rootcloak icon indicating copy to clipboard operation
rootcloak copied to clipboard

Update RootCloak against RootBeer checks

Open prattpratt opened this issue 8 years ago • 2 comments

  • Remove tool-checker library hook as it cause crash.
  • Add hook for RootBeerNative.checkForRoot() native method.
  • Add hook for exec 'getprop' command.
  • Update hook for SystemProperties.get("ro.build.selinux").

prattpratt avatar Nov 25 '16 18:11 prattpratt

RootBeer also exposes a few public methods, which some apps call directly instead of using RootBeerNative.checkForRoot().

Using this PR as a basis, I added some hooks to override these methods in https://github.com/rowandh/rootcloak/commit/28ae8f9f2d3ba69796b65aed768882d0707b7d65

I'll submit a new PR with these additions.

rowandh avatar Jan 24 '17 07:01 rowandh

Examples of these checks are:

        RootBeer rootBeer = new RootBeer(this);
        boolean checkForBinary = rootBeer.checkForBinary("su");
        boolean checkForDangerousProps = rootBeer.checkForDangerousProps();
        boolean checkForRWPaths = rootBeer.checkForRWPaths();
        boolean detectTestKeys = rootBeer.detectTestKeys();
        boolean checkSuExists = rootBeer.checkSuExists();
        boolean checkForRootNative = rootBeer.checkForRootNative();

bluee avatar Mar 22 '17 23:03 bluee