CRcrowfunder·Sep 15, 2025
As far as I'm aware it is possible to use Frida without rooting, by using Objection
https://github.com/sensepost/objection
In Wanted to spy on my dog, ended up spying on TP-Linksensepost
objection
Python2017–2025
sensepost / objection
objection
📱 objection - runtime mobile exploration
8Distinct people
8Mentions
0Explicit recommenders
9.5KGitHub stars
What to know before exploring
What it is
📱 objection - runtime mobile exploration
GitHub
Where it is used
No documented product use has been verified yet.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
No other repository is repeatedly linked in the same discussions.
This week on Hacker News
Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:03:16 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year8 dated mentions
Observed mentions: 2017-07-13 07:18:41 UTC to 2025-09-15 20:39:46 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 2 | 2 | 0 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 1 | 0 | 1 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 1 | 1 | 0 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 0 | 0 | 0 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 1 | 0 | 1 |
What Hacker News says
8 sourcesCan use frida-sslkeylog to extract the keys on Android, and put it into Wireshark:
https://github.com/saleemrashid/frida-sslkeylog
This require a rooted phone.
Or you can patch the app with objection, so you don’t need the root:
https://github.com/sensepost/objection/wiki/Patching-Android...
Can download the APK from places like https://apkpure.com/
In Decrypting your own HTTPS traffic with WiresharkThis is true, by default Android apps do not trust user-installed certificate authorities. IMO the easiest solution if you're doing security testing on a dedicated device is MagiskTrustUserCerts[1]. If you're not testing on a dedicated device or you don't want to root the device, I'd recommend using the objection[2] tool which has a guided mode for patching an apk, and you can modify the manifest to add your CA or to trust all user-installed CAs.
[1]: https://github.com/NVISOsecurity/MagiskTrustUserCerts
[2]: https://github.com/sensepost/objection/wiki/Patching-Android...
In Mitmproxy 8Objection: Assess security posture of iOS and Android apps without jailbreak
2 points · Open discussionYes, A tool called Objection can do it. You have to modify and re-sign the app you are interested in bypassing. Requires a developer account and the .ipa of the app you want to work with.
https://github.com/sensepost/objection
In Tracking my phone's silent connectionsYes, and there are tools to do exactly that. https://github.com/sensepost/objection
In Facebook Really Is Spying on You, Just Not Through Your Phone's MicObjection – runtime mobile exploration
2 points · Open discussionShow HN: Objection – runtime mobile exploration
2 points · Open discussion