cuynu/HMAL-OSS
cuynu/HMAL-OSS
Watch
1
Fork
You've already forked HMAL-OSS
 0
Code Issues Pull requests Releases 1 Activity

feat: update ads, add syscall interception, and more changes

Browse source
This commit is contained in:
Nullptr 2021-12-01 14:22:24 +08:00
commit c3a6bb3bbc
1 changed files with 28 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

6
README.md
View file

@ -37,8 +37,6 @@ This refers to the string params of methods of [PackageManagerService](https://c
How to use it: pms methods whose string params contain configured strings will be intercepted
Notice that under **MOST** circumstances you do not need to switch on this interception nor need to add any rule.
### How did HMA Magisk module work?
HMA install inline hooks for syscall wrappers in libc and modify the results to make the app think there "isn't" suspicious files or directories.
HMA install inline hooks for syscalls and replace the path to dummy to make the app think there "isn't" suspicious files or directories.
However, this can be bypassed by directly calling syscall with assembly code. Due to upstream hook framework's problem on ARM64, I cannot write direct syscall hooks right now.
What's more, inline hook is very **unstable**, and can be detected by some methods. So do not switch on *file detection / maps scan* interceptions if not needed.
However, syscall hook is very **unstable**, and can be detected by some methods. So do not switch on *file detection / maps scan* interceptions if not needed.