freeRASP 3.0.0

We are constantly working on improving your freeRASP experience, and today we're happy to announce a major update packed with new features and improvements! Here's the list of all the new things we included in the latest release.

What's new in 3.0.0?

Among the first changes, you will notice our prettier and easy-to-navigate README. We also created a much-desired tool for a hash conversion (including a guide on how to use it) and added a check, so you know you've done it right.

• 👀 Updated README.md
• 🛠️ Added tool for converting sha-256 hash to base64 form
• 🛠️ Added checks for hash correctness in the AndroidConfig constructor

And as usual, the new release also contains some bug squashing.

• ✔️ Fixed issue with profile mode on Android
• ✔️ Fixed onCancel nullable issue

Android additions

For Android builds, we focused on extending the critical tampering detection and improving the informational value provided by logs. You may also notice improved performance and API changes for device binding checks.

• 🔎 Added native checks in C
• 📄 Added information about security patches to logs
• 📄 Added information about Google Play Services, Huawei Mobile Services, SafetyNet Verify Apps
• ⚡ Improved performance
• ❗ BREAKING API CHANGE: Renamed onDeviceBinding callback to onDeviceBindingDetected

iOS improvements

For iOS devices, we prepared upgraded and polished incident detections and even added some new ones. Other changes include several API modifications, based on discussion with the community.

• 🔎 Improved detection of jailbreak hiders (Shadow)
• ⚡ Improved jailbreak detection
• ⚡ Improved hook detection
• ❗ BREAKING API CHANGE: Added unofficialStoreDetected callback
• ❗ BREAKING API CHANGE: Removed onPasscodeChangeDetected
• ❗ BREAKING API CHANGE: Renamed IOScallback to IOSCallback
• ❗ BREAKING API CHANGE: Renamed parameter IOSCallback to iosCallback

freeRASP 2.0.0

Whats new in freeRASP

Breaking changes

• ❗IOSCallback parameter in TalsecCallback was renamed to iosCallback
• ❗IOSConfig parameter in TalsecConfig was renamed to iosConfig

Added

• ✔️ added configuration tests
• 🔼 updated jailbreak checks to detect jailbreak hiders
• 🔼 updated hook checks

Changed

• ⚡ improved performance during library initialization
• 🔼 better debugger handling
• 🔼 better incident handling
• ❌ sensitive content logging modification, package names of well-known dangerous applications (rooting apps, hooking frameworks, etc...) are no longer sent to Elastic, only a flag that device contains one of those applications is sent

Fixed

• 🆒 usage of deprecated API calls (DexFile) for Android 8.0 and above
• 🆒 issue with root prompt ("app asking for root permission") on rooted devices
• 🆒 fixed issue with false positive during device binding check