frida-jb-bypass

Frida script to bypass the iOS application Jailbreak Detection

Pre-requisites

1. Install frida client on iPhone using Cydia.
2. Install frida server on the system.

Usage

1. Find the process name of the application using below command.

Command: frida-ps -Uai

As shown below, process name for our application is 'DVIA-v2'

2. Next step is to find the classname which implements the Jailbreak Detection method.

Command: frida -U -l find-classes.js DVIA-v2

We have found the classname as 'JailbreakDetection'

3. Next step is to find the methodname which detects the Jailbreak Detection.

Note: Modify the classname in "show-all-methods-of-specific-class.js" as shown below to find all the methods.

Command: frida -U -l show-all-methods-of-specific-class.js DVIA-v2

We have found the classname as 'isJailbroken'

4. We have the classname and methodname which detects the Jailbroken devices. We will now inject the script which will manipulate the return value of 'isJailbroken' method.

Modify the classname and method name in 'bypass-jailbreak-detection.js' file as shown below.

Run the script to bypass the Jailbreak detection on iOS application

Command: frida -U -l bypass-jailbreak-detection.js DVIA-v2