cd commands clear history save env evaluate exit file cat download upload http frida import ios bundles cookies heap hooking info jailbreak keychain monitor nsurlcredentialstoragte nsuserdefaults pasteboard plist sslpinning ui jobs kill list ls memory list exports xx.so modules search write dump all from_base android clipboard monitor deoptimize heap evaluate execute print fields methods search instances xxx --fresh hooking generate class simple get current_activity set return_value list activities class_loaders class_methods classes receivers services search classes methods watch class class_method intent launching_activity launching_service keystore list clear watch proxy set root disable simulate shell_exec sslpinning disable ui FLAG_SECURE screenshot ping plugin load pwd reconnect rm sqlite connect
插件安装:
git clone https://github.com/hluwa/Wallbreaker ~/.objection/plugins/Wallbreaker
插件使用:
搜索类
plugin wallbreaker classsearch <pattern>
根据给的 pattern 对所有类名进行匹配,列出匹配到的所有类名。
搜索对象
plugin wallbreaker objectsearch <classname>
根据类名搜索内存中已经被创建的实例,列出 handle
和 toString()
的结果。
ClassDump
plugin wallbreaker classdump <classname> [--fullname]
输出类的结构, 若加了 --fullname
参数,打印的数据中类名会带着完整的包名。
ObjectDump
plugin wallbreaker objectdump <handle> [--fullname]
在 ClassDump 的基础上,输出指定对象中的每个字段的数据。