search

muellerberndt / frida-detection

A couple of methods for detecting Frida on Android.
428 stars 118 forks source link

Frida server not beeing detected #12

Open gabcarneiro opened 2 years ago

gabcarneiro commented 2 years ago

I am running a frida-server(version 15.0.18) on a rooted device and both detection methods are not working.

Is anyone else facing this issue? Maybe the detection methods are outdated by now?

Please, help

apkunpacker commented 2 years ago

@gabcarneiro can you please upload built apk here , i not find any release on github

FuentesFelipe commented 2 years ago

@gabcarneiro

Are your rooted devices arm64?

gabcarneiro commented 2 years ago

@FuentesFelipe yes it is

But just for the record i ended up using darvincisec's approach.

FuentesFelipe commented 2 years ago

@gabcarneiro This anti frida protection works for me on an ARM (root), x86_64 (emulator) and on an ARM64 (non-root, with gadget) and it worked. But on an ARM64 root, absolutely nothing happened.

Did the darvincisec project work for you on all architectures?

apkunpacker commented 2 years ago

@FuentesFelipe please share prebuilt apk of this repo if you have . Thanks

gabcarneiro commented 2 years ago

@FuentesFelipe im afraid i only tested on ARM64 with 2 different devices, the first one rooted with frida-server and the second one non rooted with frida-gadget

Edit: forgot to mention that both methods of injection have been detected by the darvinsec project

FuentesFelipe commented 2 years ago

Thanks @gabcarneiro. In my case, frida-server and frida-gadget were successfully detected on ARM64 root and non-root respectively with darvincisec project. It only fails on a root SM-A307G, ARM64, running Android 10!

muellerberndt commented 2 years ago

Hey everyone, sorry for not replying, I hadn't noticed that this repo was still active :) It's very likely that the method is outdated as I've not been maintaining the project.