Hiding options to hide libart modifications like LSposed? #837
RevealedSoulEven
started this conversation in
General
Replies: 1 comment 1 reply
|
Doing some simple hidings are surely interesting to do. As an open source project, no hiding mechinism is perfect and it only teaches more detectors. |
1 reply
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Recently lsposed introduced new options to hide changes to libart to bypass many detections.
To test it, I made an app long ago.
https://github.com/RevealedSoulEven/Self-Maps-Reader/actions/runs/28914091573
Initially it was made to print maps and smaps, what the app actually sees itself to research on root hiding. Later I added some native code to check signatures of libc.so and libart.so
New lsposed version with enabled options to hide libart changes bypasses this detection. Can it be possible in Vector too? Maybe somewhere in future.
All reactions