Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Native Test detection #26

Closed
nitanmarcel opened this issue May 6, 2024 · 3 comments
Closed

Native Test detection #26

nitanmarcel opened this issue May 6, 2024 · 3 comments
Labels
bug Something isn't working

Comments

@nitanmarcel
Copy link

nitanmarcel commented May 6, 2024

Describe the bug
An app called Native Detector, is able to detect a lot of changes to the system. The chances for the detection used there to be used in an actual app they are pretty small since it's closed sourced but maybe there's a way to hide them?

Steps To Reproduce

  1. Install https://t.me/nullptr_dev/98
  2. Open it
  3. Notice the detection spam

Context

  • Device: OnePlus6T
  • OS: Android 14 - custom ROM
  • Version APatch: 0.10.5
  • Other Root Module(s): QuickSwitch, systemless hosts, ZygiskNext, LSPosed, Zygisk Assistant
  • LSPosed Module(s): None in the system framework, just 1 to bypass SSL pinning in targeted apps

Logcat

Screenshot_20240506-105708_Native Test

@nitanmarcel nitanmarcel added the bug Something isn't working label May 6, 2024
@snake-4
Copy link
Owner

snake-4 commented May 6, 2024

I'll be closing this issue. Most of those detections are caused by LSPosed and "Permission Loophole" is a problem with KSU. The remaining ones were already fixed in the latest build.

@snake-4 snake-4 closed this as not planned Won't fix, can't repro, duplicate, stale May 6, 2024
@nitanmarcel
Copy link
Author

I'll be closing this issue. Most of those detections are caused by LSPosed and "Permission Loophole" is a problem with KSU. The remaining ones were already fixed in the latest build.

Yeah, disabling LSPosed got rid of some. Also I was using the artefact version when posting the issue.

Screenshot_20240506-175004_APatch
Screenshot_20240506-175007_APatch
Screenshot_20240506-174951_Native Test

@snake-4
Copy link
Owner

snake-4 commented May 6, 2024

Refer to #24 for the ZygiskNext detection. Also if you try again with LSPosed enabled but logging disabled in LSPosed settings, the property detection shouldn't happen.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants