iHide icon indicating copy to clipboard operation
iHide copied to clipboard

Decrypted binarry attached // Adding a bypass for a banking app

Open d3ibis opened this issue 2 years ago • 1 comments

Is your feature request related to adding support for an application that contains jailbreak detection?

Application Details

  • Application name: Bank Al Etihad
  • App Store link: https://apps.apple.com/jo/app/bank-al-etihad-%D8%A8%D9%86%D9%83-%D8%A7%D9%84%D8%A5%D8%AA%D8%AD%D8%A7%D8%AF/id1060048474
  • Decrypted Binary link: https://bit.ly/decrypted_binary
  • Affected version: Latest

How is the detection triggered?

  • On application launch

What does the application do when jailbreak is detected

  • Does not alert the user, silently exits ( Immediate crash )

Device Information (please complete the following information)

  • Device: [iPhone 7]
  • OS: [iOS 14.4.2]
  • Jailbreak Method [Checkra1n]
  • iHide Version [v1.0.3]

Describe the solution you'd like If you can add a bypass for this banking app.

Additional context To save you sometime, I've decrypted the app's binary (already attached a link for it) also I dumped it to have the headers, I found that it uses the class (ANSMetadata) with 2 methods: 1)Bool-ComputeIsJailbroken (this one does most of the checks like searching for Cydia & /bin/bash...etc). 2)Bool-isJailbroken (This one I didn't find what it does).

I tried to hook both of them with no luck, I'm at the beginning of programming so please forgive me not to provide much information.

NOTE: This banking app WILL NOT work even if I rebooted my device with no jailbreak, I MUST restore rootfs in order to make it work.

Much appreciated.

d3ibis avatar May 24 '22 23:05 d3ibis

@Kc57 Can u have a look please ?

d3ibis avatar Jun 03 '22 13:06 d3ibis