MB ZDefend Bypass Module for MB Bank

• Current module version : v2.6-mb | Download from releases tab

• Author : Cuynu and backslashxx for sed script

• Status : Working !

• Required MB Bank app version : v6.4.15 and newer

• Required Biz MBBank v2.0 app version : v1.0.85 and newer :>

Why this exists ?

• Zimperium and MB Bank development team didn't respect our freedom and privacy by blocking rooted devices (KernelSU/KernelSU-Next/Magisk/APatch), device using LSPosed with a screen showing "THIẾT BỊ JAILBROKEN HOẶC ROOTED" or "JAILBROKEN DEVICE OR ROOTED" (in English) with only "Close app" option.

Source code

This project are licensed under MIT License.

• For module : Located on module_new

• For patched lib (Deprecated) : There is no source code for that as it belong to MB Bank development team and Zimperium. You can make your own patched lib with old method below if you don't want to use my pre-patched lib :)

Usage (Module)

• Ensure that old root detection (vtap) is bypassed by hiding MB Bank or Biz MBBank v2.0 App from root with any old ways, like Denylist as the module does not handle this old root detection method (For Magisk : Here | For Magisk Delta/Kitsune : Here
• Download mbzdefend-fix module from releases or clone the repo, then ./createmodule.sh
• Flash with your root app (Magisk, KernelSU, KernelSU Next, APatch, etc)
• It should automatically patches libZDefend.so and libapp.so then open MB Bank or Biz MB Bank v2.0 app once it finished.
• (If you are using MBCP, you don't have to use this module !)

Tested app version

*New Zimperium implementation MB Bank v6.4.53 (MBShield) - OK (no crashes)

*New Zimperium implementation MB Bank v6.4.52 (MBShield) - OK (no crashes)

*New Zimperium implementation MB Bank v6.4.51 (MBShield) - OK (no crashes)

*NEW Zimperium implementation MB Bank v6.4.50 (MBShield) - OK (no crashes)

*NEW Zimperium implementation MB Bank v6.4.49 (MBShield) - OK (no crashes)

*New Zimperium implementation MB Bank v6.4.48 (MBShield) - OK (no crashes)

MB Bank v6.4.47 (MBShield) - OK (no crashes)

MB Bank v6.4.46 (MBShield) - OK (no crashes)

MB Bank v6.4.45 - OK (no crashes)

MB Bank v6.4.44 - OK - No Zimperium found. (MBShield)

MB Bank v6.4.43 (MBShield) - OK (no crashes)

MB Bank v6.4.42 (MBShield) - OK (no crashes)

MB Bank v6.4.41 (MBShield) - OK (no crashes)

MB Bank v6.4.40 (MBShield) - OK (no crashes)

MB Bank v6.4.39 (MBShield) - OK (no crashes)

MB Bank v6.4.38 (MBShield) - OK (no crashes)

MB Bank v6.4.37 (MBShield) - OK (no crashes)

MB Bank v6.4.36 (MBShield) - OK (no crashes)

MB Bank v6.4.35 (MBShield) - OK (no crashes)

MB Bank v6.4.34 (MBShield) - OK (no crashes)

MB Bank v6.4.33 (MBShield) - OK (no crashes)

MB Bank v6.4.32 (MBShield) - OK (no crashes)

MB Bank v6.4.31 (MBShield) - OK

MB Bank v6.4.30 (MBShield) - OK

MB Bank v6.4.29 (MBShield) - OK

MB Bank v6.4.28 (MBShield) - OK

MB Bank v6.4.27 (MBShield) - OK

How this was done (Pre-patched binary only) (OUTDATED)

• Use HxD Hex Editor (can be run on Linux env with wine)
• Get libZDefend.so from MB Bank app, APKs can be get from Google Play or Aurora Store
• For libvvb2060.so, create a empty file and name it as libvvb2060.so
• Open libZDefend.so with HxD Hex Editor, use Replace feature (Ctrl + R)
• In search for field, type zimperium
• In replace with field, fill 9 empty blank space characters or any random words that has 9 characters -> Replace all (Be careful, if something went wrong then modified libZDefend.so file will not work at all)
• After HxD replaced zimperium with 9 empty black space characters or empty, save it with (Ctrl + S)
• Copy thatlibZDefend.so you just modified to MB Bank lib folder
• Force close MB Bank app if its not completely stopped, then open MB Bank app again, from now its should load new library and the root & hook detection from Zimperium should be bypassed