Help/Support LIAPP Jailbreak Detection Bypass

AlyssaX64 · December 30, 2022

10 hours ago, marc726 said:

This is the message I get. I search for instances of "JP1" "Appguard" "shut down" "security policy" but no results except irrelevant results for the last two.

What game ?

marc726 · December 31, 2022

16 hours ago, AlyssaX64 said:

What game ?

Random Dice Defense

L808 · January 1, 2023

On 12/17/2022 at 11:50 PM, marc726 said:

Hi all. I was wondering what the best way to find and address the AppGuard/LiAPP detection on a certain app. I was using a decompiler on the UnityFramework file and I also tried using DNSpy for the Assembly file. My issue is:

1. I can find a Class for “CheatDetector” in DNSpy using the assembly file that has a method for LIAPP but im not sure how to address it in the Live Offset program. I tried to NOP the offsets of the functions but nada.

2. I can also find instances in the UnityFramework file where it tries to find paths of common jailbroken thing such as Cydia.

I'm not understanding which I should be addressing given that both show points of interest for detecting JB. Any help would be appreciated.

Hmm i'm not a pro but if you're trying to completely break a function, just put random numbers on the same size that hex code instruction and see what happens

It will crash the game or doing something that u never imagined it would do

marc726 · January 3, 2023

I've sat here looking at the screen trying to look at call trees for every function trying to find a solution. All I know is that

the LIAPP function is not called by anything that the disassembler has found.
fb_is_jailbroken shows as the only function in Frida that is triggered. Tried to trace the function but nada.
I feel like DNSpy is giving a hint it involves public class TitleScene, however everything is obfuscated.

I do not have enough experience to be trying my hand at this unfortunately.

L808 · January 18, 2023

On 1/3/2023 at 6:15 AM, marc726 said:

I've sat here looking at the screen trying to look at call trees for every function trying to find a solution. All I know is that

the LIAPP function is not called by anything that the disassembler has found.

fb_is_jailbroken shows as the only function in Frida that is triggered. Tried to trace the function but nada.

I feel like DNSpy is giving a hint it involves public class TitleScene, however everything is obfuscated.

I do not have enough experience to be trying my hand at this unfortunately.

keep trying, u will end up with a result

marc726 · January 19, 2023

2 hours ago, L808 said:

keep trying, u will end up with a result

I will! I don’t think im at a level where this is possible for me at the moment. Ill have to come back to this at another time when im more experienced.