freeRASP for React Native

freeRASP for React Native is a mobile in-app protection and security monitoring plugin designed for Runtime App Self Protection (RASP) and application shielding. It provides detection and prevention mechanisms for several security threats, including:

• Root/Jailbreak detection: Identifies compromised environments (e.g., Magisk, KernelSU, checkra1n, Dopamine).
• Bootloader status: Detects unlocked or compromised bootloaders.
• Hooking frameworks: Detects tools like Frida, LSPosed, or Shadow.
• UI Automation: Detects driven-input attacks from tools like Appium.
• Installation integrity: Detects untrusted installation methods.
• Data protection: Protects against App Data Migration attacks.

It is a unified solution that works across mobile platforms without dependency on external web services, ensuring low latency and avoiding additional points of failure.

For Android developers looking to enhance security beyond standard RASP features, freeMalwareDetection can be used to scan for malicious or suspicious applications. It identifies apps with suspicious package names, hashes, or dangerous permissions using various blacklists and security policies.

Note: This is a separate feature/repository. After integrating freeRASP, you should visit the freeMalwareDetection repository for specific implementation details.

To integrate freeRASP into your React Native application, you must follow the official step-by-step instructions provided in the Integration Guide. Because the setup involves both open-source and binary components, following the specific platform-based instructions is critical for a successful implementation.

Detailed instructions can be found at the Official Integration Guide.

When developing or using the library in a monorepo or a specific project structure, you can use react-native.config.js to manually specify the root path for freerasp-react-native to ensure autolinking works correctly. This is particularly useful if the package is located in a parent directory relative to the example project.

const path = require('path');
const pak = require('../package.json');

module.exports = {
  dependencies: {
    [pak.name]: {
      root: path.join(__dirname, '..'),
    },
  },
};

Android-specific configuration for freeRASP. It defines the app's identity and security parameters for the Android environment.

Key properties:

• packageName: The unique package name of your Android application.
• certificateHashes: A list of valid certificate hashes for your app.
• supportedAlternativeStores: Optional list of alternative stores that are considered trusted.
• suspiciousAppDetectionConfig: Configuration for detecting malicious or suspicious apps on the device.

type TalsecAndroidConfig = {
  packageName: string;
  certificateHashes: string[];
  supportedAlternativeStores?: string[];
  suspiciousAppDetectionConfig?: SuspiciousAppDetectionConfig;
};

Defines how freeRASP scans for and identifies suspicious applications on the device.

Key properties:

• packageNames: Specific package names to flag.
• hashes: Specific app hashes to flag.
• requestedPermissions: Arrays of permissions that, if requested by an app, mark it as suspicious.
• grantedPermissions: Arrays of permissions that, if granted to an app, mark it as suspicious.
• scanScope: Defines the depth and type of scan to perform.
• reasonMode: Determines the strictness of detection ('ALL' or 'HIGHEST_CONFIDENCE').

type SuspiciousAppDetectionConfig = {
  packageNames?: string[];
  hashes?: string[];
  requestedPermissions?: string[][];
  grantedPermissions?: string[][];
  scanScope: ScanScope;
  reasonMode: ReasonMode;
};

iOS-specific configuration for freeRASP. It defines the app's identity for the iOS environment.

Key properties:

• appBundleId: The unique bundle identifier for your iOS application.
• appTeamId: Your Apple Developer Team ID.

type TalsecIosConfig = {
  appBundleId: string;
  appTeamId: string;
};

The PluginConfigType interface allows you to configure platform-specific build properties for the freeRASP React Native plugin. You can provide configuration for both ios and android within the main configuration object.

const config: PluginConfigType = {
  ios: {
    useSpm: true
  },
  android: {
    minSdkVersion: 24,
    R8Version: '8.0.0'
  }
};

The TalsecConfig object is the primary configuration interface for initializing freeRASP. It allows you to define platform-specific settings, security behaviors, and contact information for threat reporting.

Key properties:

• watcherMail: (Required) The email address used for reporting/monitoring.
• isProd: Boolean indicating if the app is in production mode.
• killOnBypass: If true, the app will terminate when a security bypass is detected.
• androidConfig: Platform-specific settings for Android.
• iosConfig: Platform-specific settings for iOS.

type TalsecConfig = {
  androidConfig?: TalsecAndroidConfig;
  iosConfig?: TalsecIosConfig;
  watcherMail: string;
  isProd?: boolean;
  killOnBypass?: boolean;
};