search

jjolano / shadow

A jailbreak detection bypass for modern iOS jailbreaks.
https://ios.jjolano.me
BSD 3-Clause "New" or "Revised" License
830 stars 137 forks source link

[Feature Request] Add logic to bypass OpenSSH port detection #156

Open MrR1p opened 1 year ago

MrR1p commented 1 year ago

Some applications detect open ports on device (22 for Open SSH, 27041 for frida, etc) to detect Jailbreak on the device.

It seems that Shadow doesn't hook this checks.

I've made some experiment on application that detect OpenSSH server (https://apps.apple.com/ru/app/%D0%B8%D0%BD%D0%B3%D0%BE%D1%81%D1%81%D1%82%D1%80%D0%B0%D1%85-ingomobile-%D0%BE%D0%BD%D0%BB%D0%B0%D0%B9%D0%BD/id1319319386):

  1. Jailbreaked iOS 14 without OpenSSH server installed and Shadow enabled for this application: App successfully loaded and starts ok
  2. Jailbreaked iOS with OpenSSH server on default port 22: App detect Jailbreak and hangs on start screen
  3. Jailbreaked iOS WITH OpenSSH server on custom port 2222: App successfully loaded and starts ok

Maybe it is good idea to hook such detect and hack it.

Thank you!