jail-monkey icon indicating copy to clipboard operation
jail-monkey copied to clipboard

Bypass Jailbreak using Liberty Lite

Open hanifmhd opened this issue 4 years ago • 7 comments

Hi,

I want to ask, can this lib be bypassed using Liberty Lite? I want to make sure that jail-monkey prevents bypass from any tools, including Liberty Lite.

Thank you.

hanifmhd avatar Feb 24 '21 06:02 hanifmhd

I tested out Liberty Lite based on this comment and I can confirm that this library can be bypassed.

Tested on iPhone 8 iOS 14.2

hannigand avatar Feb 25 '21 08:02 hannigand

I tested out Liberty Lite based on this comment and I can confirm that this library can be bypassed.

Tested on iPhone 8 iOS 14.2

Thanks for the answer. Do you have any suggestion how to prevent it? or any lib for jailbreak that can prevent from bypassing?

hanifmhd avatar Feb 25 '21 08:02 hanifmhd

My Pen Test also failed because the guys were using Liberty Lite. Is there any way to prevent this

anupamhore avatar Apr 05 '21 04:04 anupamhore

My Pen Test also failed because the guys were using Liberty Lite. Is there any way to prevent this

@anupamhore did you found any possible solution yet ?

harshitDewan avatar Apr 12 '21 10:04 harshitDewan

Hi, Yes I have found a solution. Please implement from the below steps.

  1. Add these two attached files in the xcode project2. In your AppDelegate.m do the following    import "JB.h"
  • (BOOL)application:(UIApplication *)application didFinishLaunchingWithOptions:(NSDictionary *)launchOptions

{

….

 //Jailbreak detection, if it is true, show alert, then exit app

  if (!isSecurityCheckPassed()) {

      UIAlertController *alertController = [UIAlertController

                                            alertControllerWithTitle:@"Jailbroken Device is Detected"

        message:@"Your device might have been modified. In order to protect your privacy, we will not run the application on this device. It is recommended to have your device checked by the device manufacturer."

        preferredStyle:UIAlertControllerStyleAlert];

      UIAlertAction *cancelAction = [UIAlertAction actionWithTitle:@"Ok"

                                                              style:UIAlertActionStyleDefault

                                                            handler:^(UIAlertAction *action) {

        exit(1);

      }];

      [alertController addAction:cancelAction];

      [self.window.rootViewController presentViewController:alertController animated:YES completion:nil];

  }

…..

…..

}

Considering you already have the jailbreak code in the react native side with the jail monkey plugin, use this in the xcode. It will work    

On Monday, 12 April, 2021, 06:40:41 pm GMT+8, harshitDewan ***@***.***> wrote:  

My Pen Test also failed because the guys were using Liberty Lite. Is there any way to prevent this

@anupamhore did you found any possible solution yet ?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe.

anupamhore avatar Apr 12 '21 11:04 anupamhore

"Add these two attached files in the xcode project2" @anupamhore seems attachment didn't went through! Can you please reattached files?

  1. import "JB.h" is it referring to jail-monkey plugin for react native ? (I have jail-monkey installed and setup done on react-native side).
  • Currently using jail-monkey v2.3.3. On importing JB.h file is not found.
  1. Please help with logic used for "isSecurityCheckPassed", what checks are made in it and how to add it in AppDelegate.m
  2. For me Pen Test failed in android by using Magisk hide - Any suggestions for android as well?

Also any idea how can we test it in iOS Simulator?

harshitDewan avatar Apr 14 '21 08:04 harshitDewan

Share me your personal Id. I will communicate with you On Wednesday, 14 April, 2021, 04:32:51 pm GMT+8, harshitDewan @.***> wrote:

@anupamhore

  • import "JB.h" is it referring to jail-monkey plugin for react native ? (I have jail-monkey installed no other plugin as of now).
  • Please help with logic used for "isSecurityCheckPassed", what checks are made in it and how to add it in AppDelegate.m
  • For me Pen Test failed in android by using Magisk hide - Any suggestions for android as well?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe.

anupamhore avatar Apr 14 '21 12:04 anupamhore