Bypass Biz/MB Bank zimperium root/hook detection (does not bypass VTAP root detection)
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Cuynu 69076cda04 fix: MB_Bank.sh: typo
Signed-off-by: Cuynu <cuynu@proton.me>
2025-10-07 02:09:15 +07:00
module_new fix: MB_Bank.sh: typo 2025-10-07 02:09:15 +07:00
.gitignore patching [com.mbmobile] only and minor other changes 2025-05-12 11:41:47 +07:00
createmodule.sh dont remove "libholdingshadow.so" 2025-06-09 01:33:09 +07:00
LICENSE license as MIT 2025-02-20 10:15:46 +00:00
README.md README: attention and recommendation 2025-07-30 21:53:09 +07:00

MB ZDefend Bypass Module for MB Bank

https://gitlab.com/cuynu/mbzdefend-fix
  • Current module version : v3.0-mb | Download from releases tab

  • Author : Cuynu and backslashxx for sed script

  • Status : Semi-working with workaround

  • Required MB Bank app version : v6.4.15 up to v6.4.58

  • Required Biz MBBank v2.0 app version : v1.0.85 and newer :>

Attention

  • This module only works with MB Bank v6.4.58 or older, it will not works with v6.4.59 or newer !
  • You can downgrade to v6.4.55 or v6.4.58 and continue to use until MB drop support for that version.
  • It is recommended to use patched MB app (MBCP) : HERE | Source code

Why this exists ?

  • Zimperium and MB Bank development team didn't respect our freedom and privacy by blocking rooted devices (KernelSU/KernelSU-Next/Magisk/APatch), device using LSPosed with a screen showing "THIẾT BỊ JAILBROKEN HOẶC ROOTED" or "JAILBROKEN DEVICE OR ROOTED" (in English) with only "Close app" option.

Source code

This project are licensed under MIT License.

  • For module : Located on module_new

  • For patched lib (Deprecated) : There is no source code for that as it belong to MB Bank development team and Zimperium. You can make your own patched lib with old method below if you don't want to use my pre-patched lib :)

Usage (Module)

  • Ensure that old root detection (vtap) is bypassed by hiding MB Bank or Biz MBBank v2.0 App from root with any old ways, like Denylist as the module does not handle this old root detection method (For Magisk : Here | For Magisk Delta/Kitsune : Here
  • Download mbzdefend-fix module from releases or clone the repo, then ./createmodule.sh
  • Flash with your root app (Magisk, KernelSU, KernelSU Next, APatch, etc)
  • It should automatically patches libZDefend.so and libapp.so then open MB Bank or Biz MB Bank v2.0 app once it finished.
  • NOTE : Every time you need to use MB Bank, you MUST run "Action" on root app -> Modules -> MB ZDefend Bypass instead of open app directly from app drawer (Applies for v6.4.56+ due to server-side MB changes)
  • NOTE : App will open with 1005/1007 error or stuck on MB logo, DON'T PANIC and wait for error popup appears, then press "Try again" until app enter login screen !!!

Tested app version

How this was done (Pre-patched binary only) (OUTDATED)

  • Use HxD Hex Editor (can be run on Linux env with wine)
  • Get libZDefend.so from MB Bank app, APKs can be get from Google Play or Aurora Store
  • For libvvb2060.so, create a empty file and name it as libvvb2060.so
  • Open libZDefend.so with HxD Hex Editor, use Replace feature (Ctrl + R)
  • In search for field, type zimperium
  • In replace with field, fill 9 empty blank space characters or any random words that has 9 characters -> Replace all (Be careful, if something went wrong then modified libZDefend.so file will not work at all)
  • After HxD replaced zimperium with 9 empty black space characters or empty, save it with (Ctrl + S)
  • Copy thatlibZDefend.so you just modified to MB Bank lib folder
  • Force close MB Bank app if its not completely stopped, then open MB Bank app again, from now its should load new library and the root & hook detection from Zimperium should be bypassed