genuine

What's genuine?

A module anti Xposed hook, anti fake signature, anti virtual app (binder proxy), and optional anti odex, anti overlay.

Since 2019-03, Genuine switch to pure c for hide itself. If you want to hide your package name and / or class name, contact me, or do it like fill_XXX in genuine.c.

• Xposed hook: hook any Java method in Xposed.

  • EdXposed
  • (optional) TaiChi, closed source

• fake signature: fake your signature. genuine module requires usage of Apk Sign v2 or Apk Sign v3.

• (optional) PLT Hook: currently only check jniRegisterNativeMethods by flag CHECK_HOOK.

• virtual app (binder proxy): run your app in virtual app, like VirtualApp.

• (optional) odex: modify odex codes without modify apk, like URET

• (optional) overlay: overlay resources, prevent from loading apk from /data.

How to use?

1. run java SimpleApkV2 , save output to src/main/jni/genuine.h

2. modify build.gradle for rootProject.XXX

3. search FIXME in src/main/jni/genuine.c

4. define your own methods in src/main/jni/genuine_extra.c

   don't forget to update your own class

features

…

fill_xxxx

python3 fill_v_value.py v 

practices

1. make sure libgenuine.so always loaded

2. crash or show native activity for fake, error, fatal

And license?

CC BY-NC-SA 4.0.

For commercial usage, contact me. However, if you are individial, or enterprise less than 5 staff, you can use it under CC BY-SA 4.0.