working directory or an absolute path. + +Flags: + --folder Download a folder instead of a single file + +Examples: + filesystem download test.txt + filesystem download /var/mobile/Preferences/config.plist + filesystem download /var/mobile/Documents Documents --folder diff --git a/objection/console/helpfiles/filesystem.txt b/objection/console/helpfiles/filesystem.txt new file mode 100644 index 00000000..a0f1cbb1 --- /dev/null +++ b/objection/console/helpfiles/filesystem.txt @@ -0,0 +1,10 @@ +Command: filesystem + +Usage: filesystem + +Contains subcommands to work with files on the remote filesystem. Previously called `file` + +Examples: + filesystem cat + filesystem upload + filesystem download [--folder] diff --git a/objection/console/helpfiles/filesystem.upload.txt b/objection/console/helpfiles/filesystem.upload.txt new file mode 100644 index 00000000..9b46021b --- /dev/null +++ b/objection/console/helpfiles/filesystem.upload.txt @@ -0,0 +1,10 @@ +Command: filesystem upload + +Usage: filesystem upload + +Uploads a file from the local machine to the remote device. The remote path +can be relative to the current working directory or an absolute path. + +Examples: + filesystem upload /home/user/test.txt test.txt + filesystem upload /home/user/config.plist /var/mobile/Preferences/config.plist diff --git a/objection/console/helpfiles/ios.heap.evaluate.txt b/objection/console/helpfiles/ios.heap.evaluate.txt new file mode 100644 index 00000000..6a9f7cb4 --- /dev/null +++ b/objection/console/helpfiles/ios.heap.evaluate.txt @@ -0,0 +1,13 @@ +Command: ios heap evaluate + +Usage: ios heap evaluate [--inline] + +Evaluates JavaScript on an Objective-C object on the heap. This allows complex +operations and transformations using Frida's JavaScript runtime. + +Flags: + --inline Evaluate inline without multiline input + +Examples: + ios heap evaluate 0x12345678 "[obj methodWithArg:123]" + ios heap evaluate 0x12345678 "[obj methodWithArg:123]" --inline diff --git a/objection/console/helpfiles/ios.heap.execute.txt b/objection/console/helpfiles/ios.heap.execute.txt new file mode 100644 index 00000000..827f97cc --- /dev/null +++ b/objection/console/helpfiles/ios.heap.execute.txt @@ -0,0 +1,13 @@ +Command: ios heap execute + +Usage: ios heap execute [--return-string] + +Executes a method on an Objective-C object on the heap. This allows dynamic +invocation of object methods for testing and exploration. + +Flags: + --return-string Convert the return value to a string + +Examples: + ios heap execute 0x12345678 "description" + ios heap execute 0x12345678 "description" --return-string diff --git a/objection/console/helpfiles/ios.heap.print.ivars.txt b/objection/console/helpfiles/ios.heap.print.ivars.txt new file mode 100644 index 00000000..7e4ac1ba --- /dev/null +++ b/objection/console/helpfiles/ios.heap.print.ivars.txt @@ -0,0 +1,13 @@ +Command: ios heap print ivars + +Usage: ios heap print ivars [--to-utf8] + +Prints instance variables (ivars) for an Objective-C object. This displays all +instance variable names and their current values. + +Flags: + --to-utf8 Attempt to decode output as UTF-8 + +Examples: + ios heap print ivars 0x12345678 + ios heap print ivars 0x12345678 --to-utf8 diff --git a/objection/console/helpfiles/ios.heap.print.methods.txt b/objection/console/helpfiles/ios.heap.print.methods.txt new file mode 100644 index 00000000..b1fe67d4 --- /dev/null +++ b/objection/console/helpfiles/ios.heap.print.methods.txt @@ -0,0 +1,13 @@ +Command: ios heap print methods + +Usage: ios heap print methods [--without-arguments] + +Prints instance methods available for an Objective-C object. This displays +all methods that can be called on the object. + +Flags: + --without-arguments Do not display method argument information + +Examples: + ios heap print methods 0x12345678 + ios heap print methods 0x12345678 --without-arguments diff --git a/objection/console/helpfiles/ios.heap.print.txt b/objection/console/helpfiles/ios.heap.print.txt new file mode 100644 index 00000000..01641e12 --- /dev/null +++ b/objection/console/helpfiles/ios.heap.print.txt @@ -0,0 +1,9 @@ +Command: ios heap print + +Usage: ios heap print + +Contains subcommands to print information about objects on the iOS heap. + +Examples: + ios heap print ivars + ios heap print methods diff --git a/objection/console/helpfiles/ios.heap.search.instances.txt b/objection/console/helpfiles/ios.heap.search.instances.txt new file mode 100644 index 00000000..016a5a08 --- /dev/null +++ b/objection/console/helpfiles/ios.heap.search.instances.txt @@ -0,0 +1,10 @@ +Command: ios heap search instances + +Usage: ios heap search instances + +Searches for live instances of a particular Objective-C class on the heap. +Returns all instances currently in memory for the specified class. + +Examples: + ios heap search instances NSString + ios heap search instances UIViewController diff --git a/objection/console/helpfiles/ios.heap.search.txt b/objection/console/helpfiles/ios.heap.search.txt new file mode 100644 index 00000000..22c19278 --- /dev/null +++ b/objection/console/helpfiles/ios.heap.search.txt @@ -0,0 +1,8 @@ +Command: ios heap search + +Usage: ios heap search + +Contains subcommands to search for information about the iOS heap. + +Examples: + ios heap search instances diff --git a/objection/console/helpfiles/ios.hooking.generate.class.txt b/objection/console/helpfiles/ios.hooking.generate.class.txt new file mode 100644 index 00000000..de9c34ed --- /dev/null +++ b/objection/console/helpfiles/ios.hooking.generate.class.txt @@ -0,0 +1,10 @@ +Command: ios hooking generate class + +Usage: ios hooking generate class + +Generates a generic Frida hook manager for the specified iOS Objective-C class. +This creates a template hook that can be customized for various hooking operations. + +Examples: + ios hooking generate class NSString + ios hooking generate class UIViewController diff --git a/objection/console/helpfiles/ios.hooking.generate.simple.txt b/objection/console/helpfiles/ios.hooking.generate.simple.txt new file mode 100644 index 00000000..81908e46 --- /dev/null +++ b/objection/console/helpfiles/ios.hooking.generate.simple.txt @@ -0,0 +1,10 @@ +Command: ios hooking generate simple + +Usage: ios hooking generate simple + +Generates simple Frida hooks for each method in the specified iOS Objective-C class. +This creates basic hooks that log method invocations without complex processing. + +Examples: + ios hooking generate simple NSString + ios hooking generate simple UIViewController diff --git a/objection/console/helpfiles/ios.hooking.generate.txt b/objection/console/helpfiles/ios.hooking.generate.txt new file mode 100644 index 00000000..f7e3c6fd --- /dev/null +++ b/objection/console/helpfiles/ios.hooking.generate.txt @@ -0,0 +1,9 @@ +Command: ios hooking generate + +Usage: ios hooking generate + +Contains subcommands to generate Frida hooks for iOS Objective-C classes. + +Examples: + ios hooking generate class + ios hooking generate simple diff --git a/objection/console/helpfiles/ios.hooking.search.txt b/objection/console/helpfiles/ios.hooking.search.txt index f79cd381..9aff3e37 100644 --- a/objection/console/helpfiles/ios.hooking.search.txt +++ b/objection/console/helpfiles/ios.hooking.search.txt @@ -1 +1,5 @@ Contains subcommands helpful when searching for classes and methods. + +Flags: + --json Output results as JSON + --only-classes Only show classes in search results, not methods diff --git a/objection/console/helpfiles/ios.info.binary.txt b/objection/console/helpfiles/ios.info.binary.txt new file mode 100644 index 00000000..1fdee035 --- /dev/null +++ b/objection/console/helpfiles/ios.info.binary.txt @@ -0,0 +1,9 @@ +Command: ios info binary + +Usage: ios info binary + +Gets information about application binaries and dylibs, including their paths, +architectures, and other relevant details. + +Examples: + ios info binary diff --git a/objection/console/helpfiles/ios.info.txt b/objection/console/helpfiles/ios.info.txt new file mode 100644 index 00000000..9ed5c845 --- /dev/null +++ b/objection/console/helpfiles/ios.info.txt @@ -0,0 +1,8 @@ +Command: ios info + +Usage: ios info + +Contains subcommands to get iOS and application related information. + +Examples: + ios info binary diff --git a/objection/console/helpfiles/ios.keychain.dump.txt b/objection/console/helpfiles/ios.keychain.dump.txt index f7a84f97..304a3b20 100644 --- a/objection/console/helpfiles/ios.keychain.dump.txt +++ b/objection/console/helpfiles/ios.keychain.dump.txt @@ -1,23 +1,23 @@ Command: ios keychain dump -Usage: ios keychain dump (optional: --json ) (optional: --smart) +Usage: ios keychain dump [--json ] [--smart] Extracts the keychain items for the current application. This is achieved by iterating over the keychain type classes available in iOS and populating a search dictionary with them. This dictionary is then used as a query to SecItemCopyMatching() and the results parsed. -Use the --smart flag to attempt smart decoding of items in the keychain. By default, -UTF8 string representations of data will be displayed. For a hex string of the data, -use the --json flag which will indlude a 'dataHex' key. +Flags: + --json Output results as JSON to the specified file, includes a 'dataHex' key + --smart Attempt smart decoding of items in the keychain By default, only a small subset of each entry is displayed. For a more complete dump, use the --json flag. Items that will be accessible include everything stored with the entitlement group used -during the patching/signing process. Providing a filename with the --json flag will dump -all of the keychain attributes to the file specified for later inspection. +during the patching/signing process. Examples: ios keychain dump ios keychain dump --json keychain.json + ios keychain dump --json keychain.json --smart diff --git a/objection/console/helpfiles/ios.keychain.dump_raw.txt b/objection/console/helpfiles/ios.keychain.dump_raw.txt new file mode 100644 index 00000000..2324a129 --- /dev/null +++ b/objection/console/helpfiles/ios.keychain.dump_raw.txt @@ -0,0 +1,10 @@ +Command: ios keychain dump_raw + +Usage: ios keychain dump_raw + +Dumps raw, unprocessed keychain entries for the current app's entitlement group. +This is an advanced command that shows the keychain data without processing +or formatting. + +Examples: + ios keychain dump_raw diff --git a/objection/console/helpfiles/ios.keychain.remove.txt b/objection/console/helpfiles/ios.keychain.remove.txt new file mode 100644 index 00000000..db2be5fd --- /dev/null +++ b/objection/console/helpfiles/ios.keychain.remove.txt @@ -0,0 +1,13 @@ +Command: ios keychain remove + +Usage: ios keychain remove --account --service + +Removes an entry from the iOS keychain. Both account and service parameters +are required to identify which keychain entry to remove. + +Flags: + --account The account name (required) + --service The service name (required) + +Examples: + ios keychain remove --account user@example.com --service com.example.app diff --git a/objection/console/helpfiles/ios.keychain.update.txt b/objection/console/helpfiles/ios.keychain.update.txt new file mode 100644 index 00000000..6d98e2b2 --- /dev/null +++ b/objection/console/helpfiles/ios.keychain.update.txt @@ -0,0 +1,13 @@ +Command: ios keychain update + +Usage: ios keychain update --account --service --newData + +Updates an entry in the iOS keychain with new data. All parameters are required. + +Flags: + --account The account name (required) + --service The service name (required) + --newData The new data to store (required) + +Examples: + ios keychain update --account user@example.com --service com.example.app --newData "newsecret" diff --git a/objection/console/helpfiles/ios.nsurlcredentialstorage.dump.txt b/objection/console/helpfiles/ios.nsurlcredentialstorage.dump.txt new file mode 100644 index 00000000..c32c328c --- /dev/null +++ b/objection/console/helpfiles/ios.nsurlcredentialstorage.dump.txt @@ -0,0 +1,9 @@ +Command: ios nsurlcredentialstorage dump + +Usage: ios nsurlcredentialstorage dump + +Dumps all of the credentials in the shared NSURLCredentialStorage. This includes +credentials stored by URLSession and other networking components. + +Examples: + ios nsurlcredentialstorage dump diff --git a/objection/console/helpfiles/ios.nsurlcredentialstorage.txt b/objection/console/helpfiles/ios.nsurlcredentialstorage.txt new file mode 100644 index 00000000..f944a700 --- /dev/null +++ b/objection/console/helpfiles/ios.nsurlcredentialstorage.txt @@ -0,0 +1,8 @@ +Command: ios nsurlcredentialstorage + +Usage: ios nsurlcredentialstorage + +Contains subcommands to work with the shared NSURLCredentialStorage. + +Examples: + ios nsurlcredentialstorage dump diff --git a/objection/console/helpfiles/ios.ui.biometrics_bypass.txt b/objection/console/helpfiles/ios.ui.biometrics_bypass.txt new file mode 100644 index 00000000..168c6c06 --- /dev/null +++ b/objection/console/helpfiles/ios.ui.biometrics_bypass.txt @@ -0,0 +1,9 @@ +Command: ios ui biometrics_bypass + +Usage: ios ui biometrics_bypass + +Hooks the iOS Biometrics LAContext and responds with successful authentication. +This allows bypassing Touch ID/Face ID checks for testing purposes. + +Examples: + ios ui biometrics_bypass diff --git a/objection/console/helpfiles/memory.replace.txt b/objection/console/helpfiles/memory.replace.txt new file mode 100644 index 00000000..04caeb16 --- /dev/null +++ b/objection/console/helpfiles/memory.replace.txt @@ -0,0 +1,14 @@ +Command: memory replace + +Usage: memory replace [--string-pattern] [--string-replace] + +Searches for and replaces a pattern in the application's memory. This modifies +the running process memory directly. + +Flags: + --string-pattern Interpret pattern as a string instead of hex + --string-replace Interpret replacement as a string instead of hex + +Examples: + memory replace "41 42 43" "44 45 46" + memory replace "hello" "world" --string-pattern --string-replace diff --git a/objection/console/helpfiles/ping.txt b/objection/console/helpfiles/ping.txt new file mode 100644 index 00000000..69228a4a --- /dev/null +++ b/objection/console/helpfiles/ping.txt @@ -0,0 +1,9 @@ +Command: ping + +Usage: ping + +Pings the injected Frida agent to verify connectivity. If the agent responds +successfully, the connection is working properly. + +Examples: + ping diff --git a/objection/console/helpfiles/resume.txt b/objection/console/helpfiles/resume.txt new file mode 100644 index 00000000..6245865b --- /dev/null +++ b/objection/console/helpfiles/resume.txt @@ -0,0 +1,9 @@ +Command: resume + +Usage: resume + +Resumes execution of the attached process. Use this after the process has been +paused or suspended. + +Examples: + resume diff --git a/objection/console/helpfiles/sqlite.connect.txt b/objection/console/helpfiles/sqlite.connect.txt index 22657376..1bc3b621 100644 --- a/objection/console/helpfiles/sqlite.connect.txt +++ b/objection/console/helpfiles/sqlite.connect.txt @@ -1,6 +1,6 @@ Command: sqlite connect -Usage: sqlite connect +Usage: sqlite connect [--sync] Connect to a SQLite database on the remote device. The connection process downloads a copy of the remote database file to a local temporary directory. The file is then @@ -8,6 +8,10 @@ validated to make sure that it is a SQLite3 database file. Once considered a val database file, the connection is considered complete. The `sqlite status` command will show details about the connection once successful. +Flags: + --sync Synchronize the database file with the remote copy + Examples: sqlite connect Preferences/settings.sqlite sqlite connect credentials.sqlite + sqlite connect Preferences/settings.sqlite --sync From 52d24b506dab2b4b6b6e6fbb044cc83bdbca6bc9 Mon Sep 17 00:00:00 2001 From: IPMegladon Date: Fri, 30 Jan 2026 19:32:56 +0200 Subject: [PATCH 2/2] (refactor) Update and clean up Android and iOS helpfiles for hooking commands --- objection/console/commands.py | 2 +- .../android.hooking.search.classes.txt | 10 --------- .../android.hooking.search.methods.txt | 13 ------------ .../helpfiles/android.hooking.search.txt | 17 ++++++++++++--- .../helpfiles/android.hooking.watch.class.txt | 15 ------------- .../android.hooking.watch.class_method.txt | 21 ------------------- .../helpfiles/android.hooking.watch.txt | 21 ++++++++++++++++++- .../helpfiles/ios.hooking.search.classes.txt | 10 --------- .../helpfiles/ios.hooking.search.methods.txt | 10 --------- .../console/helpfiles/ios.hooking.search.txt | 17 ++++++++++++--- .../helpfiles/ios.hooking.watch.class.txt | 12 ----------- .../helpfiles/ios.hooking.watch.method.txt | 15 ------------- .../console/helpfiles/ios.hooking.watch.txt | 20 +++++++++++++++++- 13 files changed, 68 insertions(+), 115 deletions(-) delete mode 100644 objection/console/helpfiles/android.hooking.search.classes.txt delete mode 100644 objection/console/helpfiles/android.hooking.search.methods.txt delete mode 100644 objection/console/helpfiles/android.hooking.watch.class.txt delete mode 100644 objection/console/helpfiles/android.hooking.watch.class_method.txt delete mode 100644 objection/console/helpfiles/ios.hooking.search.classes.txt delete mode 100644 objection/console/helpfiles/ios.hooking.search.methods.txt delete mode 100644 objection/console/helpfiles/ios.hooking.watch.class.txt delete mode 100644 objection/console/helpfiles/ios.hooking.watch.method.txt diff --git a/objection/console/commands.py b/objection/console/commands.py index 51885422..ada7619b 100644 --- a/objection/console/commands.py +++ b/objection/console/commands.py @@ -512,7 +512,7 @@ }, }, # ios commands - 'ios': { + 'ios': { 'meta': 'Commands specific to iOS', 'commands': { 'info': { diff --git a/objection/console/helpfiles/android.hooking.search.classes.txt b/objection/console/helpfiles/android.hooking.search.classes.txt deleted file mode 100644 index 191d5432..00000000 --- a/objection/console/helpfiles/android.hooking.search.classes.txt +++ /dev/null @@ -1,10 +0,0 @@ -Command: android hooking search classes - -Usage: android hooking search classes - -Search for classes in the current Java runtime with the search string -as part of the class name. - -Examples: - android hooking search classes jailbreak - android hooking search classes sslpinning diff --git a/objection/console/helpfiles/android.hooking.search.methods.txt b/objection/console/helpfiles/android.hooking.search.methods.txt deleted file mode 100644 index 32817ba2..00000000 --- a/objection/console/helpfiles/android.hooking.search.methods.txt +++ /dev/null @@ -1,13 +0,0 @@ -Command: android hooking search methods - -Usage: android hooking search methods (optional: package-filter) - -Search for class methods in the current Java runtime with the search string -as part of the class name. An optional package filter may be used to limit -the method search to a specific namespace. - -WARNING: This command may easily crash the application without a filter. - -Examples: - android hooking search classes jailbreak com.package - android hooking search classes sslpinning diff --git a/objection/console/helpfiles/android.hooking.search.txt b/objection/console/helpfiles/android.hooking.search.txt index 9aff3e37..dc5c437f 100644 --- a/objection/console/helpfiles/android.hooking.search.txt +++ b/objection/console/helpfiles/android.hooking.search.txt @@ -1,5 +1,16 @@ -Contains subcommands helpful when searching for classes and methods. +Command: android hooking search + +Usage: android hooking search [--json ] [--only-classes] + +Searches for classes and methods in the current Android application matching +the specified pattern. The pattern should be in the form !. Flags: - --json Output results as JSON - --only-classes Only show classes in search results, not methods + --json Output results as JSON to the specified file + --only-classes Only show classes in search results, not methods + +Examples: + android hooking search com.example.test + android hooking search *com.example*!* + android hooking search com.example --only-classes + android hooking search com.example --json search_results.json diff --git a/objection/console/helpfiles/android.hooking.watch.class.txt b/objection/console/helpfiles/android.hooking.watch.class.txt deleted file mode 100644 index 86c2da26..00000000 --- a/objection/console/helpfiles/android.hooking.watch.class.txt +++ /dev/null @@ -1,15 +0,0 @@ -Command: android hooking watch class - -Usage: android hooking watch class [!method] [--dump-args] [--dump-backtrace] [--dump-return] - -Hooks a specified class' methods and reports on invocations. - -Flags: - --dump-args Dump method arguments when invoked - --dump-backtrace Dump the call stack backtrace - --dump-return Dump method return values - -Examples: - android hooking watch class com.example.test - android hooking watch class com.example.test --dump-args --dump-return - android hooking watch class com.example.test!onCreate diff --git a/objection/console/helpfiles/android.hooking.watch.class_method.txt b/objection/console/helpfiles/android.hooking.watch.class_method.txt deleted file mode 100644 index 7e52d72b..00000000 --- a/objection/console/helpfiles/android.hooking.watch.class_method.txt +++ /dev/null @@ -1,21 +0,0 @@ -Command: android hooking watch class_method - -Usage: android hooking watch class_method - (optional: --dump-args) (optional: --dump-backtrace) - (optional: --dump-return) - -Hooks a specified class method and reports on invocations, together with -the number of arguments that method was called with. This command will -also hook all of the methods available overloads unless a specific -overload is specified. - -If the --include-backtrace flag is provided, a full stack trace that -lead to the methods invocation will also be dumped. This would aid in -discovering who called the original method. - -Examples: - android hooking watch class_method com.example.test.login - android hooking watch class_method com.example.test.helper.executeQuery - android hooking watch class_method com.example.test.helper.executeQuery "java.lang.String,java.lang.String" - android hooking watch class_method com.example.test.helper.executeQuery --dump-backtrace - android hooking watch class_method com.example.test.login --dump-args --dump-return diff --git a/objection/console/helpfiles/android.hooking.watch.txt b/objection/console/helpfiles/android.hooking.watch.txt index 770a639f..38512b21 100644 --- a/objection/console/helpfiles/android.hooking.watch.txt +++ b/objection/console/helpfiles/android.hooking.watch.txt @@ -1 +1,20 @@ -Contains subcommands to watch for various bits of information on class invocations. +Command: android hooking watch + +Usage: android hooking watch + [--dump-args] [--dump-backtrace] [--dump-return] + +Hooks Android Java methods matching the specified pattern and reports on +invocations. The pattern can be a class name, a package pattern with +wildcards, or a specific class and method separated by an exclamation +mark (!). + +Flags: + --dump-args Dump method arguments when invoked + --dump-backtrace Dump the call stack backtrace + --dump-return Dump method return values + +Examples: + android hooking watch com.example.test + android hooking watch *com.example*!* + android hooking watch com.example.test.MyClass!login + android hooking watch com.example.test --dump-args --dump-return \ No newline at end of file diff --git a/objection/console/helpfiles/ios.hooking.search.classes.txt b/objection/console/helpfiles/ios.hooking.search.classes.txt deleted file mode 100644 index 0b60612f..00000000 --- a/objection/console/helpfiles/ios.hooking.search.classes.txt +++ /dev/null @@ -1,10 +0,0 @@ -Command: ios hooking search classes - -Usage: ios hooking search classes - -Search for classes in the current Objective-C runtime with the search string -as part of the class name. - -Examples: - ios hooking search classes jailbreak - ios hooking search classes sslpinning diff --git a/objection/console/helpfiles/ios.hooking.search.methods.txt b/objection/console/helpfiles/ios.hooking.search.methods.txt deleted file mode 100644 index 3ffc6541..00000000 --- a/objection/console/helpfiles/ios.hooking.search.methods.txt +++ /dev/null @@ -1,10 +0,0 @@ -Command: ios hooking search methods - -Usage: ios hooking search methods - -Search for methods in classes in the current Objective-C runtime with the -search string as part of the method name. - -Examples: - ios hooking search methods keychain - ios hooking search methods sslpinning diff --git a/objection/console/helpfiles/ios.hooking.search.txt b/objection/console/helpfiles/ios.hooking.search.txt index 9aff3e37..50a1b763 100644 --- a/objection/console/helpfiles/ios.hooking.search.txt +++ b/objection/console/helpfiles/ios.hooking.search.txt @@ -1,5 +1,16 @@ -Contains subcommands helpful when searching for classes and methods. +Command: ios hooking search + +Usage: ios hooking search [--json ] [--only-classes] + +Searches for Objective-C classes and methods in the current iOS application +matching the specified pattern. Flags: - --json Output results as JSON - --only-classes Only show classes in search results, not methods + --json Output results as JSON to the specified file + --only-classes Only show classes in search results, not methods + +Examples: + ios hooking search KeychainDataManager + ios hooking search "+[KeychainDataManager update:forKey:]" + ios hooking search *Manager* --only-classes + ios hooking search *Manager* --json search_results.json diff --git a/objection/console/helpfiles/ios.hooking.watch.class.txt b/objection/console/helpfiles/ios.hooking.watch.class.txt deleted file mode 100644 index 06f10e96..00000000 --- a/objection/console/helpfiles/ios.hooking.watch.class.txt +++ /dev/null @@ -1,12 +0,0 @@ -Command: ios hooking watch class - -Usage: ios hooking watch (--include-parents) - -Hooks into all of the methods available in the Objective-C class specified -by class_name and reports on invocations of any methods contained within. -If the --include-parents flag is specified, all methods inherited from a -parent class will also be hooked and reported on. - -Examples: - ios hooking watch KeychainDataManager - ios hooking watch PinnedNSURLSessionStarwarsApi --include-parents diff --git a/objection/console/helpfiles/ios.hooking.watch.method.txt b/objection/console/helpfiles/ios.hooking.watch.method.txt deleted file mode 100644 index b9e8c414..00000000 --- a/objection/console/helpfiles/ios.hooking.watch.method.txt +++ /dev/null @@ -1,15 +0,0 @@ -Command: ios hooking watch method - -Usage: ios hooking method "" (optional: --dump-backtrace) - (optional: --dump-args) (optional: --dump-return) - -Hooks into a specified Objective-C method and reports on invocations. -A full class and method is expected, including whether its an instance -or class method. -If the --include-backtrace flag is provided, a full stack trace that -lead to the methods invocation will also be dumped. - -Examples: - ios hooking watch method "+[KeychainDataManager update:forKey:]" - ios hooking watch method "-[PinnedNSURLSessionStarwarsApi getJsonResponseFrom:onSuccess:onFailure:]" --include-backtrace - ios hooking watch method "+[KeychainDataManager update:forKey:]" --dump-args --dump-return diff --git a/objection/console/helpfiles/ios.hooking.watch.txt b/objection/console/helpfiles/ios.hooking.watch.txt index 371fef0f..d359d5bc 100644 --- a/objection/console/helpfiles/ios.hooking.watch.txt +++ b/objection/console/helpfiles/ios.hooking.watch.txt @@ -1 +1,19 @@ -Contains subcommands to watch for method invocations on Objective-C classes. +Command: ios hooking watch + +Usage: ios hooking watch + [--dump-args] [--dump-backtrace] [--dump-return] [--include-parents] + +Hooks into Objective-C methods matching the specified pattern and reports on +invocations. + +Flags: + --dump-args Dump method arguments when invoked + --dump-backtrace Dump the call stack backtrace + --dump-return Dump method return values + --include-parents Include methods inherited from parent classes + +Examples: + ios hooking watch KeychainDataManager + ios hooking watch "+[KeychainDataManager update:forKey:]" + ios hooking watch PinnedNSURLSessionStarwarsApi --include-parents + ios hooking watch KeychainDataManager --dump-args --dump-return \ No newline at end of file