UIScreenCapturedDidChangeNotificationBypass
0 | 159
Uploaded by: @masbog
bypass secure screen ios UIScreenCapturedDidChangeNotification
bypass secure screen ios UIScreenCapturedDidChangeNotification
A Frida script to monitor memory operations on iOS. This tool intercepts the memcpy function within libsystem_c.dylib to capture sensitive data—such as API keys, secrets, or request payloads—as they are moved within the application's memory. The script is working for frida version less than 17 cause it is using the function findExportByName which is now is removed on version 17
Intercept all cryptography-related functions on iOS with Frida 17 Api.
ssl-unpin
root-ssl
okhttp3-bypass
Script to bypass Android's FLAG_SECURE which blocks screenshots. Hooks Window.setFlags/addFlags to strip the flag, and uses ActivityThread.mActivities to clear it on already running activities.
ssl
The script returns false/failure for checks on ~50 jailbreak-related paths including Cydia, Sileo, Zebra, substrate libraries, and various jailbreak tool artifacts (checkra1n, palera1n, unc0ver, etc.) 1. JailMonkey - A React Native library that detects jailbroken devices. The script hooks methods like isJailBroken, checkPaths, checkSchemes, checkDylibs, etc. 2. Native iOS APIs - System-level detection methods: - NSFileManager - File existence checks for jailbreak artifacts - UIApplication canOpenURL: - URL scheme checks (cydia://, sileo://, etc.) - C functions: stat, lstat, access - Low-level file checks 3. Anti-debugging measures - Hooks sysctl to remove the P_TRACED flag (0x800) 4. UIAlertController - Blocks jailbreak warning dialogs from being displayed
by-pass-br
This Frida script bypasses multiple Android proxy detection techniques and forces application traffic through Burp Suite. Scenario: The target Android application was detecting active proxies and blocking network communication by freezing on the main activity. Although SSL pinning was successfully bypassed, no traffic was visible in Burp Suite. API endpoints were only observable via Frida logs. This script is intended for educational purposes and authorized security testing only.
wait native library is loaded, so frida will hook after native library successfully loaded by app
This is a comprehensive, all-in-one Frida script designed for security researchers and authorized penetration testers. It aims to streamline the dynamic analysis process by neutralizing multiple layers of client-side security often found in modern production Android applications.
This script bypasses client-side security checks related to Google Play Protect and Play Integrity (formerly SafetyNet). It spoofs the device settings to report that Play Protect is enabled and intercepts Google Play Services Tasks to return "Successful" status for integrity attestations.
It bypasses common runtime protection mechanisms that force an app to close when it detects it has been sideloaded or is being instrumented.
Akamai BMP RSA-AES