# uncrackable1.js

setImmediate(function() { //prevent timeout
    console.log("[*] Starting script");

    Java.perform(function() {

      bClass = Java.use("sg.vantagepoint.uncrackable1.b");
      bClass.onClick.implementation = function(v) {
         console.log("[*] onClick called");
      }
      console.log("[*] onClick handler modified")

    })
})

Run this command to bypass Root Detection function.

frida -U -l uncrackable1.js sg.vantagepoint.uncrackable1

TRY

frida-ps -U | grep -i easy
frida -U -f easySoft.co.id.tel

# unify1-list.js

setImmediate(function() { //prevent timeout
    console.log("[*] Starting script");
    Java.perform(function() {
        Java.enumerateLoadedClasses({
            "onMatch": function(className) {
                console.log(className)
            },
            "onComplete": function() {}
        })
    })
})

frida -U -l unify1-list.js easySoft.co.id.tel

PHASE 1

# unify1-onresume.js

Java.perform(function () {
    var Activity = Java.use("android.app.Activity");
    Activity.onResume.implementation = function () {
        console.log("[*] onResume() got called!");
        this.onResume();
    };
});

frida -U -l unify1-onresume.js easySoft.co.id.tel

Output: Worked

PHASE 2

# unify1-onresume-listing-functions.js

Java.perform(function() {
    var Activity = Java.use("android.app.Activity");
    Activity.onResume.implementation = function() {
        console.log("[*] onResume() got called!");
        this.onResume();
    };
});

setImmediate(function() { //prevent timeout
    console.log("[*] Starting script");
    Java.perform(function() {
        Java.enumerateLoadedClasses({
            "onMatch": function(className) {
                console.log(className)
            },
            "onComplete": function() {}
        })
    })
})

frida -U -l unify1-onresume-listing-functions.js easySoft.co.id.tel

Output: Worked

PHASE 3

# unify1-onresume-listing-functions-startswith.js

Java.perform(function () {
var Activity = Java.use("android.app.Activity");
Activity.onResume.implementation = function () {
console.log("[*] onResume() got called!");
this.onResume();
};
});

setImmediate(function() { //prevent timeout
    console.log("[*] Starting script");
    Java.perform(function() {
        Java.enumerateLoadedClasses({
            "onMatch": function(className) {
                // console.log(className)
                // console.log(typeof(className))
                // break; // Err
                // if (className.startsWith("CLMService")){ // None
                // if (className.startsWith("easySoft.co.id")){ // Worked
                // if (className.startsWith("easySoft.co.id.CLM")){ // Worked
                if (className.startsWith("easySoft.co.id.CLM.UCX.CLMService")){
                    console.log(className)
                }
            },
            "onComplete": function() {}
        })
    })
})

frida -U -l unify1-onresume-listing-functions-startswith.js easySoft.co.id.tel

Output: Worked

Reference

• https://www.codemetrix.net/hacking-android-apps-with-frida-2/