Giter Club home page Giter Club logo

Comments (12)

zuhairkareem avatar zuhairkareem commented on September 28, 2024 2

We also had our pentest team bypass using Frida, Did anybody find any solution, Thanks

from jail-monkey.

mvn-cuongle-dn avatar mvn-cuongle-dn commented on September 28, 2024 1

Hi, I facing this issue. I tried to replace by Google Play Integrity API and it worked perfect. I think this's the best solution to check rooted device Android
https://developer.android.com/google/play/integrity/overview?hl=en

from jail-monkey.

arpansharma7474 avatar arpansharma7474 commented on September 28, 2024

Hi
I am facing the same issue. Is there any update on this?

@poPaTheGuru Did you find a fix?

Thanks

from jail-monkey.

poPaTheGuru avatar poPaTheGuru commented on September 28, 2024

Hello @arpansharma7474 , we did not find a fix yet, but at this moment, the pen test team categorized this issue just as informational so we are waiting for any updates from the jail-monkey team

from jail-monkey.

RogerBrusamarello avatar RogerBrusamarello commented on September 28, 2024

Any updates in this topic?

from jail-monkey.

pradsirwt avatar pradsirwt commented on September 28, 2024

Hi Team,

Do we have any progress here ?

Many thanks
Pradeep

from jail-monkey.

sumi-svmx avatar sumi-svmx commented on September 28, 2024

Ended up going with https://github.com/darvincisec/DetectFrida

from jail-monkey.

pradsirwt avatar pradsirwt commented on September 28, 2024

Hi @sumi-svmx How did you implement this in React native?

from jail-monkey.

sumi-svmx avatar sumi-svmx commented on September 28, 2024

Copy the code from c directory from https://github.com/darvincisec/DetectFrida to your project. Add this to app build.gradle

    externalNativeBuild {
        cmake {
            path "src/main/c/CMakeLists.txt"
            version "3.10.2"
        }
    }

Modify void detectfrida() as JNI method

JNIEXPORT void JNICALL
Java_com_example_package_FridaDetectClass_fridaDetect(JNIEnv *env, jobject thiz, jobject listener) {
    char *filePaths[NUM_LIBS];

    parse_proc_maps_to_fetch_path(filePaths);
    for (int i = 0; i < NUM_LIBS; i++) {
        bool checksum = fetch_checksum_of_library(filePaths[i], &elfSectionArr[i]);
        if ((filePaths[i] != NULL) && checksum){
            free(filePaths[i]);
        }
    }
    (*env)->GetJavaVM(env, &g_VM);
    jobject callback = (*env)->NewGlobalRef(env, listener);
    pthread_t t;
    pthread_create(&t, NULL, (void *) detect_frida_loop, callback);
}

Wherever "..Act Now" is, replace it with code to return the value. Invoke the listener on java side in MainActivity

from jail-monkey.

pradsirwt avatar pradsirwt commented on September 28, 2024

Thanks so much @sumi-svmx , but Where do I change the detectfrida function? I can see that function in native-lib.c, Should I change there?

Could you share a sample repo of the integration if you don't mind?

from jail-monkey.

GaneshGK34 avatar GaneshGK34 commented on September 28, 2024

Can someone explain this . I am also facing the same

from jail-monkey.

imanshul avatar imanshul commented on September 28, 2024

Please use below library to detect Frida and avoid frida to bypass root checks

react-native-detect-frida

If you find this library helpful, please consider giving it a star ⭐

@mvn-cuongle-dn @GaneshGK34 @pradsirwt

from jail-monkey.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.