kdrag0n / safetynet-fix

Google SafetyNet attestation workarounds for Magisk
MIT License
6.2k stars 329 forks source link

[Feature Request] Add support for hiding USB Debugging/Developer Options status. #100

Open nl255 opened 3 years ago

nl255 commented 3 years ago

Unfortunately it seems like alot of apps have now started detecting whether USB Debugging or even Developer Options are enabled and refusing to run if they are, most likely due to those checks being added to a standard "security check" library or SDK. Would it be possible to add the ability to hide the fact that they are enabled to the existing MagiskHide functionality? Unfortunately while there is an xposed module that claims to be able to do so it doesn't actually work (something about skipping injection because it is isolated) and if this is going to become a standard detection method then making a bypass for it built in would be a very nice feature.

kdrag0n commented 3 years ago

Can you give a specific example of an app that checks for Developer Options?

nl255 commented 3 years ago

For developer options specifically the ones I found, though not tested by me, are Banco del Pacifico and Citibank PH though supposedly Citi reverted that change. I found mention of them when searching reddit for a solution to having come across two different apps that "merely" check for usb debugging and refuse to run until it is disabled.

nl255 commented 3 years ago

With regard to usb debugging which is what started the whole thing, the two apps are https://play.google.com/store/apps/details?id=com.llcu.mobile and https://play.google.com/store/apps/details?id=com.fmibt.mobile . Since the message that pops up is identical (something about security policy not allowing it to run with usb debugging enabled and to disable the setting) that suggests some kind of standard library or SDK.

JayaKrishnaKruthick commented 2 years ago

Can you give a specific example of an app that checks for Developer Options?

https://play.google.com/store/apps/details?id=com.pubg.newstate Source https://twitter.com/MishaalRahman/status/1458892764020723714?t=u61hh0-CNkPVKX_-Ngfr8w&s=19

newdev4ios commented 2 years ago

Also at least for a while the Spectrum TV app does this check too https://play.google.com/store/apps/details?id=com.TWCableTV is link for the app

however i dont use this app anymore so its not as important for me for the feature to reach this app, however if banking apps start doing this then it will be a definite issue.

osm0sis commented 2 years ago

Basically this would have to be adapted to Zygisk: https://github.com/redlee90/Hide-USB-Debugging-Mode

MlgmXyysd commented 2 years ago

Can you give a specific example of an app that checks for Developer Options?

PUBG: NEW STATE

xAffan commented 2 years ago

Any progress? More apps have been doing these BS, its increasing day by day.

Broukmiken commented 2 years ago

a french NFC bank app : lyf if developper mod is activated, the app detect it , a nag screen appears and the app won't work.

https://play.google.com/store/search?q=lyf&c=apps&hl=fr&gl=GB

xAffan commented 2 years ago

Bad. Use the module by HuskyDG to hide it

Broukmiken commented 2 years ago

Bad. Use the module by HuskyDG to hide it

Thanks for advice,but where Can WE find it ? On his repo, there's nothing about.

Screenshot_20220809-165826_GitHub.jpg

xAffan commented 2 years ago

Magisk Delta automatically hide USB debugging I believe. Otherwise there is a module on his telegram https://t.me/+igdQXLreRaZkZWVl

On Tue, Aug 9, 2022, 8:00 PM Fred @.***> wrote:

Bad. Use the module by HuskyDG to hide it

Thanks for advice,but where Can WE find it ? On his repo, there's nothing about.

[image: Screenshot_20220809-165826_GitHub.jpg] https://user-images.githubusercontent.com/109454001/183685387-3c741a3d-2cf9-4a92-8100-4df0a3828977.jpg

— Reply to this email directly, view it on GitHub https://github.com/kdrag0n/safetynet-fix/issues/100#issuecomment-1209497730, or unsubscribe https://github.com/notifications/unsubscribe-auth/AODGAVYURK5IDDJNMRPAVG3VYJXCVANCNFSM5E2FY2KQ . You are receiving this because you commented.Message ID: @.***>

Broukmiken commented 2 years ago

hello , i found another way to hide usb debbugging and developer mode :

1/ install LSPosed module from https://github.com/LSPosed/LSPosed/releases/latest choose the Zygist release 2/ install this module in Magisk 3/ reboot 4/ when asked, choose "yes" to create a LSPosed shortcut on your phone if you forget to do it, just re install the module 5/ download and install "I am not a developer" apk from here : https://github.com/Xposed-Modules-Repo/xyz.xfqlittlefan.notdeveloper/releases/latest 6/activate this apk (module) in LSPosed by launching LPSosed shortcut 7/ choose the app that you want to hide from usb debugging mode and developer mode 8/ force close of the app (banking ...) wipe cache and restart the app the app should now can't check that you have usb debbuging activated and developer mode

westruk commented 1 year ago

the app should now can't check that you have usb debbuging activated and developer mode

in which app are you checking the development status?

I'm using Playground-1.3.0 (https://github.com/fingerprintjs/fingerprintjs-android/releases) and this xposed module can't hide dev options

JayaKrishnaKruthick commented 1 year ago

this xposed module can't hide dev option

https://play.google.com/store/apps/details?id=com.redlee90.hideusbdebugging Try using this xposed module it's working for me

westruk commented 1 year ago

this xposed module can't hide dev option

https://play.google.com/store/apps/details?id=com.redlee90.hideusbdebugging Try using this xposed module it's working for me

It's not working with this last https://github.com/fingerprintjs/fingerprintjs-android/releases detector

westruk commented 1 year ago

Magisk Delta automatically hide USB debugging I believe. Otherwise there is a module on his telegram https://t.me/+igdQXLreRaZkZWVl

also cant bypass Screenshot_20221118-003424767

GC2040 commented 1 year ago

Just found this module on github. github module. Worked for me on nokia 7.2 android 11 stock rom. Install LSPosed module for zygisk and install apk from the github linked. Once installed LSPosed into zygisk, reboot device. Once device reboots open lsposed and enable the module IAmNotADeveloper from github for the apps of your choice. Restart once again and the apps will not be able to detect that you have developer option enabled. Github Repo Owner Attribution: xfqwdsj. Disclaimer: I am not reponsible for damadged or "bricked" devices. Enjoy :)

nl255 commented 1 year ago

Just found this module on github. github module. Worked for me on nokia 7.2 android 11 stock rom. Install LSPosed module for zygisk and install apk from the github linked. Once installed LSPosed into zygisk, reboot device. Once device reboots open lsposed and enable the module IAmNotADeveloper from github for the apps of your choice. Restart once again and the apps will not be able to detect that you have developer option enabled. Github Repo Owner Attribution: xfqwdsj. Disclaimer: I am not reponsible for damadged or "bricked" devices. Enjoy :)

It doesn't work, I still get the error message and from the wording of it and the fact that I have seen the same exact wording in two apps from different banks/credit unions I believe it is a standard shared library/framework that is doing it.

westruk commented 1 year ago

Just found this module on github. github module. Worked for me on nokia 7.2 android 11 stock rom. Install LSPosed module for zygisk and install apk from the github linked. Once installed LSPosed into zygisk, reboot device. Once device reboots open lsposed and enable the module IAmNotADeveloper from github for the apps of your choice. Restart once again and the apps will not be able to detect that you have developer option enabled. Github Repo Owner Attribution: xfqwdsj. Disclaimer: I am not reponsible for damadged or "bricked" devices. Enjoy :)

What app you use for detect that you have developer option enabled?

nl255 commented 1 year ago

LLCU Mobile. I have also seen the same identical wording on the First Mid Illinois banking app (which I don't use but a family member does, their phone is not rooted) which is what leads me to believe that it is not something the app developer is using but a standard "security check" library.

westruk commented 1 year ago

LLCU Mobile. I have also seen the same identical wording on the First Mid Illinois banking app (which I don't use but a family member does, their phone is not rooted) which is what leads me to believe that it is not something the app developer is using but a standard "security check" library.

But GitHub module that you mentioned can't hide dev options in other apps, you can check issues in it's repository

savidnet commented 1 year ago

Magisk Delta automatically hide USB debugging I believe. Otherwise there is a module on his telegram https://t.me/+igdQXLreRaZkZWVl

also cant bypass Screenshot_20221118-003424767

what app do you use to check adb?what app do you use to check adb?

Lavmint commented 1 year ago

Another app to the list, e-wallet G-Cash (5.69.0) from the Philippines https://play.google.com/store/apps/details?id=com.globe.gcash.android&hl=en&gl=US&pli=1

Possible fix is upcoming: https://github.com/xfqwdsj/IAmNotADeveloper/issues/29

Jon8RFC commented 9 months ago

Don't forget that some apps need their data cleared, not cache.

Some apps will save the status of various things it doesn't like being enabled. On those apps, even if you fix/hide the concerns, it won't help until you clear the data for the app, or uninstall & reinstall.