# objection: Explore Mobile Apps at Runtime with Frida

This repository profile is provided by osrepos.com, an open source repository discovery platform.

Source: osrepos.com
Repository profile: https://osrepos.com/repo/sensepost-objection
Generated for open source discovery and AI-assisted research.

objection is a Frida-powered runtime exploration toolkit for assessing Android and iOS app security without requiring a jailbreak. It gives mobile security testers command-line access to app internals, including filesystems, memory, keychains and runtime objects.

GitHub: https://github.com/sensepost/objection
OSRepos URL: https://osrepos.com/repo/sensepost-objection

## Summary

objection is a Frida-powered runtime exploration toolkit for assessing Android and iOS app security without requiring a jailbreak. It gives mobile security testers command-line access to app internals, including filesystems, memory, keychains and runtime objects.

## Topics

- python
- security
- android
- cli
- ios
- mobile-penetration-testing
- frida

## Repository Information

Last analyzed by OSRepos: Fri Nov 06 2026 09:44:23 GMT+0000 (Western European Standard Time)
Detail views: 2
GitHub clicks: 0

## Safety Notice

OSRepos shares public repositories for knowledge and discovery only. Review source code, dependencies, licenses, and security implications before running or installing anything.

## Content

## Overview

objection is a runtime mobile exploration toolkit built on Frida, the instrumentation framework it uses to inspect and interact with apps. It helps security testers assess Android and iOS applications at runtime, including in situations where they do not have a jailbroken device.

The project packages common mobile assessment tasks behind an `objection` command, so testers can explore app containers and runtime state without writing each interaction from scratch. It is aimed at mobile application security work, rather than general app development or end-user device management.

## Key Features

- Supports runtime exploration of both Android and iOS applications.
- Inspects and interacts with application container filesystems.
- Provides SSL pinning bypass capabilities for testing app network behavior.
- Dumps keychains on supported targets.
- Supports memory-related tasks, including dumping and patching.
- Explores and manipulates objects on the heap.

## Use Cases

- A mobile penetration tester can inspect an app's runtime behavior during an Android or iOS assessment.
- A security reviewer can examine files stored in an app container and look for sensitive data exposure.
- A tester can bypass SSL pinning in a controlled assessment to inspect application network traffic.
- A researcher can inspect keychains, process memory, or heap objects while investigating how an app handles secrets and data.

## Our Take

objection is an actively maintained Frida-based toolkit with recent releases and broad contributor participation, though most contributions come from one person.

**Good fit if:**
- You assess Android or iOS apps and want runtime exploration built on Frida.
- You need command-line access to app files, memory, keychains, or runtime objects.
- You can work with Python 3.11 or newer and the GPL-3.0 license.

**Look elsewhere if:**
- You need a general-purpose mobile development or device-management tool rather than a security assessment toolkit.
- Your project cannot meet GPL-3.0 licensing obligations.
- Your workflow depends on a project whose contributions are not concentrated among a small number of maintainers.

## Project Health

| Signal | Value |
|---|---|
| Status | **Active**: recent releases |
| Last commit | 2026-10-27 (9 days ago) |
| Commits, last 90 days | 2 |
| Releases, last 12 months | 6 (latest 1.12.5, 2026-06-02) |
| Contributors | 66 (top contributor: 86% of commits) |
| Issues closed, last 90 days | 12 (typically closed in 0 days) |
| Pull requests merged, last 90 days | 2 |
| Project age | 9 years |

Checked on 2026-11-06 with the GitHub API.

## Project Facts

- Language: Python
- License: GPL-3.0
- Stars: 9.5k
- Forks: 1k
- Topics: android, framework, frida, instrumentation, ios, mobile, pentest, security
- Archived: no

## What You Need

Detected in the repository:

- Python >=3.11 (from pyproject.toml)
- A test suite and automated checks on GitHub Actions

## Getting Started

Install with Python's package manager:

```bash
pip3 install objection
```

This installs the `objection` command. See the [README](https://github.com/sensepost/objection) and [installation wiki](https://github.com/sensepost/objection/wiki/Installation) for setup and usage details.

## License in Plain Words

**GPL-3.0** (strong copyleft).

- Commercial use: yes
- Modify and redistribute: yes
- You must keep: the license notice
- Share your changes: yes, the full source of anything you distribute that includes it, under the GPL
- Includes an explicit patent grant from the contributors

A summary, not legal advice: the LICENSE file is what applies.

## Considerations

The project is active, with recent commits and multiple releases in the past year, but its contribution history is concentrated: one contributor accounts for most of the code. It has a Python 3.11-or-newer requirement and is licensed under GPL-3.0, which teams should review before incorporating it into a workflow. The repository describes it as powered by Frida, so adoption also means working within Frida-based instrumentation workflows.