mindmac / hideandroidemulator

Slides and demo resources presented at HITCON 2014 & XCON 2014-"Guess Where I am-Android模拟器躲避的检测与应对"

HideAndroidEmulator

The slides and related demo resources of my presentation at HITCON 2014 and XCON 2014-"Guess Where I am-Android模拟器躲避的检测与应对".

Contents

• HITCON/Demo/ - Demo source code
• HITCON/Resources/ - The Fake Facebook malware, modified build.prop, /proc/tty/drivers and toolbox file
• HITCON/Guess Where I am-Android模拟器躲避的检测与应对.pdf - My slides presented at HITCON 2014.
• XCON-My slides and demo code at XCON 2014.

Requirements

To run the demo code you need:

1. XposedInstaller
2. adbi

hideandroidemulator's Issues

部分手机检测cpu信息会闪退

getCpuInfo获取cpu信息华为p9会闪退

About Android BluePill /EmulatorAntiDetect

Hey @MindMac I am using https://github.com/idanr1986/cuckoo-droid/blob/master/utils/android_emulator_creator/hooking/EmulatorAntiDetect.apk in https://github.com/ajinabraham/Mobile-Security-Framework-MobSF for Emulator Anti-VM check bypass.
I wanted to credit the author not sure who authored this Xposed module. I see similar source code here: https://github.com/MindMac/HideAndroidEmulator/tree/master/HITCON/DemoCode

Are you the author of this module? If not, do you have any idea on the source/author of this xposed module?