Tim Perry and GitHub
169d11e4bd
Mark flutter script as experimental & drop from default list
2025-09-02 14:59:24 +02:00
Tim Perry
30bd013cb9
Limit Flutter scanning to r-x ranges
...
This doesn't matter much for anonymous module cases AFAICT, but when the
module is loaded normally by name (on real devices, not emulators I
think) then the range can include some protected non r-x ranges, which
we can't scan. This ensures we only scan possible code ranges.
2025-07-31 16:50:27 +02:00
Tim Perry
48fd909ed5
Fix two tiny but fundamental breakages in config.js
...
Due to this, concatenating scripts broke (missing semi-colon meant
latest IIFEs were treated as arguments and totally broke) and anonymous
module handling failed and threw various errors due to unavailable
handles.
2025-07-31 15:38:03 +02:00
Tim Perry
70d8e301dd
Fix & improve native connect hook
...
Previously SOCKS interception didn't work without DEBUG_MODE (whoops)
and tried to intercept UDP even though that wouldn't work either. We no
longer intercept UDP at all (although we can block it for HTTP/3) and
everything should work correctly the rest of the time, with some other
improvements around logging en route.
2025-07-29 19:52:02 +02:00
Tim Perry
69b78d0599
Fixes for iOS with new changes & Frida 17
...
Since the global Java bridge isn't available, Java.available doesn't
generally work. In the native connect script, our new approach was
incomplete due to using raw kernel APIs instead of the libc compatible
layer (which seems to be the standard API).
2025-07-29 19:07:30 +02:00
Tim Perry
97c53f4b35
Correct comment in native connect hook
2025-07-24 16:26:38 +02:00
Tim Perry
68d465f4bf
Add new Flutter script to README & tests
2025-07-18 18:01:37 +02:00
Tim Perry
31503685c7
Add a working Android Flutter unpinning script
2025-07-18 17:58:26 +02:00
Tim Perry
04a565cafd
Merge branch 'automated-tests'
2025-07-08 16:13:06 +02:00
Tim Perry
101b6b463c
Pick a shorter simple set of CI test targets
2025-07-08 16:12:51 +02:00
Tim Perry
f884bfdace
Make test Frida setup work on older Android versions
2025-07-08 16:12:51 +02:00
Tim Perry
688deefd65
Automatically retry tests in CI by default
2025-07-08 16:12:51 +02:00
Tim Perry
d6be767a36
Improve test automatic webview button retry
2025-07-08 16:12:50 +02:00
Tim Perry
b1dd2c81ef
Skip cert-but-no-unpinning test in Android <10
2025-07-08 16:12:50 +02:00
Tim Perry
4d52126c63
Widen the testing API version range further
2025-07-08 16:12:49 +02:00
Tim Perry
51715cd4b6
Tighten up tests's "wait for app" check further
2025-07-08 16:12:49 +02:00
Tim Perry
69e6622952
Increase test's default button response timeout
2025-07-08 16:12:49 +02:00
Tim Perry
f6adff234d
Improve test app-loaded check
2025-07-08 16:12:48 +02:00
Tim Perry
9dd42f3a61
Improve Mockttp test logging
2025-07-08 16:12:48 +02:00
Tim Perry
44cad4f7a6
Refactor & simplify CI testing approach
...
Don't bother trying to count individual TLS errors & requests - it's
fragile (e.g. webview favicons, CT refreshes), messy & unnecessary. We
focus on red/green buttons and that's enough.
2025-07-08 16:12:47 +02:00
Tim Perry
8fe643f69c
Reduce flakiness of CI tests
2025-07-08 16:12:47 +02:00
Tim Perry
029569835e
If webview buttons in tests don't respond, click again
2025-07-08 16:12:47 +02:00
Tim Perry
290a7d7520
Tidy up some test setup
2025-07-08 16:12:46 +02:00
Tim Perry
936e3761f3
Set options to try to avoid CI test system UI crashes
2025-07-08 16:12:46 +02:00
Tim Perry
1065a613a9
Add hierarchy logging to test failures
2025-07-08 16:12:40 +02:00
Tim Perry
88ac21a3d5
Disable fast-fail to further debug test failures
2025-07-08 10:59:44 +02:00
Tim Perry
d55979f5a4
Make the tests cover all the API versions, to see where we are
2025-07-04 10:29:30 +02:00
Tim Perry
7722e20adc
Use a large screen test device in CI
...
Previously not all buttons were being detected by Appium - I strongly
suspect that's becuase the default profile is some tiny phone.
Also added another API test level (just to confirm) and switched arch
because it turns out modern API levels don't support x86, only _64.
2025-07-04 10:02:41 +02:00
Tim Perry
bb0356ac34
Build out a complete set of automated Android tests
2025-07-03 20:30:22 +02:00
Tim Perry
1e9aa02640
Run a minimal test in CI
2025-07-03 20:26:40 +02:00
Tim Perry and Tim Perry
8902cfd399
Try setting up an emulator in CI
2025-07-03 20:26:39 +02:00
Tim Perry and GitHub
a07671fbe9
Merge pull request #146 from acomerlatto/main
...
feat(native-connect-hook): enhance support for system connection hooks
2025-07-03 15:27:41 +02:00
Alisson Comerlatto
09cd59b728
feat(native-connect-hook): enhance support for system connection hooks
...
- Declare system module as a constant.
- Add `conn` variable for cleaner `Interceptor.attach` initialization.
- Improve error handling.
2025-07-03 10:14:24 -03:00
Tim Perry and GitHub
426bd4e2ab
Merge pull request #145 from acomerlatto/main
...
fix(native-connect-hook): adjust scope of `systemModule` declaration
2025-07-03 14:01:23 +02:00
Alisson Comerlatto
ad465d0044
fix(native-connect-hook): adjust scope of systemModule declaration
...
- Move `systemModule` declaration outside `try` block for proper scope management.
2025-07-02 17:30:59 -03:00
Tim Perry
ae338c5bcd
Add SOCKS support to native-connect hook
2025-06-27 18:00:17 +02:00
Tim Perry
bcbe288aa2
Add functionality to block HTTP/3 by default
2025-06-24 17:43:09 +02:00
Tim Perry
33c9febf1b
Add a fallback hook for meta proxygen unpinning
2025-06-24 16:31:15 +02:00
Tim Perry
4c2019597e
Expand scripts included in standard build output
2025-06-24 12:40:32 +00:00
Tim Perry
6922444bf2
Make anti-root detection resilient to odd packages
2025-06-24 14:34:43 +02:00
Tim Perry
34c74c1505
Tighten up 'su' file IO detection on Android anti-root detection
...
Previously this blocked all reads of any paths containing 'su', which
has a lot of false positives (e.g. .../support-file) that will very
plausibly cause problems.
2025-06-24 14:34:43 +02:00
Tim Perry and GitHub
7eca72577a
Merge pull request #143 from sinnet3000/fix/typo
...
fix: Correct README script path for android-disable-root-detection.js
2025-06-23 14:02:34 +02:00
Luis Colunga
0b650ec11a
docs(readme): fix typo in script path for android-disable-root-detection.js
2025-06-22 11:01:03 -07:00
Tim Perry
3858ba270f
Fix root-detection java.io.File case
2025-06-20 19:08:39 +02:00
Tim Perry
f6c05206c6
Fix config module utils for Frida 17
2025-06-20 18:40:32 +02:00
Tim Perry
4b4744ca0b
Update new no-root-detection script to Frida 17 too
2025-06-20 18:28:06 +02:00
Tim Perry and GitHub
362ea92dfb
Merge pull request #140 from kaifcodec/main
...
fix: update deprecated Module.* APIs for Frida v17
2025-06-20 18:20:32 +02:00
Tim Perry
aacc1579cb
Update native TLS & iOS hooks to Frida 17 too
2025-06-20 16:59:52 +02:00
Tim Perry
c5dcc8acd6
Fix connect module fallback (get* throws an error, find* returns null)
2025-06-20 16:46:23 +02:00
Tim Perry and GitHub
b4f9c2786c
Merge pull request #141 from riyadmondol2006/main
...
Add Android root detection bypass script from external repository
2025-06-20 16:22:22 +02:00
