Objection

Latest version: v1.11.0

Safety actively analyzes 714875 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 5

1.7.3

new
- Add an Android Cordova SSL pinning bypass for applications that make use of [SSLCertificateChecker-PhoneGap-Plugin](https://github.com/EddyVerbruggen/SSLCertificateChecker-PhoneGap-Plugin/blob/master/src/android/nl/xservices/plugins/SSLCertificateChecker.java). Thanks clviper.

other
- Bump agent dependencies.

[Code Changes Since v1.7.2](https://github.com/sensepost/objection/compare/1.7.2%E2%80%A61.7.3)

1.7.2

fixes
- Escape APK package names causing parsing errors for the Android patcher.
- Stop the iOS IPA patcher if a valid provisioning profile was not found.

other
- Bump agent dependencies.

[Code Changes Since v1.7.1](https://github.com/sensepost/objection/compare/1.7.1%E2%80%A61.7.2)

1.7.1

new
- Add the ability to pause iOS IPA patching to allow for manual changes before repackaging and code signing. This is done by adding a `--pause` flag to the `patchipa` command.

[Code Changes Since v1.7.0](https://github.com/sensepost/objection/compare/1.7.0%E2%80%A61.7.1)

1.7.0

new
- Add new iOS and Android heap interaction methods. These new commands allow you to performs various tasks under the `<target> heap` command context.
- Add a small JavaScript editor for simple scripts using the `evaluate` command.
- Add an iOS binary protections enumeration module.
- Add an on device HTTP server.

fixes
- Fix Android Activity launching
- Complete the iOS file delete feature.
- Fix duplicate entries created when adding the Android debuggable flag or a Network Security Config.
- Fix iOS keychain data hex string conversions.

other
- Upgrade `frida-compile` to v9.

[Code Changes Since v1.6.6](https://github.com/sensepost/objection/compare/1.6.6%E2%80%A61.7.0)

1.6.6

fixes
- Fix ascii art 💥
- Improve iOS SSL pinning bypass stability.
- Improve internal jobs cleanup logic.

other
- Cleanup agent TSConfig and replace `frida-gum-types` with `types/frida-gum`.

[Code Changes Since v1.6.5](https://github.com/sensepost/objection/compare/1.6.5%E2%80%A61.6.6)

1.6.5

new
- The iOS keychain dumper will now add a key called `dataHex` when dumping entries with the `--json` flag. This key is a hex string of the raw data from the keychain.
- The iOS keychain dumper has a new `--smart` flag to trigger automatic decoding of data fields. Without this flag (the default), entries are UTF8 encoded.

fixes
- Improve the iOS keychain dumper's reliability.

other
- Bump agent dependencies

[Code Changes Since v1.6.4](https://github.com/sensepost/objection/compare/1.6.4%E2%80%A61.6.5)

Page 4 of 5

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.