🔨 Break Java Reverse Engineering form Memory World!

Wallbreaker is a useful tool to live analyzing Java heap, powered by frida. Provide some commands to search object or class from the memory, and beautifully visualize the real structure of the target.

Want to know real data content? list item? map entries? Want to know about implementation of the interface? Try it! What you see is what you get!

pip3 install objection

mkdir -p ~/.objection/plugins/
git clone https://github.com/hluwa/Wallbreaker ~/.objection/plugins/Wallbreaker

objection -g com.app.name explore -P ~/.objection/plugins

or

objection -g com.app.name explore
plugin load ~/.objection/plugins/Wallbreaker

plugin wallbreaker objectsearch java.util.HashMap
plugin wallbreaker objectdump <object-handle>

[return all matched class]

[return all matched object-handle and toString]

[
   pretty print class structure: fields declare, static field value, methods declare.
      set --fullname to display package name of type name.
]

[
   pretty print object structure: fields declare and value, methods declare.
      set --fullname to display package name of type name;
      set --as-class to cast instance type(super class, not interface).
   if instance is a collection or map, dump all entries.
]