Help/Support LIAPP Jailbreak Detection Bypass

[AlyssaX64 75k iPhone X 13.5]

10 hours ago, marc726 said:

This is the message I get. I search for instances of "JP1" "Appguard" "shut down" "security policy" but no results except irrelevant results for the last two.

What game ? 

[marc726 8 iPhone X 14.3]

16 hours ago, AlyssaX64 said:

What game ? 

Random Dice Defense

[L808 8.5k iPhone 8 15.5]

On 12/17/2022 at 11:50 PM, marc726 said:

Hi all. I was wondering what the best way to find and address the AppGuard/LiAPP detection on a certain app. I was using a decompiler on the UnityFramework file and I also tried using DNSpy for the Assembly file. My issue is:

 

1. I can find a Class for “CheatDetector”  in DNSpy using the assembly file that has a method for LIAPP but im not sure how to address it in the Live Offset program. I tried to NOP the offsets of the functions but nada.

2. I can also find instances in the UnityFramework file where it tries to find paths of common jailbroken thing such as Cydia. 

 

I'm not understanding which I should be addressing given that both show points of interest for detecting JB. Any help would be appreciated. 

Hmm i'm not a pro but if you're trying to completely break a function, just put random numbers on the same size that hex code instruction and see what happens

It will crash the game or doing something that u never imagined it would do 

[marc726 8 iPhone X 14.3]

I've sat here looking at the screen trying to look at call trees for every function trying to find a solution. All I know is that

• the LIAPP function is not called by anything that the disassembler has found. 
• fb_is_jailbroken shows as the only function in Frida that is triggered. Tried to trace the function but nada.
• I feel like DNSpy is giving a hint it involves public class TitleScene, however everything is obfuscated.

 

I do not have enough experience to be trying my hand at this unfortunately. 

[L808 8.5k iPhone 8 15.5]

On 1/3/2023 at 6:15 AM, marc726 said:

I've sat here looking at the screen trying to look at call trees for every function trying to find a solution. All I know is that

• the LIAPP function is not called by anything that the disassembler has found. 
• fb_is_jailbroken shows as the only function in Frida that is triggered. Tried to trace the function but nada.
• I feel like DNSpy is giving a hint it involves public class TitleScene, however everything is obfuscated.

 

I do not have enough experience to be trying my hand at this unfortunately. 

keep trying, u will end up with a result

[marc726 8 iPhone X 14.3]

2 hours ago, L808 said:

keep trying, u will end up with a result

I will! I don’t think im at a level where this is possible for me at the moment. Ill have to come back to this at another time when im more experienced.