Saturday, March 5, 2016

Bypass Signature Check

Hi there,
It the first time here I'm asking for your help !!
I've learn a lot from these forum but can't find an answer to this question !
I first modify waze to alert about speedcamera whatever you speed (I learn from there http://ift.tt/1oXS1UI) and then patch waze to enable radar in France!

Since Waze 3.9.9.906 alpha, waze added a signature verification at startup which cause the app to crash if signature is different than original.
I tried to dig inside libwaze.so with no sucess (including use of zynamics bindiff) to check for change between 3.9.9.0 and 3.9.9.906.

Can you help me or tell what I can do to bypass signature verification? Is it possible to modify libwaze.so without altering original signature or to spoof waze original signature?
Here is a logcat of the crash :
Code:

03-05 14:36:14.946 25806 25806 E WAZE    : com.waze.MainActivity@86093e
--------- beginning of crash
03-05 14:36:14.955 25806 25806 E AndroidRuntime: FATAL EXCEPTION: main
03-05 14:36:14.955 25806 25806 E AndroidRuntime: Process: com.waze, PID: 25806
03-05 14:36:14.955 25806 25806 E AndroidRuntime: java.lang.SecurityException: Signature check failed for com.waze
03-05 14:36:14.955 25806 25806 E AndroidRuntime:        at android.os.Parcel.readException(Parcel.java:1620)
03-05 14:36:14.955 25806 25806 E AndroidRuntime:        at android.os.Parcel.readException(Parcel.java:1573)
03-05 14:36:14.955 25806 25806 E AndroidRuntime:        at com.google.android.gms.common.internal.zzs$zza$zza.zza(Unknown Source)
03-05 14:36:14.955 25806 25806 E AndroidRuntime:        at com.google.android.gms.common.internal.zzj.zza(Unknown Source)
03-05 14:36:14.955 25806 25806 E AndroidRuntime:        at com.google.android.gms.common.api.internal.zzh$zzc.zzpK(Unknown Source)
03-05 14:36:14.955 25806 25806 E AndroidRuntime:        at com.google.android.gms.common.api.internal.zzh$zzf.run(Unknown Source)
03-05 14:36:14.955 25806 25806 E AndroidRuntime:        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:423)
03-05 14:36:14.955 25806 25806 E AndroidRuntime:        at java.util.concurrent.FutureTask.run(FutureTask.java:237)
03-05 14:36:14.955 25806 25806 E AndroidRuntime:        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1113)
03-05 14:36:14.955 25806 25806 E AndroidRuntime:        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:588)
03-05 14:36:14.955 25806 25806 E AndroidRuntime:        at com.google.android.gms.internal.zzob.run(Unknown Source)
03-05 14:36:14.955 25806 25806 E AndroidRuntime:        at java.lang.Thread.run(Thread.java:818)
03-05 14:36:15.008  919  3085 W ActivityManager:  Force finishing activity http://ift.tt/1prwJ2k


Thank you all!


via xda-developers http://ift.tt/1Ru5PNS

IFTTT

Put the internet to work for you.

Turn off or edit this Recipe

No comments:

Post a Comment