LIAPP ALERT

[THETWINSOFFICIAL]

Some can tell me solution ?

Game detected gameguardian 

I try hide gameguardian in seetting but useless and i try hide GG using xposed but Same useles 

Have solution ?

 

 

[THETWINSOFFICIAL]

It's get detected after change data in some address

[MAARS]

Install GG to a virtual and remove gg from your phone + allow GG to use root in virtual. You should be good to go

Edited May 5, 2022 by MAARS

[MAARS]

Better use vxPosed

[darklinux]

  On 5/5/2022 at 12:20 PM, CYBORG-WARRIOR said:

It's get detected after change data in some address

Expand  

Are you changing code, read data, or read write data? If its read write data then they probably have two copies of the same data to check against.

[darklinux]

  On 5/6/2022 at 12:34 AM, CYBORG-WARRIOR said:

Yes changing code read write data

Expand  

If you are changing code it would be easy for them to detect changes. I'm not sure if GG supports hardware debugging to find who is read the address. I don't see anything under the api section. You could find a page of code that does not get executed and remove the page read flag. This would cause an access exception pointing to the code doing the check.

--edit

Looks like GG does not support page protection changes   Should request to have mprotect added as a new feature.

Edited May 6, 2022 by darklinux

[THETWINSOFFICIAL]

  On 5/6/2022 at 7:21 PM, darklinux said:

If you are changing code it would be easy for them to detect changes. I'm not sure if GG supports hardware debugging to find who is read the address. I don't see anything under the api section. You could find a page of code that does not get executed and remove the page read flag. This would cause an access exception pointing to the code doing the check.

--edit

Looks like GG does not support page protection changes   Should request to have mprotect added as a new feature.

Expand  

Arrrggg but i hope next update enyby add mprotect 

[darklinux]

  On 5/6/2022 at 9:26 PM, CYBORG-WARRIOR said:

Arrrggg but i hope next update enyby add mprotect 

Expand  

Ya, that would be cool, I'm not sure where to post requests, but its probably too much work. I haven't checked if they would even be able to catch the access violation via an exception handler. Still learning 

[darklinux]

  On 5/9/2022 at 7:24 PM, darklinux said:

Ya, that would be cool, I'm not sure where to post requests, but its probably too much work. I haven't checked if they would even be able to catch the access violation via an exception handler. Still learning 

Expand  

nvm, this does not look easy
https://stackoverflow.com/questions/1083154/how-can-i-catch-sigsegv-segmentation-fault-and-get-a-stack-trace-under-jni-on/1083335#1083335

[THETWINSOFFICIAL]

  On 5/5/2022 at 7:46 PM, darklinux said:

Are you changing code, read data, or read write data? If its read write data then they probably have two copies of the same data to check against.

Expand  

Yes changing code read write data

  On 5/5/2022 at 3:04 PM, MAARS said:

Install GG to a virtual and remove gg from your phone + allow GG to use root in virtual. You should be good to go

Expand  

No no , detected after change data