iOS JailMonkey Jailbreak Detection Bypass
4 views
52102820...
Description
Frida script to bypass JailBreak detection for the iOS application using JailMonkey Class.
How to Use
Download the script and run it with Frida CLI:
Download ScriptThen run with Frida:
frida -U -f YOUR_PACKAGE_NAME -l ios-jailmonkey-jailbreak-detection-bypass.js
Replace YOUR_PACKAGE_NAME with the target app's package name.
Source Code
JavaScript
console.warn(`[+] JailMonkey JailBreak Detection Bypass`);
/**
* [*] Twitter: @DarkLotusKDB (Kamaldeep Bhati)
* [*] DM for credit, then i will update.
*/
console.warn(`################################################`);
if (ObjC.available) {
try {
var className = "JailMonkey";
var funcName = "- isJailBroken";
var hook = eval('ObjC.classes.' + className + '["' + funcName + '"]');
Interceptor.attach(hook.implementation, {
onLeave: function(retval) {
console.log("[*] Class Name: " + className);
console.log("[*] Method Name: " + funcName);
console.log("\t[-] Type of return value: " + typeof retval);
console.log("\t[-] Original Return Value: " + retval);
var newretval = ptr("0x0")
retval.replace(newretval)
console.log("\t[-] New Return Value: " + newretval)
}
});
} catch (err) {
console.log("[!] Exception2: " + err.message);
}
} else {
console.log("Objective-C Runtime is not available!");
}
Comments