Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jailbreak detection bypass with Frida, Magisk DenyList and Liberty Lite tools #34

Open
PrabhuMoorthy opened this issue Nov 24, 2022 · 1 comment

Comments

@PrabhuMoorthy
Copy link

Hi,

VAPT(Vulnerability Assessment and Penetration Testing) team able to do bypass the root detection/Jailbroken devices.

Using latest flutter_jailbreak_detection package
flutter_jailbreak_detection: ^1.8.0

Is it possible to detect Frida , Magisk DenyList and Liberty Lite tools using flutter_jailbreak_detection package?

Steps to Root Detection Bypass using Frida tool:
• Install Frida using command - pip install Frida
• Then using https://github.com/frida/frida/releases/ repo download Frida Server for our case it was ARM
• Then push Frida server to device using command - adb push frida-server /data/local/tmp/
• Take shell to device using command - adb shell and go to /data/local/tmp directory.
• Now run Frida server using command ./frida-server
• Now, if everything works and Frida server is on we can dump all running processes using command - frida-ps -U
• Then I bypassed root detection using command - frida --codeshare dzonerzy/fridantiroot -f com.xxxxx.xxxxxx -U
• Hence we were able to bypass root detection.

Android app

IOS app

@jeroentrappers
Copy link
Owner

Yes, please implement and open a PR. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants