165 lines
13 KiB
Markdown
165 lines
13 KiB
Markdown
# MBCPApp Patcher for MB Bank
|
|
|
|
Lightweight **AI-free, humanity** open source tool for patching MB Bank (Android) app with Flutter framework (v6.4.0+) for rooted user (or ROMs with bulit-in CorePatch). mostly written in Bash, made possible by @cuynu and community in Vietnam.
|
|
|
|
- If you are looking pre-bulit app, here : [MBCP Releases](http://cuynutt.ddns.net/mbcp/mbbpatch/releases) | [Install guide](http://cuynutt.ddns.net/mbcp/info/wiki/mbcpinstall_en.-)
|
|
- Licensed as MIT License : [View license on Disroot](https://git.disroot.org/mbcp/mbbpatch/src/branch/mbflutter/LICENSE) | [View license on Selfhosted](http://cuynutt.ddns.net/mbcp/mbbpatch/src/branch/mbflutter/LICENSE)
|
|
|
|
## Notice
|
|
- A recent MBCP-Next fork from the Forgejo instance of someone is found and appears to be removing the original project license and even allowing AI-contribution which is against and disrespect the original project author (@cuynu). It seems to be the another reMBCP. Avoid that ugly fork !
|
|
- The reMBCP project on GitHub is the trash repository, which is [confirmed that it will contains AI-generated code](https://web.archive.org/web/20250927163504/https://github.com/reMBCP/Rembbpatch/issues/2) in the future and even bullying me like a dogshit. Avoid that ugly fork !
|
|
- STOP forking this project and fed to AI-tools as I don't like them. Any forks that is doing this thing is literally slowing down project development !!!
|
|
- PLEASE respect the author code !!!
|
|
|
|
## Introduction
|
|
- This project was made to remove or limit annoying features & root detection & accessibility detection that implemented by the development team of "MB Bank" Android app with additional features such as custom themes ability,etc. **It's not PoC (Proof of Concept) project at all.**.
|
|
- [MBCP](https://t.me/mbbpatch_eng) are closed source before, and many people don't like it because concern about privacy & security issues.
|
|
- In order to support community and allow other devs to improve the project, I spend days to rewritten `MBCP` patches in Bash and open source it so you can patch yourself from original app on (Bare metal, not WSL) Linux environment
|
|
- Note : MBCP are "MBBank CorePatch" but shorter and `MBCP` / `MBCPApp` are the same thing as `MBCP`.
|
|
|
|
|
|
## DISCLAIMER
|
|
I'm not responsible for any illegal action if someone abuse this patch to do illegal things, since it's originally made for technical or well-known users only.
|
|
|
|
## Documentation
|
|
|
|
- [Documentation on self-hosted instance](http://cuynutt.ddns.net/mbcp/mbbpatch/wiki)
|
|
|
|
- [Documentation on Disroot](https://git.disroot.org/mbcp/mbbpatch/wiki/Home)
|
|
|
|
## Requirements & Usage & How-to use patcher
|
|
- Follow documentation here : [Patcher Usage (self-hosted)](http://cuynutt.ddns.net/mbcp/mbbpatch/wiki/patcher-usage.-) | [Patcher Usage (Disroot)](https://git.disroot.org/mbcp/mbbpatch/wiki/patcher-usage.-)
|
|
|
|
## Patches list :
|
|
|
|
> [!IMPORTANT]
|
|
> As of MB v6.4.68+, MB's dev team are finally fight against this project by compressing `libapp.so` and even improved their tampered library & dex check from both server & app-side !
|
|
>
|
|
> This means most important patches that is patching `libapp.so` are now useless and can't be used :(
|
|
>
|
|
> [Block adjust volume on sEKYC], [Remove new zimperium check], [Hide VTAP root detection activity & dialog] patches still works with latest app version, but the app will refuse to login with `GW934` error.
|
|
>
|
|
|
|
### [📦 `MB Bank : com.mbmobile`](https://t.me/embeeapks)
|
|
<details>
|
|
|
|
| ⚙️ Patch | 📜 Description | 🏦 Suggested version |
|
|
|:--------:|:--------------:|:-----------------:|
|
|
| `Block adjust volume on sEKYC` | Prevent the device volume from being adjusted when entering eKYC activity. | v6.4.0 ~ v6.4.75 |
|
|
| `Change app logo` | Change the app logo with set of icons. | v6.4.0 ~ v6.4.75 |
|
|
| `Change widget background to dark ` | Change widget background to dark if you use MBBHomeWidget. | v6.4.0 ~ v6.4.75 |
|
|
| `Force portrait screen` | Force the screen always portrait on app, espcially when launching. | v6.4.0 ~ v6.4.75 |
|
|
| `Remove MB AI Bullsh*t resources` | Remove the bullsh*t MB AI resources from app. Need to implement more in the future. | v6.4.74 ~ v6.4.75 |
|
|
| `Remove MB Themes Store` | Remove the MB Themes Store banner from Themes list, preventing access to MB Theme Store. | v6.4.28 ~ v6.4.75 |
|
|
| `Remove new zimperium check` | Remove the new Zimperium (ZDefend) root detection from app. Picked up from Legacy Patch. | v6.4.60 ~ v6.4.75 |
|
|
| `Remove bulit-in fonts` | Remove app font and force to use device font for most app components. | v6.4.0 ~ v6.4.75 |
|
|
| `Modify app theme` | Modify the app theme in app from original one to others. Currently have MBClassic and SemiPriority. | v6.4.30 ~ v6.4.75 |
|
|
| `Remove garbage permission and activities` | Removes tracking permission & activities from app. | v6.4.0 ~ v6.4.75 |
|
|
| `Revert old eMBee logo` | Revert old eMBee logo, specially on product consultation options. | v6.4.53 ~ v6.4.75 |
|
|
| `Remove useless libraries` | Remove the useless libraries from app, only for v6.4.67+ | v6.4.67 ~ v6.4.75 |
|
|
| `Remove animated QR background` | Remove the animated QR background on bottom navigation bar and replace with white background. | v6.4.43 ~ v6.4.75 |
|
|
| `Remove VNPAY VMB20` | Remove the VNPAY Airplane related activities. | v6.4.55 ~ v6.4.75 |
|
|
| `Restore old registration resources` | Restore old resources on `onboarding` page. | v6.4.48 ~ v6.4.75 |
|
|
| `Hide VTAP root detection activity & dialog` | Hide the old root detection screen and dialog showing "Device is rooted" (might have issues on some HyperOS ROMs). | v6.4.0 ~ v6.4.75 |
|
|
| `Legacy hide VTAP activity & dialog` | Hide the first root detection screen with dialog showing "Device is rooted" but not bypassing it. (GW908 will present, unlike standard `Hide VTAP root detection activity & dialog` patch). Only use for some ugly ROMs which crashing with standard patch. | v6.4.53 ~ v6.4.75 |
|
|
| `Remove protection shield` | Remove the MIC protection shield on profile picture and login screen. (not app protection) | v6.4.0 ~ v6.4.75 |
|
|
| `Remove app from launcher` | Remove the app icon from launcher, and start with `am start` or with MBZDefend-Fix Action/Termux. | v6.4.0 ~ v6.4.75 |
|
|
| `Set targetSdkVersion to 34` | Set the `targetSdkVersion` to 34 (Android 14). | v6.4.10 ~ v6.4.75 |
|
|
| `Add modified resources` | Adds the specific strings for MBCP on eKYC phase, and modify the DigiBank logo. | v6.4.0 ~ v6.4.75 |
|
|
| `Add anime resources` | Adds anime-related resources to some components inside app. | v6.4.45 ~ v6.4.75 |
|
|
|
|
|
|
</details>
|
|
|
|
## Old patches
|
|
|
|
> [!IMPORTANT]
|
|
> Those patches are no longer compatible with newer/current app version. It's can't be fixed unless MB decompress the [`libapp.so`] or until I find the method to decompress it manually.
|
|
|
|
### [📦 `MB Bank : com.mbmobile`](https://t.me/embeeapks)
|
|
<details>
|
|
|
|
| ⚙️ Patch | 📜 Description | 🏦 Suggested version |
|
|
|:--------:|:--------------:|:-----------------:|
|
|
| `Autopatch strings` | Modify the strings in-app within `libapp.so`, and also fixes some translation typo in-app. | v6.4.0 ~ v6.4.66 |
|
|
| `Bypass GW934 checksum` | Bypass the GW934 error rolled-out from MB server-side which prevent MBCP users from logging in to app. Only use this after applied all your patch needs. | v6.4.64 ~ v6.4.66 |
|
|
| `Disable MB Membership` | Disable the MB Membership badge below pfp and all of it's features. | v6.4.0 ~ v6.4.66 |
|
|
| `Remove invoke to mbshield` | Make app don't invoke to mbshield when opening (MainActivity) and (MBBHomeWidgetQR) only | v6.4.22 ~ v6.4.66 |
|
|
| `Remove custom profile picture` | Force the use of default profile picture instead of your current one on MB's server side. | v6.4.0 ~ v6.4.66 |
|
|
| `Restore old 682 lib` | Restore old v6.4.61 `libapp.so` to prevent enforced `quockhanh` theme changes on v6.4.62. | v6.4.62 |
|
|
| `Remove eMBee` | Removes eMBee options in app, alongside with Customer support. | v6.4.43 ~ v6.4.66 |
|
|
| `Remove banner & MiniApp` | Removes the banner and MiniApp on `homeLanding` page when logged in. | v6.4.43 ~ v6.4.66 |
|
|
| `Remove VPN detection` | Remove the VPN detection that warn users to turn it off on app bundle. | v6.4.52 ~ v6.4.66 |
|
|
| `Spoof app version to v6.4.68` | Spoof the app version from v6.4.66 to v6.4.68. | v6.4.64 ~ v6.4.66 |
|
|
| `Bypass accessibility & malicious apps check` | Remove the restriction of using the app when an app using accessibility service or "malicious apps" like (HideMyAppList) installed. | v6.4.25 ~ v6.4.54 |
|
|
| `Remove new root detection` | Remove the new Zimperium (ZDefend) root detection from app. (Now requires workaround for v6.4.56+) | v6.4.15 ~ v6.4.58 |
|
|
| `Bypass new zimperium detection` | Bypass the root check from Zimperium within app. | v6.4.56 ~ v6.4.63 |
|
|
</details>
|
|
|
|
|
|
## Legacy patches
|
|
- Those patches are not implemented or outdated, which is used for discontinued MB app version.
|
|
### [📦 `MB Bank : com.mbmobile`](https://t.me/embeeapks)
|
|
<details>
|
|
|
|
| ⚙️ Patch | 📜 Description | 🏦 Suggested version |
|
|
|:--------:|:--------------:|:-----------------:|
|
|
| `Bypass signature check` | Not implemented | v6.4.0 ~ v6.4.21 |
|
|
| `[TEST] Remove v6.4.56 root detection` | New workaround that removes new Zimperium (ZDefend) root detection from app. | v6.4.56 |
|
|
| `Bypass 1200 error` | Workaround for 1200 error that happening on original MB app with specific version, now discontinued. | v6.4.45 |
|
|
</details>
|
|
|
|
## Proprietary code
|
|
> [!WARNING]
|
|
> This project contain some proprietary code extracted from MB's app that has been modified to bypass something else, but the modified proprietary code is completely public and open source, it will be used for patches.
|
|
>
|
|
> That applies for following folder :
|
|
|
|
- 1. `blob_patches/bypass_apptampering`
|
|
- 2. `blob_patches/noadjust_volume_sekyc`
|
|
- 3. `blob_patches/skip_maintainscreen`
|
|
- 4. `blob_patches/bypass_accessibility_applist`
|
|
- 5. `blob_patches/bypass_rootold`
|
|
- 6. `blob_patches/fix_df16211`
|
|
|
|
- Under `mbsig` directory, its contain original signature from original MB's app, which is necessary to make app works after patching process because the app doesn't work with different APK signature.
|
|
- Everything including that listed above code are all licensed under MIT license, it's can be considered as reverse engineered code :>
|
|
|
|
## TODO
|
|
|
|
- [ ] Bypass the new dex & libraries checksum for MB v6.4.67+
|
|
|
|
- [x] Adapt new v6.4.67 zimperium structure
|
|
|
|
- [x] Adapt new v6.4.68 trungthu theme
|
|
|
|
## Contribute
|
|
- PRs are welcome, but you are NOT allowed to use any AI-tools for creating PRs to this project, even if it's manually reviewed by human. please use your brain and search engine & read documentation (without AI things) !
|
|
- If you wish to use AI-tools, please go ahead and find for another project instead.
|
|
|
|
## Project history
|
|
|
|
- 05/2023 : MB Bank MOD APK ANDROID project created on Telegram (@mbbmod), providing modified MB Bank APKs since v5.8 with lots of features such as bypassing accessibility check and show a guide to hide root instead of show rooted screen then close the app.
|
|
- 01/2024 : Channel from 2023 is deleted, due to Telegram banning account (@cuynutt)
|
|
- 06/2024 : [MB Android Patched] channel created, providing modified MB Bank Flutter APKs and then MB React Native APKs
|
|
- 01/2025 : Channel renamed to [MBCP Android] due to MB discontinued version that does not requires CorePatch. MBCP Helper also existed since then.
|
|
- 05/2025 : Project is rewritten from closed source (mostly with MT Manager) to open source with `bash` programming language, reduce the trust issues with closed source app before, also allow anyone to patch it manually.
|
|
- 06/2025 : [Hide VTAP root detection activity & dialog] patch was added, enables the ability to use the MBCP app with superuser (root permission) enabled.
|
|
- 08/2025 : @fukiame joining to refactor the project source code, made it easier to maintain in the future, also implement some specific nice logic.
|
|
- 09/2025 : Original project repository is deleted due to contain Gemini (AI-generated) code `platform-tools.sh` (created with stupid behaviour, anything except that is 100% AI-free) then it has been recreated just right after that and cherry-picked commits from the old project repository, that's why you see older commits with merge conflicts; The project is completely AI-free since 09/2025.
|
|
- 10/2025 : MB discontinued `v6.4.66`, the last version with almost all patches working (except `bypass_accessibility_applist`) with `GW525` error when logging in
|
|
- 11/2025 : After multiple times lying myself and always said that I'm not a developer, **I claim myself as a MBCP developer** and still having skill issues, but atleast, I made this project, and solved the issues that MB's development team created to the MB Bank app by writing code to bypassing them.
|
|
- 11/2025 (2) : MB released `v6.4.74` with AI-crap button that replaces legacy search button. I created a patch that force replace it back to old search icon.
|
|
- ...
|
|
|
|
## Credits
|
|
- [apktool](https://github.com/iBotPeaches/Apktool)
|
|
- [APKEditor](https://github.com/REAndroid/APKEditor/)
|
|
- [MT Manager](https://mt2.cn/) to handle APK signature scheme v2/v3 (in the past)
|
|
- [Zhaxia CN](https://t.me/zhaxia_cn) for sticker packs (Add anime resources)
|
|
- [FlatIcon](https://flaticon.com) for some icons
|
|
|
|
## Contributors
|
|
- [Cuynu](https://git.disroot.org/cuynu) - MBCP project author/maintainer
|
|
- [fukiame](https://git.disroot.org/fukiame) - refactor & other improvements
|
|
- [Ngankbakaa](https://github.com/miyukocutee) - contributor
|