Disk To Memory Checks fail on Android 11, even if there isn't hooking framework

darvincisec / DetectFrida

Detect Frida for Android

MIT License

665 stars 138 forks source link

Disk To Memory Checks fail on Android 11, even if there isn't hooking framework #4

Closed MahmoudElFerekh closed 3 years ago

MahmoudElFerekh commented 3 years ago

Although there isn't any hooking framework invoked, when trying the library code on Android 11, this is being executed: __android_log_print(ANDROID_LOG_WARN, APPNAME, "Executable Section Manipulated, " "maybe due to Frida or other hooking framework." "Act Now!!!"); (native-lib.c file, line 195)

This false alert is only happening on Android 11.

darvincisec commented 3 years ago

Thanks for reporting. I will look into it for a fix

Marechal-L commented 3 years ago

Hi @darvincisec, I encounter this issue everytime on a Google Pixel 4a running Android 11. Let me know if you need further information to fix this issue.

darvincisec commented 3 years ago

I can reproduce this issue on my side..i can see what is going wrong, just that i need to find time to fix it.

darvincisec commented 3 years ago

Refer here for the fix