deardaniel/secdata-raw huggingface dataset:
Objection mobile runtime exploration: sqlite.status

Command: sqlite status

Usage: sqlite status

Check the status of the SQLite connection. Outputs the the locally cached
location as well as the remote source it was cached from.

Examples:
   sqlite status
Objection mobile runtime exploration: sqlite.connect

Command: sqlite connect

Usage: sqlite connect <remote sqlite database location> [--sync]

Connect to a SQLite database on the remote device. The connection process downloads
a copy of the remote database file to a local temporary directory. The file is then
validated to make sure that it is a SQLite3 database file. Once considered a valid
database file, the connection is considered complete.
The `sqlite status` command will show details about the connection once successful.

Flags:
   --sync   Synchronize the database file with the remote copy

Examples:
   sqlite connect Preferences/settings.sqlite
   sqlite connect credentials.sqlite
   sqlite connect Preferences/settings.sqlite --sync
Objection mobile runtime exploration: plugin.load

Command: plugin load

Usage: plugin load <plugin path> (optional: namespace)

Loads an objection plugin into the current session. For more information on
plugins, please refer to the project wiki at:
    https://github.com/sensepost/objection/wiki 

By default, plugin commands are nested beneath the plugin context menu and
will use the plugin's built-in namespace as the subcommand to use. However,
this namespace may be specified at load time, overriding the plugins buil-in
name.

Examples:
   plugin load ~/home/objection-plugins/feature
   plugin load ~/home/objection-plugins/feature newname
Objection mobile runtime exploration: filesystem.upload

Command: filesystem upload

Usage: filesystem upload <local file path> <remote path>

Uploads a file from the local machine to the remote device. The remote path
can be relative to the current working directory or an absolute path.

Examples:
   filesystem upload /home/user/test.txt test.txt
   filesystem upload /home/user/config.plist /var/mobile/Preferences/config.plist
Objection mobile runtime exploration: android.heap.search

Command: android heap search

Usage: android heap search <subcommand>

Contains subcommands to search for information about the Android heap.

Examples:
   android heap search instances <class name>
Objection mobile runtime exploration: filesystem.cat

Command: filesystem cat

Usage: filesystem cat <file path>

Prints a file's contents to the console. The file path should be relative to
the current working directory or an absolute path.

Examples:
   filesystem cat config.txt
   filesystem cat /var/mobile/Preferences/config.plist
Objection mobile runtime exploration: memory.list.modules

Command: memory list modules

Usage: memory list modules (optional: --json <filename>)

List all of the modules loaded in the current process, detailing their base
address, size and location on disk.
Providing a filename with the --json flag will output all of the module
attributes to the file specified for later inspection.

Examples:
   memory list modules
   memory list modules --json modules.json
Objection mobile runtime exploration: ios.keychain.remove

Command: ios keychain remove

Usage: ios keychain remove --account <account> --service <service>

Removes an entry from the iOS keychain. Both account and service parameters
are required to identify which keychain entry to remove.

Flags:
   --account   The account name (required)
   --service   The service name (required)

Examples:
   ios keychain remove --account user@example.com --service com.example.app
Objection mobile runtime exploration: android.root.disable

Command: android root disable

Usage: android root disable

Attempts to disable root detection on Android devices. This is achieved by
hooking numerous classes such as java.lang.String (for contains()),
java.lang.Runtime (for exec()) and java.io.File (for exists()). These hooked
methods have their properties or arguments inspected to determine if artifacts
commonly checked for in root detection is used, and manipulated.

If this method does not effectively disable root detection for you, keep in
mind that it us very common for applications to have helper methods such as
isRooted() that perform a number of checks in one class method. Using the
boolean return module on one of these utility methods may achieve a similar
effect.

Examples:
   android root disable
Objection mobile runtime exploration: android.intent.launch activity

Command: android intent launch_activity

Usage: android intent launch_activity <activity class>

Launches an activity class by building a new Intent and running startActivity()
with it as an argument. The Intent.FLAG_ACTIVITY_NEW_TASK flag is added to achieve
this, with the side effect that the history stack may be reset.

Examples:
   android intent launch_activity com.test.example.MainActivity
   android intent launch_activity com.test.example.SecretActivity
   android intent launch_activity com.example.test.Other
Objection mobile runtime exploration: memory

Contains subcommands to work with memory within the current process.
Examples include commands to dump the current process memory, dump
the memory of a specific loaded module, list exported modules or
write raw bytes to memory addresses.
Objection mobile runtime exploration: commands.history

Command: commands history

Usage: commands history

Lists all unique commands that have been run in the current session.
Duplicate commands are only shown once.

Examples:
   commands history
Objection mobile runtime exploration: ios.heap.print.methods

Command: ios heap print methods

Usage: ios heap print methods <object address> [--without-arguments]

Prints instance methods available for an Objective-C object. This displays
all methods that can be called on the object.

Flags:
   --without-arguments   Do not display method argument information

Examples:
   ios heap print methods 0x12345678
   ios heap print methods 0x12345678 --without-arguments
Objection mobile runtime exploration: android.ui

Command: android ui

Usage: android ui <subcommand>

Contains subcommands for Android user interface operations.

Examples:
   android ui screenshot
   android ui FLAG_SECURE
Objection mobile runtime exploration: ios.keychain.add

Command: ios keychain add

Usage: ios keychain add --account <account> --service <service> --data <entry data>

Adds a new entry to the iOS keychain using SecItemAdd.

The new keychain entry class would be kSecClassGenericPassword with no extra 
kSecAttrAccessControl set.

Examples:
   ios keychain add --account token --data 1122-33344-55122-55512
   ios keychain add --service foo --data bar
Objection mobile runtime exploration: resume

Command: resume

Usage: resume

Resumes execution of the attached process. Use this after the process has been
paused or suspended.

Examples:
   resume
Objection mobile runtime exploration: android.hooking.generate.simple

Command: android hooking generate simple

Usage: android hooking generate simple <class name>

Generates simple Frida hooks for each method in the specified Android Java class.
This creates basic hooks that log method invocations without complex processing.

Examples:
   android hooking generate simple com.example.MyClass
   android hooking generate simple android.app.Activity
Objection mobile runtime exploration: jobs.list

Command: jobs list

Usage: jobs list

List the currently running jobs. Jobs are asynchronous Fridascripts that were
submitted and have not yet been unloaded from the process. Examples of such
jobs include the iOS method argument dumper and pasteboard monitor. To unload
a job, the `jobs kill <jobid>` command may be used.

Examples:
   jobs list
Objection mobile runtime exploration: android.heap.print

Command: android heap print

Usage: android heap print <subcommand>

Contains subcommands to print information about objects on the Android heap.

Examples:
   android heap print fields <handle>
   android heap print methods <handle>
Objection mobile runtime exploration: android

Contains subcommands to work with Android specific features. These include
shell commands, bypassing SSL pinning and simulating a rooted environment.
Objection mobile runtime exploration: commands.save

Command: commands save

Usage: commands save

Saves all unique commands that have been run in the current session to a file.
The file path will be displayed after saving.

Examples:
   commands save
Objection mobile runtime exploration: android.heap.print.fields

Command: android heap print fields

Usage: android heap print fields <object handle>

Prints instance fields for a Java object handle. This displays all accessible 
field values for the specified object, useful for inspecting object state.

Examples:
   android heap print fields 0x12345678
Objection mobile runtime exploration: android.intent.implicit intents

Command: android intent implicit_intents

Usage: android intent implicit_intents

Starts a hook to analyze implicit intents during runtime. Optionally add a backtrade by adding --dump-backtrace

Examples:
   android intent implicit_intents
Objection mobile runtime exploration: android.keystore.list

Command: android keystore list

Usage: android keystore list

Lists aliases in the current applications 'AndroidKeyStore' KeyStore. Each alias
is queried for its type which will be either a certificate or a key.

Ref: https://developer.android.com/reference/java/security/KeyStore.html

Examples:
   android keystore list
Objection mobile runtime exploration: android.hooking.set.return value

Command: android hooking set return_value

Usage: android hooking set return_value "<fully qualified class>" "<overload if needed>" <true / false>

Sets a methods return value to always be true / false. This could be
a useful module to use in cases where generic SSL pinning or root
detection / simulations are possible.

If an overload is not specified, all overloads for the base methods
will be modified.

NOTE: This is only possible on methods that return a boolean. While
methods that don't return booleans can be hooked, the results may be
unpredictable.

Examples:
   android hooking set return_value com.example.test.rootUtils.isRooted false
   android hooking set return_value com.example.test.rootUtils.isRooted "java.lang.String" false
   android hooking set return_value com.example.test.encryption.hasKey.overload("java.lang.String") true
   android hooking set return_value com.example.test.communication.setPinningType.overload("java.lang.String", "[B") false
Objection mobile runtime exploration: ui.alert

Command: ui alert

Usage: ui alert (optional: "<alert message>")

Displays an alert popup on iOS devices, or a Toast message on Android devices.
This is useful to demonstrate that the application was successfully hooked. Providing
an alert message will display that message instead of the default.
Note: Currently, once the iOS alert message has been displayed, dismissing the message
unfortunately crashes the application.

Examples:
   ui alert
   ui alert 'custom message!'
Objection mobile runtime exploration: ios.ui.alert

Command: ios ui alert

Usage: ios ui alert (optional: "<alert message>")

Displays an alert popup on an iOS device. A message to display may be specified
optionally.

Examples:
   ios ui alert
   ios ui alert 'my message'
Objection mobile runtime exploration: android.ui.screenshot

Command: android ui screenshot

Usage: android ui screenshot <local png destination>

Screenshots the current foregrounded Activity and saves it as a PNG locally.
If the `.png` extension is not used in the resultant filename, it will be automatically
added.

Examples:
    android ui screenshot application_image
    android ui screenshot app_screenshot.png
Objection mobile runtime exploration: android.shell exec

Command: android shell_exec

Usage: android shell_exec <command to run>

Execute a shell command on an android device. These commands are run from within
the security context of the application that is being instrumented.

Examples:
   android shell_exec id
   android shell_exec ls -lah /
   android shell_exec rm /data/data/user/0/somefile
Objection mobile runtime exploration: commands

Command: commands

Usage: commands <subcommand>

Contains subcommands for working with commands executed in the current session.

Examples:
   commands history
   commands save
   commands clear
Objection mobile runtime exploration: android.ui.FLAG SECURE

Command: android ui FLAG_SECURE

Usage: android ui FLAG_SECURE <true/false>

Control the value of FLAG_SECURE for the current Activity. Setting the value
to false in activities where it is true by default may enable you to take
screenshots using the hardware keys.

NOTE: This command currently crashes the target application on 32bit devices due to
an SELinux DENY. For more information see this PR:
    https://github.com/sensepost/objection/pull/24

Examples:
    android ui FLAG_SECURE false
Objection mobile runtime exploration: memory.search

Command: memory search

Usage: memory search "<pattern>" (optional: --string) (--offsets-only)

Search the current processes' heap for a pattern. A pattern is represented by a
byte sequence such as eb ff aa. It is also possible to specify wildcards such as
eb ff ?? aa, indicating that you are looking for a pattern that starts with eb ff,
has any other byte and then has aa.
It is also possible to provide a raw string, which should be suffixed with the
--string flag, indicating to the command that it should convert the string to
bytes before executing the search. Wildcards are not supported in string searches.

Output may be controlled primarily with the --offsets-only flag which indicates
wether a small hexdump of matched memory regions should occur, or if only the
matched offsets should be printed.

Examples:
   memory search "41 41 41 41"
   memory search "41 ?? de ad"
   memory search "deadbeef" --string
Objection mobile runtime exploration: android.hooking.list.classes

Command: android hooking list classes

Usage: android hooking list classes

List the classes *currently loaded*. As the target application gets used
more, this command will return more classes.

Examples:
   android hooking list classes
Objection mobile runtime exploration: reconnect

Command: reconnect

Usage: reconnect

Attempts to reconnect to the Frida Gadget specified with --gadget on startup.
The connection mode (ie: usb / network) can not be changed unless the repl
is restarted.

Examples:
   reconnect
Objection mobile runtime exploration: android.heap.print.methods

Command: android heap print methods

Usage: android heap print methods <object handle> [--without-arguments]

Prints instance methods available for a Java object handle. This displays all
methods that can be called on the object, with optional method signatures.

Flags:
   --without-arguments   Do not display method argument information

Examples:
   android heap print methods 0x12345678
   android heap print methods 0x12345678 --without-arguments
Objection mobile runtime exploration: ios.heap.search.instances

Command: ios heap search instances

Usage: ios heap search instances <class name>

Searches for live instances of a particular Objective-C class on the heap.
Returns all instances currently in memory for the specified class.

Examples:
   ios heap search instances NSString
   ios heap search instances UIViewController
Objection mobile runtime exploration: sqlite.execute.query

Command: sqlite execute query

Usage: sqlite execute query <sql query>

Execute a query against the cached copy of the connected SQLite database.
If your changes need to be effective on the device, execute the `sqlite sync`
command to upload the modified database back to the device.

Examples:
   sqlite execute query select * from data
   sqlite execute query delete from data
Objection mobile runtime exploration: ios.heap.evaluate

Command: ios heap evaluate

Usage: ios heap evaluate <object address> <javascript> [--inline]

Evaluates JavaScript on an Objective-C object on the heap. This allows complex
operations and transformations using Frida's JavaScript runtime.

Flags:
   --inline   Evaluate inline without multiline input

Examples:
   ios heap evaluate 0x12345678 "[obj methodWithArg:123]"
   ios heap evaluate 0x12345678 "[obj methodWithArg:123]" --inline
Objection mobile runtime exploration: ios.hooking.list.class methods

Command: ios hooking list class_methods

Usage: ios hooking list class_methods <class_name> (--include-parents)

Lists the methods within an Objective-C class. Adding the --include-parents
flag will also list methods available due to class inheritance.

Examples:
   ios hooking list class_methods KeychainDataManager
   ios hooking list class_methods KeychainDataManager --include-parents
Objection mobile runtime exploration: android.deoptimize

Command: android deoptimize

Usage: android deoptimize

Forces the Android Runtime VM to execute code in the interpreter instead of 
using any compiled/optimized code. This is useful for dynamic analysis and can
help with hooking and tracing operations.

Examples:
   android deoptimize
Objection mobile runtime exploration: ios.ui

Contains subcommands to interact with the iOS user interface. This includes commands
to dump the current view hierarchy as well as bypassing screens that require TouchID
to proceed.
Objection mobile runtime exploration: memory.dump.from base

Command: memory dump all

Usage: memory dump <base address> <size to dump> <local destination>

Dumps memory from within the current process from a base address, for a set number
of bytes to a local file specified by local destination. For example addresses and
sizes, the `memory list modules` command may be used.
Specifying addresses or sizes that are outside of the current processes sandbox
has a *high* chance of crashing the application. Use with caution.

Examples:
   memory dump from_base 0x10009c000 442368 main
   memory dump from_base 0x10f88e000 548864 CoreAudio
Objection mobile runtime exploration: ios.ui.screenshot

Command: ios ui screenshot

Usage: ios ui screenshot <local png destination>

Screenshots the current foregrounded UIView and saves it as a PNG locally.
Note: Does not work at the moment, may actually need a jailbroken device.

Examples:
   ios ui screenshot screenshot.png
Objection mobile runtime exploration: ios.ui.touchid bypass

Command: ios ui touchid_bypass

Usage: ios ui touchid_bypass

Hooks into the -[LAContext evaluatePolicy:localizedReason:reply:] selector and
replies with a successful message from the operating system when a touchID prompt
is dismissed. This is useful in cases where the application relies solely on the
operating system to tell it if a fingerprint read was successful or not.
Note: This does *not* bypass cases where TouchID is needed to decrypt a keychain
entry, simply because the actual data itself is not stored in the keychain but
instead lives in the Secure Enclave. The keychain simply contains a token to the
data itself.

Examples:
   ios ui touchid_bypass
Objection mobile runtime exploration: ls

Command: ls

Usage: ls (optional: <directory on remote device>)

Display the contents of a directory on the mobile device. The output details
the permissions of the directory in question, as well as those for each file
and directory within. If no directory is specified, the current working
directory is assumed and listed.

Examples:
   ls Library/Caches
   ls /
   ls
Objection mobile runtime exploration: android.hooking.get.current activity

Command: android hooking get current_activity

Usage: android hooking get current_activity

Gets the currently foregrounded Android Activity. This is useful for identifying
which Activity is currently displayed to the user.

Examples:
   android hooking get current_activity
Objection mobile runtime exploration: frida

Command: frida

Usage: frida

Displays information about Frida. This includes the version of the Frida gadget,
process architecture and platform.

Examples:
   frida
Objection mobile runtime exploration: ios.jailbreak.disable

Command: ios jailbreak disable

Usage: ios jailbreak disable

Attempts to disable Jailbreak detection on iOS devices. This is achieved by
hooking the NSFileManager fileExistsAtPath method, and checking if it was
called with a path to common Jailbroken path artifacts. Calls to the fork()
method are also hooked and will respond with a 0, indicating that it was
unsuccessful.

Examples:
   ios jailbreak disable
Objection mobile runtime exploration: android.hooking.list.activities

Command: android hooking list activities

Usage: android hooking list activities

List all the Activities that have been specified by the AndroidManifest.xml.
Activity classes found using this command could be used with the
`android intent launch_activity` command to launch them.

Examples:
   android hooking list activities
Objection mobile runtime exploration: ios.bundles.list frameworks

Command: ios bundles list_frameworks

Usage: ios bundles list_frameworks (optional: --include-apple-frameworks) (optional: --full-path)

Returns all of the application's bundles that represent frameworks. Only 
frameworks with one or more Objective-C classes in them are included. [1]

Output includes the frameworks executable, bundle name and version. The path
value is truncated by default, however, adding the --full-path flag would
print the entire path to the framework.

The --include-apple-frameworks flag signals the command to also output
bundles that form part of the com.apple package namespace. By default this
is hidden and only external frameworks not in the com.apple namespace is
returned.

[1] https://developer.apple.com/documentation/foundation/nsbundle/1408056-allframeworks?language=objc

Examples:
   ios bundles list_frameworks
   ios bundles list_frameworks --include-apple-frameworks
   ios bundles list_frameworks --include-apple-frameworks --full-path
   ios bundles list_frameworks --full-path
Objection mobile runtime exploration: ios.ui.biometrics bypass

Command: ios ui biometrics_bypass

Usage: ios ui biometrics_bypass

Hooks the iOS Biometrics LAContext and responds with successful authentication.
This allows bypassing Touch ID/Face ID checks for testing purposes.

Examples:
   ios ui biometrics_bypass
Objection mobile runtime exploration: android.hooking.list.services

Command: android hooking list services

Usage: android hooking list services

List all the Services that have been registered at Runtime as well
as those specified by the AndroidManifest.xml.

Examples:
   android hooking list services
Objection mobile runtime exploration: sqlite.disconnect

Command: sqlite disconnect

Usage: sqlite disconnect

Disconnect from the currently connected SQLite database file. This command will clean
the locally cached version of the database file. If you made changes you want to save,
run the `sqlite sync` command before disconnecting. This command is also run if the
REPL is existed.

Examples:
   sqlite disconnect
Objection mobile runtime exploration: memory.replace

Command: memory replace

Usage: memory replace <hex pattern> <replacement> [--string-pattern] [--string-replace]

Searches for and replaces a pattern in the application's memory. This modifies
the running process memory directly.

Flags:
   --string-pattern   Interpret pattern as a string instead of hex
   --string-replace   Interpret replacement as a string instead of hex

Examples:
   memory replace "41 42 43" "44 45 46"
   memory replace "hello" "world" --string-pattern --string-replace
Objection mobile runtime exploration: android.hooking.list.class methods

Command: android hooking list class_methods

Usage: android hooking list class_methods <class_name>

Lists the methods declared in a Java class, together with the arguments
that they may required using getDeclaredMethods().

Examples:
   android hooking list class_methods com.example.utils.RootUtils
   android hooking list class_methods com.test.Helpers.Communications
Objection mobile runtime exploration: jobs.kill

Command: jobs kill

Usage: jobs kill <job uuid>

Kills a running job identified by its UUID. When a job is killed, objection will
unload the Fridascript from the process' memory.
Examples:
   jobs kill 9415c4c7-2824-46a5-8539-d2d35ba2158c