This instance requires JavaScript in order to display correctly. You can still browse the instance, but some components will be broken.

Watch

Bypass Biz/MB Bank zimperium root/hook detection (does not bypass VTAP root detection)

android mbbank

Find a file

Repository files (latest commit first)
Filename	Latest commit message	Latest commit date
Cuynu 8345757644 feat: zdefend-fix(customize.sh): handle reinstall app after MBCP app check move selinux check to after app check also handle app installation failure too some other changes idk Signed-off-by: Cuynu <cuynu@proton.me>		2026-05-01 20:34:31 +07:00
module_new	feat: zdefend-fix(customize.sh): handle reinstall app after MBCP app check	2026-05-01 20:34:31 +07:00
.gitignore	patching [com.mbmobile] only and minor other changes	2025-05-12 11:41:47 +07:00
createmodule.sh	feat: createmodule.sh: commit id after module name	2025-12-17 02:05:54 +07:00
LICENSE	license as MIT	2025-02-20 10:15:46 +00:00
README.md	feat: bump v4.2-mb	2026-05-01 17:48:33 +07:00

MB ZDefend Bypass Module for MB/MBCP

Download from releases tab
Author : Cuynu and backslashxx for sed script
Status : Working with MBCP!
Required app version : MBCP v6.4.67 and up for v3.2-mb+ | MB v6.4.15 up to v6.4.58 for v3.0-mb or lower
Required Biz MBBank v2.0 app version : v1.0.85 and newer :>

Why this exists ?

Zimperium and MB Bank development team didn't respect our freedom and privacy by blocking rooted devices (KernelSU/KernelSU-Next/Magisk/APatch), device using LSPosed with a screen showing "THIẾT BỊ JAILBROKEN HOẶC ROOTED" or "JAILBROKEN DEVICE OR ROOTED" (in English) with only "Close app" option.

git clone https://git.disroot.org/mbcp/mbzdefend-fix.git
cd mbzdefend-fix
./createmodule.sh

This project are licensed under MIT License.

For module : Located on module_new
For patched lib (Deprecated) : There is no source code for that as it belong to MB Bank development team and Zimperium. You can make your own patched lib with old method below if you don't want to use my pre-patched lib :)

Ensure that old root detection (vtap) is bypassed by hiding MB Bank or Biz MBBank v2.0 App from root with any old ways, like Denylist as the module does not handle this old root detection method (For Magisk : Here | For Magisk Delta/Kitsune : Here
Download mbzdefend-fix module from releases or clone the repo, then ./createmodule.sh
Flash with your root app (Magisk, KernelSU, KernelSU Next, APatch, etc)
It should automatically patches libZDefend.so and libapp.so then open MB/MBCP or Biz MB Bank v2.0 app once it finished.
NOTE : Every time you need to use MB Bank, you MUST run "Action" on root app -> Modules -> MB ZDefend Bypass instead of open app directly from app drawer (Applies for v6.4.56+ due to server-side MB changes)
NOTE : App will open with 1005/1007 error or stuck on MB logo, DON'T PANIC and wait for error popup appears, then press "Try again" until app enter login screen !!!

Use HxD Hex Editor (can be run on Linux env with wine)
Get libZDefend.so from MB Bank app, APKs can be get from Google Play or Aurora Store
For libvvb2060.so, create a empty file and name it as libvvb2060.so
Open libZDefend.so with HxD Hex Editor, use Replace feature (Ctrl + R)
In search for field, type zimperium
In replace with field, fill 9 empty blank space characters or any random words that has 9 characters -> Replace all (Be careful, if something went wrong then modified libZDefend.so file will not work at all)
After HxD replaced zimperium with 9 empty black space characters or empty, save it with (Ctrl + S)
Copy thatlibZDefend.so you just modified to MB Bank lib folder
Force close MB Bank app if its not completely stopped, then open MB Bank app again, from now its should load new library and the root & hook detection from Zimperium should be bypassed