Tool
Wallbreaker
Frida-based explorer for the live Java heap of a running Android app, loaded as an objection plugin or used through its small Python package. classsearch and objectsearch find loaded classes by pattern and live instances of a class, returning object handles; classdump prints a class's declared fields, static field values and methods, and objectdump prints an instance's field values, can view it as a superclass and lists every entry of a collection or map. Analysts use it to see the runtime data and concrete implementations that static decompilation leaves open.
- Targets
- App
- Category
- Android tools
- Relationship
- Foundation tool
- Sources reviewed
Requirements & limits
- Archived by its owner and read-only. Latest release at review: 1.0.3, tagged and uploaded to PyPI on 2022-05-10 with no release assets; the only later commit adds the GPL-3.0 LICENSE file (2023-03-26).
- README installs objection with pip and clones the repository into objection's plugin folder, then loads it with explore -P or plugin load and runs the commands as plugin wallbreaker …. The PyPI package depends on frida and click and ships the command agent as a library; its connection helper attaches through Frida to a USB or remote device by process name or PID, and wallbreaker/main.py defines no command-line entry point. setup.py classifiers list Python 3.4–3.8 on macOS, Windows and Linux.
- The target is a running Android app reachable by Frida. The bundled agent.js is compiled from the repository's own TypeScript sources with frida-compile 9 and Frida 14-era typings; it calls the global Java bridge and does not bundle frida-java-bridge, which Frida 17 (May 2025) no longer provides to ordinary scripts. Compatibility with current Frida and objection releases was not tested.
- GPL-3.0. Output is a structural view of objects at one moment in one process, not decompiled source. Nothing was installed or run in this review; the reviewed sources establish no REA connection.
About this entry
The description was reviewed against primary sources. This does not establish runtime testing, security auditing or verified compatibility.
Primary sources
- README.md GitHub · hluwa/Wallbreaker · Revision f27f2da
- setup.py GitHub · hluwa/Wallbreaker · Revision f27f2da
- __init__.py GitHub · hluwa/Wallbreaker · Revision f27f2da
- wallbreaker/connection.py GitHub · hluwa/Wallbreaker · Revision f27f2da
- wallbreaker/agent/command/__init__.py GitHub · hluwa/Wallbreaker · Revision f27f2da
- agent/package.json GitHub · hluwa/Wallbreaker · Revision f27f2da
- agent/src/objectkit.ts GitHub · hluwa/Wallbreaker · Revision f27f2da
- makefile GitHub · hluwa/Wallbreaker · Revision f27f2da
- LICENSE GitHub · hluwa/Wallbreaker · Revision f27f2da
- https://github.com/hluwa/Wallbreaker/releases/tag/1.0.3
- https://pypi.org/project/wallbreaker/1.0.3/
- https://frida.re/news/2025/05/17/frida-17-0-0-released/
More in Apps
- axmlprinter · Tool
- FlowDroid · Tool
- Enjarify · Tool
- MagiskFrida · Tool
- Aegis: trace a login-code calculation · Case study
- Notion: trace the clipboard bridge · Case study