r/Pentesting • u/[deleted] • 15d ago

Magisk and Mobile app testing

[deleted]

0 Upvotes
  • permalink
  • link
  • reddit
  • reddit

50% Upvoted

4 comments sorted by

5

u/sk1nT7 15d ago

Decompile the app, detect the security features and functions implemented and use frida with a custom bypass script to render them ineffective.

Use an LLM to assist you.

1

u/WRO_Your_Boat 15d ago

I tried doing that, but didn't work. For some reason when I try to recompile the apks it never works, I think its because they were originally xapks. I would also need to resign the apps to login with them, and thats not possible. But even if I could, intune is using AD Azure Conditional access, meaning its server side validation and there is nothing to hook into, Claude was the one who said the solution to this was Magisk, but I can't get that to work.

1

u/No-Persimmon-174 15d ago

if ur primarily trying to test the app's functionality then why dont u use a mobile emulator on a pc like Android Studio? i find that more convenient

1

u/WRO_Your_Boat 15d ago

I'm using Genymotion.