Frida Bypass Kit

The Frida Bypass Kit provides automated hooking to bypass several Android security mechanisms:

• Root Detection Bypass: Hides su binaries, Magisk, and root management apps by hooking File.exists(), Runtime.exec(), and PackageManager.
• SSL Pinning Bypass: Intercepts certificate chain verification by hooking TrustManagerImpl.verifyChain() and TrustManagerImpl.checkTrustedRecursive() to work with OkHttp, Retrofit, and custom implementations.
• Emulator Detection Bypass: Spoofs telephony manager values (phone numbers, operator names) and build properties.
• Debug Detection Bypass: Hooks Debug.isDebuggerConnected() to prevent apps from detecting active debugging tools.

Follow these steps to set up frida-server on your rooted Android device or emulator:

1. Identify device architecture: Run the following command to determine which version of frida-server to download: adb shell getprop ro.product.cpu.abi
2. Download: Get the matching frida-server from the official Frida releases.
3. Push to device: Transfer the binary to the /data/local/tmp/ directory and set executable permissions.
4. Run as root: Start the server in the background using su -c.

# Check architecture
adb shell getprop ro.product.cpu.abi

# Push and set permissions
adb push frida-server /data/local/tmp/
adb shell chmod 755 /data/local/tmp/frida-server

# Run as root
adb shell su -c /data/local/tmp/frida-server &

To use the Frida Bypass Kit, you must first install the Frida tools on your local machine using pip.

pip install frida-tools

Once Frida and frida-server are running, use the Frida CLI to spawn the target application and inject the FridaBypassKit.js script. Replace com.example.app with the package name of the application you wish to bypass.

frida -U -f com.example.app -l FridaBypassKit.js