Furthermore, this unofficial implementation was incomplete, leading to inconsistent or buggy behavior with certain Xposed Modules. We saw a glimpse of renewed excitement in the project when developer abforce released an ART submodule for AOSP 7.1.2, but as our very own GermainZ points out you were better off waiting for the official Xposed Framework release as abforce's implementation required the framework to be integrated into custom ROMs. But many others have moved on to a life without Xposed on their devices.

For some, the wait has been tolerable mostly due to the sheer number of additional functionality that the Xposed Framework offers in Android Marshmallow. 2) Open SSLUnpinning, look for the app on which you are trying to bypass the certificate pinning, and select it.Throughout the past year, XDA Senior Recognized Developer rovo89, the lead developer of the Xposed Framework, has provided several updates on the progress of Xposed Framework for Android Nougat. (You may need to generate the keystore first with keytool:) # keytool -genkey -v -keystore my-key.keystore -alias alias_name -keyalg RSA -keysize 2048 -validity 10000ĥ) Finally, install the new version and enjoy!īonus Track: If you need to bypass Certificate Pinning (in order to use the app with Burp Proxy for example) you can do this:īypass Certificate Pinning With “Xposed” module: 1) Once you have Xposed installed on your phone, search for “SSLUnpinning” module. Note: Other detection techniques look for any of the below-installed packages on the mobile device at runtime: - supersu.apk - Busybox - Root Cloak - Xpose framework - Cydia - Substrateģ) Build the new version of APK with APKTool: # apktool b /path/to/modified apk/target-new.apk -o /path/to/output/ (“b” for “build” and “-o” for output dir)Ĥ) Sign with jarsigner tool # /path/to/my-key.keystore -storepass password -keypass password target-new.apk alias_name Using GREP, search for any of the follow strings and change them to something random: - Superuser - Supersu - /su - /system/app/Superuser.apk - /system/bin - /system/bin/su - /system/sd/xbin - /system/xbin/su - /system/xbin - /data/local - /data/local/bin - /data/local/xbin - /sbin - /system/bin/failsafe - /vendor/bin Unfortunately this didn’t work for me, so… let’s do this the “hard way” (or should i say… “old school”? :) ).īypass Root Check Manual Way: 1) Decompile the APK file using “APKTool” # apktool d /path/to/apk/target.apk -o /path/to/output/ (“d” for “decompile” and “-o” for output dir) 2) Most root detection techniques rely on checking for files on the OS that indicate the device has been rooted.

Xposed bluestacks 2