FakeXposed icon indicating copy to clipboard operation
FakeXposed copied to clipboard

Can't Bypass XposedDetector from vvb2060

Open hwangjr opened this issue 3 years ago • 3 comments

I found a XposedDetector from vvb2060, and test in: Device : OPPO R9s, Android 6.1, API 23 , Build Number R9s_11_A.11_170160 Others: Xposed 89, DataFilter 1.5, Xposed Detector 1.1 Here is the XposedDetector source code:

https://github.com/vvb2060/XposedDetector

The XposedDetector shows antied xposed which means fake xposed has failed.

https://github.com/vvb2060/XposedDetector/issues/3 this issue may help how to bypass the detector.

hwangjr avatar Mar 21 '21 11:03 hwangjr

There is not much time to maintain it at the moment. More specific rules need to be explored. If there is a good anti-detection implementation, you can submit a pull request.

sanfengAndroid avatar Mar 21 '21 11:03 sanfengAndroid

@hwangjr Can you test the app? https://www.coolapk.com/apk/io.github.vvb2060.mahoshojo Click the 下载apk button to download the apk, app supports English.

vvb2060 avatar May 01 '21 13:05 vvb2060

@vvb2060 yep, this app also can detect the environment is abnormal.

found files modified by magisk modules.
zygotes behave abnormally
init.rc is modified
found riru

Debugging mode is enabled
found magisk or twrp files

hwangjr avatar May 08 '21 01:05 hwangjr