@aalzehla/capacitor-jailbreak-root-detection 0.0.8 → 0.0.9

package/ios/Plugin/UIDeviceJailBroken.swift

@@ -8,7 +8,7 @@
 
 import Foundation
 import UIKit
-
+import MachO
 extension UIDevice {
     var isSimulator: Bool {
         return TARGET_OS_SIMULATOR != 0
@@ -24,6 +24,9 @@ extension UIDevice {
             if JailBrokenHelper.hasCydiaInstalled() { return true }
             if JailBrokenHelper.isContainsSuspiciousApps() { return true }
             if JailBrokenHelper.isSuspiciousSystemPathsExists() { return true }
+            if JailBrokenHelper.isDirectoriesWriteable() { return true }
+            if JailBrokenHelper.checkDYLD() { return true }
+            if JailBrokenHelper.isFridaRunning() { return true }
             return JailBrokenHelper.canEditSystemFiles()
         }
     }
@@ -61,7 +64,27 @@ private struct JailBrokenHelper {
             return false
         }
     }
-    
+
+    static var directories: [String] {
+        return [
+            "/",
+            "/root/",
+            "/private/",
+            "/jb/"
+        ]
+    }
+    static func isDirectoriesWriteable() -> Bool {
+        // Checks if the restricted directories are writeable.
+        for path in directories {
+            do{
+                let filePath = path + UUID().uuidString
+                try "i escaped the Jail".write(toFile: filePath, atomically: true, encoding: .utf8)
+                try FileManager.default.removeItem(atPath: filePath)
+                return true
+            }catch let error{print(error.localizedDescription)}
+        }
+        return false
+    }
     /**
      Add more paths here to check for jail break
      */
@@ -74,7 +97,10 @@ private struct JailBrokenHelper {
                 "/Applications/MxTube.app",
                 "/Applications/RockApp.app",
                 "/Applications/SBSettings.app",
-                "/Applications/WinterBoard.app"
+                "/Applications/WinterBoard.app",
+                "/Applications/VnodeBypass.app",
+                "/Applications/RootHide.app",
+                "/Applications/Dopamine.app",
         ]
     }
     
@@ -94,7 +120,124 @@ private struct JailBrokenHelper {
                 "/usr/sbin/sshd",
                 "/etc/apt",
                 "/bin/bash",
-                "/Library/MobileSubstrate/MobileSubstrate.dylib"
+                "/Library/MobileSubstrate/MobileSubstrate.dylib",
+                "/usr/sbin/frida-server",
+            "/.bootstrapped_electra",
+            "/usr/lib/libjailbreak.dylib",
+            "/jb/lzma",
+            "/.cydia_no_stash",
+            "/.installed_unc0ver",
+            "/jb/offsets.plist",
+            "/usr/share/jailbreak/injectme.plist",
+            "/etc/apt/undecimus/undecimus.list",
+            "/var/lib/dpkg/info/mobilesubstrate.md5sums",
+            "/jb/jailbreakd.plist",
+            "/jb/amfid_payload.dylib",
+            "/jb/libjailbreak.dylib",
+            "/usr/libexec/cydia/firmware.sh",
+            "/var/lib/cydia",
+            "/private/var/Users/",
+            "/var/log/apt",
+            "/Applications/Cydia.app",
+            "/private/var/stash",
+            "/private/var/lib/cydia",
+            "/private/var/cache/apt/",
+            "/private/var/log/syslog",
+            "/private/var/tmp/cydia.log",
+            "/Applications/Icy.app",
+            "/Applications/MxTube.app",
+            "/Applications/RockApp.app",
+            "/Applications/blackra1n.app",
+            "/Applications/SBSettings.app",
+            "/Applications/FakeCarrier.app",
+            "/Applications/WinterBoard.app",
+            "/Applications/IntelliScreen.app",
+            "/private/var/mobile/Library/SBSettings/Themes",
+            "/Library/MobileSubstrate/CydiaSubstrate.dylib",
+            "/System/Library/LaunchDaemons/com.ikey.bbot.plist",
+            "/Library/MobileSubstrate/DynamicLibraries/Veency.plist",
+            "/Library/MobileSubstrate/DynamicLibraries/LiveClock.plist",
+            "/System/Library/LaunchDaemons/com.saurik.Cydia.Startup.plist",
+            "/usr/sbin/frida-server",
+            "/etc/apt/sources.list.d/electra.list",
+            "/etc/apt/sources.list.d/sileo.sources",
+            "/private/var/Users/",
+            "/var/log/apt",
+            "/Applications/Cydia.app",
+            "/private/var/stash",
+            "/private/var/lib/cydia",
+            "/private/var/cache/apt/",
+            "/private/var/log/syslog",
+            "/private/var/tmp/cydia.log",
+            "/Applications/Icy.app",
+            "/Applications/MxTube.app",
+            "/Applications/RockApp.app",
+            "/Applications/blackra1n.app",
+            "/Applications/SBSettings.app",
+            "/Applications/FakeCarrier.app",
+            "/Applications/WinterBoard.app",
+            "/Applications/IntelliScreen.app",
+            "/private/var/mobile/Library/SBSettings/Themes",
+            "/Library/MobileSubstrate/CydiaSubstrate.dylib",
+            "/System/Library/LaunchDaemons/com.ikey.bbot.plist",
+            "/Library/MobileSubstrate/DynamicLibraries/Veency.plist",
+            "/Library/MobileSubstrate/DynamicLibraries/LiveClock.plist",
+            "/System/Library/LaunchDaemons/com.saurik.Cydia.Startup.plist",
+            "/Applications/Cydia.app",
+            "/Applications/blackra1n.app",
+            "/Applications/FakeCarrier.app",
+            "/Applications/Icy.app",
+            "/Applications/IntelliScreen.app",
+            "/Applications/MxTube.app",
+            "/Applications/RockApp.app",
+            "/Applications/SBSettings.app",
+            "/Applications/WinterBoard.app",
+            
+            "/var/.communication/launchd_to_boomerang",
+            "/var/.communication/boomerang_to_launchd",
+            "/usr/lib/systemhook.dylib"
+        ]
+    }
+
+    static func checkDYLD() -> Bool {
+        let suspiciousLibraries = [
+            "FridaGadget",
+            "frida",
+            "cynject",
+            "libcycript"
         ]
+        for libraryIndex in 0..<_dyld_image_count() {
+            
+            guard let loadedLibrary = String(validatingUTF8: _dyld_get_image_name(libraryIndex)) else { continue }
+            for suspiciousLibrary in suspiciousLibraries {
+                if loadedLibrary.lowercased().contains(suspiciousLibrary.lowercased()) {
+                    return true
+                }
+            }
+        }
+        return false
+    }
+    
+    static func isFridaRunning() -> Bool {
+        func swapBytesIfNeeded(port: in_port_t) -> in_port_t {
+            let littleEndian = Int(OSHostByteOrder()) == OSLittleEndian
+            return littleEndian ? _OSSwapInt16(port) : port
+        }
+        
+        var serverAddress = sockaddr_in()
+        serverAddress.sin_family = sa_family_t(AF_INET)
+        serverAddress.sin_addr.s_addr = inet_addr("127.0.0.1")
+        serverAddress.sin_port = swapBytesIfNeeded(port: in_port_t(27042))
+        let sock = socket(AF_INET, SOCK_STREAM, 0)
+        
+        let result = withUnsafePointer(to: &serverAddress) {
+            $0.withMemoryRebound(to: sockaddr.self, capacity: 1) {
+                connect(sock, $0, socklen_t(MemoryLayout<sockaddr_in>.stride))
+            }
+        }
+        if result != -1 {
+            return true
+        }
+        return false
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aalzehla/capacitor-jailbreak-root-detection",
-  "version": "0.0.8",
+  "version": "0.0.9",
   "description": "Jailbreak Root detection plugin for capacitor.",
   "main": "dist/plugin.cjs.js",
   "module": "dist/esm/index.js",