FLAG-SECURE
0 | 150
Uploaded by: @lorenzo.difuccia
Script to bypass Android's FLAG_SECURE which blocks screenshots. Hooks Window.setFlags/addFlags to strip the flag, and uses ActivityThread.mActivities to clear it on already running activities.
Script to bypass Android's FLAG_SECURE which blocks screenshots. Hooks Window.setFlags/addFlags to strip the flag, and uses ActivityThread.mActivities to clear it on already running activities.
ssl
The script returns false/failure for checks on ~50 jailbreak-related paths including Cydia, Sileo, Zebra, substrate libraries, and various jailbreak tool artifacts (checkra1n, palera1n, unc0ver, etc.) 1. JailMonkey - A React Native library that detects jailbroken devices. The script hooks methods like isJailBroken, checkPaths, checkSchemes, checkDylibs, etc. 2. Native iOS APIs - System-level detection methods: - NSFileManager - File existence checks for jailbreak artifacts - UIApplication canOpenURL: - URL scheme checks (cydia://, sileo://, etc.) - C functions: stat, lstat, access - Low-level file checks 3. Anti-debugging measures - Hooks sysctl to remove the P_TRACED flag (0x800) 4. UIAlertController - Blocks jailbreak warning dialogs from being displayed
by-pass-br
This Frida script bypasses multiple Android proxy detection techniques and forces application traffic through Burp Suite. Scenario: The target Android application was detecting active proxies and blocking network communication by freezing on the main activity. Although SSL pinning was successfully bypassed, no traffic was visible in Burp Suite. API endpoints were only observable via Frida logs. This script is intended for educational purposes and authorized security testing only.
wait native library is loaded, so frida will hook after native library successfully loaded by app
This is a comprehensive, all-in-one Frida script designed for security researchers and authorized penetration testers. It aims to streamline the dynamic analysis process by neutralizing multiple layers of client-side security often found in modern production Android applications.
This script bypasses client-side security checks related to Google Play Protect and Play Integrity (formerly SafetyNet). It spoofs the device settings to report that Play Protect is enabled and intercepts Google Play Services Tasks to return "Successful" status for integrity attestations.
It bypasses common runtime protection mechanisms that force an app to close when it detects it has been sideloaded or is being instrumented.
Akamai BMP RSA-AES
androidSSLUnpinning
emu and ssl
safe-ssl-unpin.js
Auto dodge
HackTheBox quiz app solve !
test