TOSHI• V2 CHAN
الذهاب إلى القناة على Telegram
ALWAYS STOCKING
إظهار المزيدلم يتم تحديد البلدالفئة غير محددة
342
المشتركون
لا توجد بيانات24 ساعات
+277 أيام
+7030 أيام
أرشيف المشاركات
"de.robv.android.xposed.installer", -- Xposed Installer
"com.topjohnwu.magisk", -- Magisk (rooting solution, often used for bypassing)
-- Add more as you discover them
}
for _, pkg in ipairs(suspiciousPackages) do
local function isPackageInstalled(packageNameToCheck)
local success, result = pcall(function()
packageManager.getPackageInfo(packageNameToCheck, 0)
return true
end)
return success and result
end
if isPackageInstalled(pkg) then
log("CRITICAL WARNING: Suspicious package (cracking/modding tool) detected: " .. pkg)
detected = true
end
end
-- 2.5. Root Detection (Often a prerequisite for cracking/modding)
-- This is a basic root detection. More advanced methods exist.
local function isRooted()
local paths = {
"/system/app/Superuser.apk",
"/sbin/su",
"/system/bin/su",
"/system/xbin/su",
"/data/local/xbin/su",
"/data/local/bin/su",
"/system/sd/xbin/su",
"/system/bin/failsafe/su",
"/data/local/su",
"/su/bin/su",
"/system/xbin/daemonsu",
"/system/etc/init.d/99SuperSUDaemon",
"/system/bin/.ext/.su",
"/system/usr/we-need-root/su",
"/system/app/Kinguser.apk",
"/data/data/com.kingroot.kinguser",
"/data/data/eu.chainfire.supersu",
"/data/data/com.noshufou.android.su",
}
local file = luajava.bindClass("java.io.File")
for _, path in ipairs(paths) do
if file:new(path):exists() then
return true
end
end
-- Check for test-keys in build tags (often indicates custom ROM or rooted device)
local build = luajava.bindClass("android.os.Build")
if string.find(build.TAGS, "test-keys") then
return true
end
-- Check for su command in PATH
local runtime = luajava.bindClass("java.lang.Runtime"):getRuntime()
local process = runtime:exec("which su")
local exitCode = process:waitFor()
if exitCode == 0 then -- 'su' command found
return true
end
return false
end
if isRooted() then
log("CRITICAL WARNING: Device is rooted! Increased risk of tampering.")
-- detected = true -- Uncomment to treat rooted devices as tampered
end
return detected
end
-- Main anti-crack function
function runSuperStrongAntiCrackChecks()
log("Starting super strong anti-crack checks...")
local detected = false
-- Perform Lua code integrity checks
if checkLuaCodeIntegrity() then
detected = true
end
-- Perform Android app integrity, signature, and debugging checks via LuaJava
if checkAndroidAppIntegrityAndDebugging() then
detected = true
end
if detected then
log("SUPER STRONG ANTI-CRACK: Cracking/tampering activity detected! Taking severe action...")
-- TODO: Implement your desired severe action here.
-- For super strong protection, consider:
-- 1. Immediately exiting the app: os.exit()
-- 2. Wiping sensitive data (if applicable and legally compliant).
-- 3. Reporting to your backend server with device details.
-- 4. Displaying a strong warning and preventing further app usage.
os.exit() -- Example: Force exit the application immediately
return true
else
log("Super strong anti-crack: No cracking/tampering activity detected.")
return false
end
end
-- Call runSuperStrongAntiCrackChecks() at critical points:
-- - Immediately at app startup (e.g., in your main.lua or activity's onCreate equivalent).
-- - Before sensitive operations (e.g., in-app purchases, accessing user data).
-- - Periodically during app runtime (e.g., every few minutes, or on resume).
-- Example usage (uncomment to test):
-- runSuperStrongAntiCrackChecks()
if signatures and #signatures > 0 then
local signature = signatures[1] -- Assuming single signature
local certFactory = luajava.bindClass("java.security.cert.CertificateFactory"):getInstance("X.509")
local cert = certFactory:generateCertificate(luajava.bindClass("java.io.ByteArrayInputStream"):new(signature.toByteArray()))
local publicKey = cert.getPublicKey()
local messageDigest = luajava.bindClass("java.security.MessageDigest"):getInstance("SHA1")
local sha1HashBytes = messageDigest.digest(publicKey.getEncoded())
local currentSignatureHash = ""
for i=0, sha1HashBytes.length - 1 do
currentSignatureHash = currentSignatureHash .. string.format("%02X", sha1HashBytes[i] & 0xFF)
end
return currentSignatureHash:upper()
end
return nil
end
local currentSignatureHash = getAppSignatureSHA1()
if currentSignatureHash then
log("Current App Signature SHA1: " .. currentSignatureHash)
if currentSignatureHash ~= expectedSignatureHash:upper() then
log("CRITICAL WARNING: App signature mismatch! Tampering detected.")
detected = true
end
else
log("Error: Could not retrieve app signatures. Potential tampering or environment issue.")
detected = true
end
-- 2.2. Installer Package Name Check (Detects unofficial installations)
-- You might want to allow multiple official installers (e.g., Google Play, your own website).
local installerPackageName = packageManager.getInstallerPackageName(packageName)
log("Installer Package Name: " .. (installerPackageName or "N/A"))
local officialInstallers = {"com.android.vending", "com.google.android.packageinstaller"} -- Add your own if applicable
local isOfficialInstaller = false
for _, official in ipairs(officialInstallers) do
if installerPackageName == official then
isOfficialInstaller = true
break
end
end
if not isOfficialInstaller and installerPackageName ~= nil then -- nil means installed via adb or side-loaded
log("WARNING: App not installed from an official source. Installer: " .. installerPackageName)
-- detected = true -- Uncomment to enforce strict official installation
end
-- 2.3. Debugger Detection (Detects if a debugger is attached)
local applicationInfo = context.getApplicationInfo()
local DEBUGGABLE_MASK = luajava.bindClass("android.content.pm.ApplicationInfo").FLAG_DEBUGGABLE
if (applicationInfo.flags & DEBUGGABLE_MASK) ~= 0 then
log("WARNING: App is debuggable! This should not happen in release builds.")
-- detected = true -- Uncomment to treat debuggable as tampering in release
end
local debug = luajava.bindClass("android.os.Debug")
if debug.isDebuggerConnected() then
log("CRITICAL WARNING: Debugger detected!")
detected = true
end
-- 2.4. Check for known cracking/reverse engineering tools (via package names)
local suspiciousPackages = {
"com.android.vending.billing.InAppBillingService.LACK", -- Lucky Patcher
"com.chelpus.lackypatcher", -- Lucky Patcher
"com.dimonvideo.luckypatcher", -- Lucky Patcher
"com.forpda.lp", -- Lucky Patcher
"com.android.vending.billing.InAppBillingService.COIN", -- Another Lucky Patcher variant
"com.xmodgame", -- Xmodgames
"com.gameguardian", -- GameGuardian
"com.zune.gameguardian", -- GameGuardian
"org.sbtools.gamehack", -- Game Hacker
"com.cih.game_cih", -- Game CIH
"com.lbe.security.miui", -- Some MIUI security features can interfere
"com.saurik.substrate", -- Cydia Substrate
ANTI CRACK METHOD
--[[ AndLua Super Strong Anti-Crack Script ]]
-- This script aims to provide robust protection against tampering, unauthorized modification, and reverse engineering
-- for AndLua applications. It combines Lua-based integrity checks with powerful LuaJava-based Android API calls.
-- Function to log messages (can be replaced with AndLua's native logging if available)
local function log(message)
print("[Anti-Crack] " .. message)
end
-- 1. Lua-based Integrity Checks (Code Tampering Detection)
-- This function provides a basic example. For a truly strong anti-crack, you would:
-- a) Obfuscate your Lua code heavily.
-- b) Calculate SHA-256 hashes of critical Lua files (or bytecode) at build time.
-- c) Embed these hashes securely within your app (e.g., encrypted, split, or dynamically generated).
-- d) At runtime, recalculate the hashes of your Lua files and compare them to the embedded ones.
-- This requires a Lua SHA-256 library and access to your app's asset/file system via LuaJava.
local function checkLuaCodeIntegrity()
log("Performing Lua code integrity checks...")
local detected = false
-- Placeholder for advanced Lua file hashing and comparison
-- Example: If you have a 'sha256.lua' module and access to file I/O via LuaJava
-- local sha256 = require("sha256")
-- local criticalFileContent = luajava.callStaticMethod("com.androlua.LuaUtil", "readFile", "/data/data/your.package.name/files/your_critical_script.lua")
-- if criticalFileContent then
-- local currentHash = sha256.sum(criticalFileContent)
-- local expectedHash = "YOUR_CRITICAL_SCRIPT_SHA256_HASH_HERE"
-- if currentHash ~= expectedHash then
-- log("CRITICAL WARNING: Critical Lua script hash mismatch! Tampering detected.")
-- detected = true
-- end
-- end
-- Simple check for modification of this anti-crack script itself (very basic)
-- This would require storing a known good state or hash of this script externally.
-- For now, we'll rely more on Java-based checks for robustness.
return detected
end
-- 2. LuaJava-based Android App Integrity and Signature Verification
-- This is the most critical part for strong anti-crack, leveraging Android's native capabilities.
-- It checks if the app's signing certificate matches the expected one and if the app has been installed
-- from a trusted source, and attempts to detect debugging.
local function checkAndroidAppIntegrityAndDebugging()
log("Performing Android app integrity, signature, and debugging checks...")
local detected = false
-- Ensure 'activity' object is available from AndLua environment
if not activity then
log("Error: 'activity' object not found. Cannot perform Java-based checks.")
return true -- Treat as suspicious if core functionality is missing
end
local context = activity.getApplicationContext()
local packageName = context.getPackageName()
local packageManager = context.getPackageManager()
if not packageManager or not packageName then
log("Error: Could not get PackageManager or PackageName for integrity checks.")
return true -- Treat as suspicious
end
-- 2.1. Signature Verification (Crucial for detecting re-signing/tampering)
-- REPLACE 'YOUR_APP_RELEASE_SHA1_HASH_HERE' with the actual SHA-1 hash of your app's release signing certificate.
-- You can get this from your keystore or Google Play Console.
local expectedSignatureHash = "YOUR_APP_RELEASE_SHA1_HASH_HERE"
local function getAppSignatureSHA1()
local packageInfo = packageManager.getPackageInfo(packageName, luajava.bindClass("android.content.pm.PackageManager").GET_SIGNATURES)
local signatures = packageInfo.signatures
✅ KEY GENERATED!
━━━━━━━━━━━━━━━━━━━━
🔑 Key:
TOSHI-G5KN-FUQV-ENGP
⏳ Duration: 2 Hour(s)
👥 Max Users: 10
📊 Max Lines: 1000
━━━━━━━━━━━━━━━━━━━━
Share this key with the user!
