objection-runtime

What problem does it solve?

Manual Frida scripting for Android runtime analysis requires deep expertise and significant time investment to write and debug custom scripts for common tasks like SSL pinning bypass or class enumeration. This skill eliminates that overhead by providing pre-configured objection commands for frequent runtime exploration workflows.

Core Features & Use Cases

• One-command runtime bypasses: Disable SSL pinning and root/debugger detection with single commands, no custom Frida scripting required.
• In-memory app inspection: Enumerate loaded classes and methods, search and invoke heap objects, and browse keystore and filesystem contents of running Android apps.
• Use Case: When analyzing an Android app to extract its request-signing algorithm, use this skill to first bypass SSL pinning and root detection, then enumerate loaded classes to locate the sign method, and inspect heap objects to extract the signing key.

Quick Start

Use the objection-runtime skill to attach to your running target Android app by its package name and disable its SSL pinning and root detection to enable further runtime analysis and traffic capture.