Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feedback #1

Open
Razer2015 opened this issue Oct 21, 2016 · 71 comments
Open

Feedback #1

Razer2015 opened this issue Oct 21, 2016 · 71 comments

Comments

@Razer2015
Copy link
Owner

Post any feedback on how it works!

@Yakie996
Copy link

works great for me 😄

@clodoux
Copy link

clodoux commented Oct 21, 2016

For me it's ok for the card, but it's sometimes to unable the debug mode to use the xposed app. Now i don't try a paiment ! I don't know if all is ok.

But Thanks

@Razer2015
Copy link
Owner Author

Razer2015 commented Oct 21, 2016

@clodoux
If you mean that it sometimes shows the Toast message saying to disable usb debugging, it's ok. It's something that I don't know how to bypass with xposed but I know how to make modified apk to bypass it. The thing is that it's only a message, it doesn't affect anything else.

It's this part of the code:
Image of code

All that obfuscated thing after getContentResolver() is "ADB_ENABLED". Now normally I would just make that method do nothing with xposed but since there is that super.onResume(), I can't because then the app crashes when it's not called.

@clodoux
Copy link

clodoux commented Oct 23, 2016

Ok thanks

@Xeph20
Copy link

Xeph20 commented Oct 25, 2016

Works great thank you very much!
Waited a long time for the app to work.

There is also another app that is blocked for root.
Do you think you can release a module for it also?

https://play.google.com/store/apps/details?id=be.bnpparibasfortis.helloprepaid&hl=nl
it should be very simular to this one
https://play.google.com/store/apps/details?id=be.bnpparibasfortis.bnppfprepaid

Would be cool if you can do it for one or both apps!

Thanks again

@Razer2015
Copy link
Owner Author

@Xeph20 Well the hello prepaid doesn't look too hard at the first climpse so maybe.
Image of root

@Razer2015
Copy link
Owner Author

@Xeph20
Copy link

Xeph20 commented Oct 25, 2016

Works great on both apps! Thanks man you are the best!

@CapitalH
Copy link

CapitalH commented Nov 1, 2016

Any chance you can create a module for NAB banking app to not detect root so can use NFC pay wave with app. Thanks

@Razer2015
Copy link
Owner Author

@CapitalH
I found two detectors but couldn't test either of them since I guess the test is after logging in? I don't have account there so I can't log in.

Anyways, here is a module that should bypass the two I found, please tell me feedback on how it works:
https://github.com/Razer2015/NABRootBypasser/releases/

@CapitalH
Copy link

CapitalH commented Nov 1, 2016

@Razer2015

Hi, geez that was quick! Thanks. Haven't had a chance to test the pay wave feature yet but when I log in to set it up I still get this msg

https://drive.google.com/file/d/0B146O8jrEtRuVHc1LVktbzJQbjQ/view?usp=drivesdk

I'm using HTC M9 Android 6.0.1 Viperone 5.2.0 Could it just be the non-stock Rom? Thanks.

@Razer2015
Copy link
Owner Author

@CapitalH

I can't seem to find the source of that root detection :(. I however found some method which checks from sharedPreferences if there is a value saved with name "root_exists". So have you tried by deleting all the saved data for that app and then re-open with my module enabled?

@CapitalH
Copy link

CapitalH commented Nov 2, 2016

@Razer2015

Hi, yes I tried deleting data, force stop and re open with module activated. Also uninstalled app, and reinstalled app with reboots along the way.

Yes there is a value in sharedpreference:

https://drive.google.com/file/d/0B146O8jrEtRuelQ5Y3RkbkIyR0k/view?usp=drivesdk

Thanks

@Razer2015
Copy link
Owner Author

@CapitalH

Made it return always false when it reads it from the sharedPreferences. I have yet to find out where it does the actual check.

But you can try if this works (there might be even more hidden checks):
https://github.com/Razer2015/NABRootBypasser/releases/tag/v1.1

@CapitalH
Copy link

CapitalH commented Nov 4, 2016

@Razer2015

Hi, still getting the "restore official Android" msg inside the app. Also, sharedpreference file value is still "true"? Does the mod overwrite that?

Also noticed in xposed, your mod version is still 1.0?

@CapitalH
Copy link

CapitalH commented Nov 4, 2016

@Razer2015

Anything in au/com/nab/coreSdk/device/Rooted?

I don't know how to code but I'm just looking around for anything that might help

@Razer2015
Copy link
Owner Author

Razer2015 commented Nov 4, 2016

@CapitalH

Also noticed in xposed, your mod version is still 1.0?

When I pushed the commit to github, I had forgotten to add version changes. I however changed 1.0 to 1.1 in AndroidManifest.xml before I built the APK. Apparently I should have changed it from the build.gradle as well. Sorry about that, I'm still pretty new to making android apps as well.

Anything in au/com/nab/coreSdk/device/Rooted?

That class calls the DeviceRootUtils.numberOfRootChecksTriggered() to determine the root. But my xposed module should return 0 every time.

Also, sharedpreference file value is still "true"?

I have yet to find where it does the actual check for the root with that but what I have made is so when it reads it from that file, it always returns false. No matter if it's true or false.

@CapitalH
Copy link

CapitalH commented Nov 4, 2016

@Razer2015

Please don't say sorry, you know a lot more than I do! What language do you learn to know these small files?

@Razer2015
Copy link
Owner Author

Razer2015 commented Nov 4, 2016

@CapitalH

What language do you learn to know these small files?

Once you decompile them with apktool, baksmali, etc.. They are in "smali" -format.

It would be so much easier if I had access to the root detection with my device :D, I could just add print commands here and there and then look the logcat log for output as to from where it just executed something. Now I have to looking on the smali level and it's not that easy, at least for me.

Not entirely sure but I guess the message you are seeing is printed because the apk at some point threw "RootDetectException" -error. There is however at least a few places where this gets thrown. I'll look if I can bypass them.

@Razer2015
Copy link
Owner Author

Razer2015 commented Nov 4, 2016

Sh^t, if I'm not wrong. It seems like the additional checking is done in the "libvisacryptov2x.so" -library. There is no exact call for root check, instead when it decrypts and encrypts data, it does the checking. And if it turns out to be rooted, it throws an "RootDetectException", which then tells the apk that the device is rooted.

I could possibly make it so the apk doesn't know rootdetectexception was thrown, but this might result in that decryption and encryption won't work and so even though the app runs without the rooted error, it might not be running correctly.

This should have the RootDetectException blocked. If I just correctly blocked it with Xposed :D
https://github.com/Razer2015/NABRootBypasser/releases/tag/v1.2

@sagredo
Copy link

sagredo commented Nov 5, 2016

@Razer2015
Copy link
Owner Author

@CapitalH
Copy link

CapitalH commented Nov 5, 2016

@Razer2015

Hi, OK well I guess if it breaks it and prevents everything from working properly there's not much point in doing that. Hopefully the build a version of the app that allows rooted devices to use their pay feature - fingers crossed! Thanks

@Razer2015
Copy link
Owner Author

@CapitalH

Did you try my latest patch?
https://github.com/Razer2015/NABRootBypasser/releases/tag/v1.2

It might very well be possible that it works as well. There is a 50/50 chance.

@CapitalH
Copy link

CapitalH commented Nov 6, 2016

@Razer2015

Sorry, I didn't realise you'd done that.

It looks like you've scratched on something but still getting an in-app msg.

I uninstalled the old mod and installed the new version. Restarted and then cleared banking app data. Opened banking app and went to setup pay wave.

First I got this msg :

https://drive.google.com/file/d/0B146O8jrEtRuUGY5MkFLTUNsa00/view?usp=drivesdk

So I forced close app, waited a few minutes and tried again. This time I got to turn the feature on and setup a passcode for the feature. But from there got this msg:

https://drive.google.com/file/d/0B146O8jrEtRuTG9GZHBlTFpTRGM/view?usp=drivesdk

Hope those point u go a right direction

@sagredo
Copy link

sagredo commented Nov 6, 2016

@Razer2015, the app launch OK. This week ,i try used the app in the real world. I tell you if everything works ok.

Thank you very much for your effort

@ptrnmgr
Copy link

ptrnmgr commented Nov 7, 2016

thx so much!, i could finally install the app, hower did not try actual payment yet but evrything looks ok

could you do the same for the 'yelo play' app? rootcloak also doesn't work for that app

@Razer2015
Copy link
Owner Author

@CapitalH

I'll see if I can trace down that error message. Might be because of the very reason I stated before but we will see.

@sagredo

Thank you very much for your effort

No problems :)

@ptrnmgr
Have been looking inside the Yelo Play before when I tried cracking the Finnish MTV Katsomo app as well. They both have the same DRM and the root detection is inside the *.SO libraries. Unfortunately I don't know how to crack those :(.

@ptrnmgr
Copy link

ptrnmgr commented Nov 7, 2016

np, thank you for your answer... and for the bancontact app off course...

@Yakie996
Copy link

I am cerieus if you could make an mod for nougat using magisk? it can hide root for Android pay but not for Bancontact.. Maybe you can handle this? 😋

@csu333
Copy link

csu333 commented Mar 19, 2017

@Yakie996 As far as I understood how Magisk works, this is just impossible: Xposed allow modification of the application behavior while Magisk allows to fake changes to the system file system.

@ghost
Copy link

ghost commented Apr 19, 2017

Hi @Razer2015 ,
I see your doing some good work here. The bypass for bancontact works great thanks. I did see another request to bypass keytrade. Did you manage to do that? That would be awesome!

@csu333 I did see your surrogate, but I'm still not able to bypass. I might do something wrong but I have no idea what. All apps in list are lightgrey, is that good or bad? The keytrade app is also in that list.

Kind regards,

@csu333
Copy link

csu333 commented Apr 19, 2017 via email

@ghost
Copy link

ghost commented Apr 19, 2017

Hi @csu333
Thank you for your quick reply. So, I opened the keytrade in surrogate and clicked the arrows to enable it, it's now dark gray. But I'm still not able to bypass in keytrade. I also rebooted phone and tried again.

Am I still doing something wrong?

Kind regards,

@csu333
Copy link

csu333 commented Apr 20, 2017 via email

@ghost
Copy link

ghost commented Apr 20, 2017

Hi @csu333

That's very kind of you, thanks! I appreciate that you want to look in to this.

Kind regards,

@KevinDenys
Copy link

Doesn't work anymore :/

@sigfriedseldeslachts
Copy link

sigfriedseldeslachts commented Jun 5, 2017

It worked, but now it's broken.

@csu333
Copy link

csu333 commented Jun 8, 2017

I tried to find the new root detection mechanism but without success 😞

@khalidbutt786
Copy link

Hey Buddy, nice Tool ! Is there any possible way to start s-pushtan Sparkasse App? Couldn't even find one. Thx :)

@Razer2015
Copy link
Owner Author

Razer2015 commented Jun 20, 2017

I've updated the repository with the new root detection mechanism as well as uploaded the new module to Xposed repository.

@skillstarjr I looked into the S-pushTAN but it seems like the native code is crashing the app :/. libshieldxxxx.so library to be exact. I don't have a knowledge on cracking those so I can't bypass that one :(.

EDIT: Or does it crash for you @skillstarjr ? Or is it just because of my virtual machine?

@loesvs
Copy link

loesvs commented Jun 23, 2017

Hell yeah this works! Tried to use Bancontact with Rootcloak before but kept getting the security error. This module is just perfect.

The colleagues that have been paying for my drinks and ice creams will be grateful!

@nanabathman
Copy link

The update works! Thanks!

@loesvs
Copy link

loesvs commented Jul 5, 2017 via email

@Razer2015
Copy link
Owner Author

@Snorkeldink & @loesvs
Updated, please check if it works now:
https://github.com/Razer2015/BancontactRootBypasser/releases/tag/v1.2

@loesvs
Copy link

loesvs commented Jul 5, 2017

Yep it does. Such a quick fix!

@ghost
Copy link

ghost commented Jul 6, 2017

It does work ! Confirmed

@KevinDenys
Copy link

Works! Thanks

@loesvs
Copy link

loesvs commented Oct 17, 2017

Hi Razer! I'm afraid it stopped working again with Bancontact 2.5.0, despite the patch of October 1st. I've checked whether BancontactRootBypasser had been updated (it was), turned of developer tools and root, re-installed Bancontact 2.5.0 and it still failed, unfortunately. Would you know why?

@Razer2015
Copy link
Owner Author

@loesvs
Unfortunately no :( Could you possibly provide a logcat of the first fresh boot of that app? I could see if the xposed has success in hooking the methods or not. If they are hooking fine, then it's something kind of impossible for me to debug since it's working on my end. If they are not hooking, then you might have some other build version of the 2.5.0 🤔

@KevinDenys
Copy link

Running bancontact 2.5.0 and latest BancontactRootBypasser and the app is working fine? No problems here

@Droidphilev
Copy link

Hi,

I tried with BC 2.6.2. It seems that BC checks for XPosed now. I was able to run it after uninstalling Xposed. In other words: it also checks for XPosed framework (which your module needs of course :( )

@ptrnmgr
Copy link

ptrnmgr commented Oct 26, 2017

2.6.2 doesn't work anymore :-(

@ghost
Copy link

ghost commented Oct 26, 2017

I was tired of all the banking apps (and now others like snapchat/netflix/pokemongo) blocking rooted devices so I went with magisk ... So far all the banking apps I tried work fine with Magisk (provided you run an official rom that passes the google safetynet normally). I think it's time to switch from supersu to magisk (which does have an xposed module anyway). Thank you anyway for the work on this module.

@Droidphilev
Copy link

The problem isn't the root method (SuperSu and SUHide works fine for Bancontact). If you use Magisk together with systemless Xposed it also won't work simply becuase it looks for XPosed files (not the APK though). I tried earlier again: SuperSU + SUHide+ Xposed Installer: BC works fine. SuperSU+SUHide+Xposed Installer+Xposed= BC doesn't work.

@loesvs
Copy link

loesvs commented Jan 29, 2018

Not a fix of any kind, but just some additional information for other Bancontact user seeking to hide root, along the lines of what Snorkeldink posted earlier:

Recently I switched OSes from Fairphone Open OS to LineageOS. LineageOS comes with the option to root using a SU addon and it has almost all functions I previously used Xposed for already built in. For me, LineageOS is a decent Xposed-replacement... And if you turn off root in developers' settings, it is not detected by the Bancontact app anymore. After using Bancontact, you can just turn on root again. Hope the app won't get smarter.

@Razer2015, thank you so much for all the effort you put in the RootBypasser!

@shubhank1997
Copy link

@Razer2015 thanku for this man .. But can you help me with one thing ..

I want to bypass googlepay from detecting that I've already installed it in my phone and uninstalled it.. I want that it will find my
Phone every time as a new one without flashing it again and again...plzzz can u do me this favor ...

@Quantexx
Copy link

I see I'm late to the party. Does anyone have any luck with the Payconiq by Bancontact app?
I tried so many things yet it worked before so not sure what happened..
Magisk hide - nope
Renaming magisk - nope
Used Island - nope
Uninstalled busybox - nope
Disabled usb debugging and developper options - nope

At this point I think they just remembered that my device is not safe or something.. Any fix?

@haveneersrobin
Copy link

@Quantexx I got it working by adding it to Magisk Hide and renaming my Magisk: it took me a couple of tries though if I remember correctly (OnePlus 5T, rooted on OxygenOS, Android 10)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests