Skip to content

Latest commit

 

History

History
21 lines (18 loc) · 594 Bytes

File metadata and controls

21 lines (18 loc) · 594 Bytes

Android Ndk root detection & Anti-Debugging

intro

Using android ndk(c++) to determine if the phone is rooted. The jni function is a boolean function named isRooted().

Methods used to determine

Root Detection

  1. which su
  • execute 'which su', if we get a path, that means it may be rooted
  1. package manager
  • find packages that are usually installed after rooting the phone
  1. path
  • find comman path of root files
  1. build-tag
  • check build tag

Anti-Debugging

  1. Check if is in debugging mode
  2. Check /proc/self/status and see if TracerPid != 0
  3. Check Packages