iOS Wrapper JailBreak Detection Bypass

by
4 views 8c6bf4ad...

Description

iOS application using WrapperUtil

How to Use

Download the script and run it with Frida CLI:

Download Script

Then run with Frida:

frida -U -f YOUR_PACKAGE_NAME -l ios-wrapper-jailbreak-detection-bypass.js

Replace YOUR_PACKAGE_NAME with the target app's package name.

Source Code

JavaScript
console.warn(`[+] JailBreak Bypass Via WrapperUtil Class`);
console.warn(`[*] Twitter: @DarkLotusKDB (Kamaldeep Bhati)`);
/**
 * SIG <3
 */
console.warn(`################################################`);


if (ObjC.available) {
    try {
        var className = "WrapperUtil";
        var funcName = "+ isJailbroken";
        var hook = eval('ObjC.classes.' + className + '["' + funcName + '"]');

        Interceptor.attach(hook.implementation, {
            onLeave: function(retval) {
                console.log("[*] Class Name: " + className);

                console.log("[*] Method Name: " + funcName);
                console.log("\t[-] Type of return value: " + typeof retval);
                console.log("\t[-] Original Return Value: " + retval);

                var newretval = ptr("0x0")
                retval.replace(newretval)

                console.log("\t[-] New Return Value: " + newretval)
            }
        });
    } catch (err) {
        console.log("[!] Exception2: " + err.message);
    }
} else {
    console.log("Objective-C Runtime is not available!");
}
Share this script:
Twitter LinkedIn

Comments

Login or Sign up to leave a comment.
Loading comments...