cd commands clear history save env evaluate exit file cat download upload http frida import ios bundles cookies heap hooking info jailbreak keychain monitor nsurlcredentialstoragte nsuserdefaults pasteboard plist sslpinning ui jobs kill list ls memory list exports xx.so modules search write dump all from_base android clipboard monitor deoptimize heap evaluate execute print fields methods search instances xxx --fresh hooking generate class simple get current_activity set return_value list activities class_loaders class_methods classes receivers services search classes methods watch class class_method intent launching_activity launching_service keystore list clear watch proxy set root disable simulate shell_exec sslpinning disable ui FLAG_SECURE screenshot ping plugin load pwd reconnect rm sqlite connect
插件安裝:
git clone https://github.com/hluwa/Wallbreaker ~/.objection/plugins/Wallbreaker
插件使用:
搜索類
plugin wallbreaker classsearch <pattern>
根據給的 pattern 對所有類名進行匹配,列出匹配到的所有類名。
搜索對象
plugin wallbreaker objectsearch <classname>
根據類名搜索內存中已經被創建的實例,列出 handle
和 toString()
的結果。
ClassDump
plugin wallbreaker classdump <classname> [--fullname]
輸出類的結構, 若加了 --fullname
參數,打印的數據中類名會帶着完整的包名。
ObjectDump
plugin wallbreaker objectdump <handle> [--fullname]
在 ClassDump 的基礎上,輸出指定對象中的每個字段的數據。