使用Objection测试

You can use the following toolkit to interact with the patched app:

GitHub - sensepost/objection: 📱 objection - runtime mobile explorationGitHub

Running

After the patched app has been launched, you need to connect to it using objection.

Connect via USB

• Find out app's PID.

  $ frida-ps -Ua

  PID   Name                     Identifier
  ----  -----------------------  ---------------------------------
  1234  MyApp                    com.mycompany.myapp
  ...

• Start the objection exploration REPL.

  $ objection -g 1234 explore

Connect via network

• Find in the console the moment of loading Frida, waiting for a connection.

xcode-deploy-console-output

• Start the objection exploration REPL.

  $ objection -N -h 127.0.0.1 -p 27042 explore

Commands

A quick guide to the most used objection's commands.

Environment

$ env

Run OS command

$ !cat Info.plist 

Download file

$ file download Info.plist

Import Frida scripts

In order to import and run the Frida script use the following command:

$ import "/tmp/frida-script.js"