Bypassing Jailbreak Detection for iOS using Shadow Package on Sileo and SSL Pinning using Frida

Jailbreak detection is a security feature that many iOS apps employ to prevent their operation on jailbroken devices. However, with the right tools and techniques, you can bypass this detection. In this tutorial, we will show you how to do it using the Shadow package on Sileo. On this case i use IOS 15.7.9

Step 1: Install Shadow Package

Open Sileo on your jailbroken iOS device and add the Shadow repository by navigating to the "Sources" tab and selecting "Add Source." Enter the following repository URL:

You may need additional repositories for dependencies - these are the current dependencies:

• libSandy from opa334's Repo (preferences - sandboxed loading)
• AltList from opa334's Repo (preferences - application listing)
• HookKit Framework (hooking + change hooking library feature)
• RootBridge Framework (rootless compatibility/universal binary building)

After adding the repository, search for "Shadow Package" and install it on your device. This package allows you to hide the jailbreak status from apps that use jailbreak detection.

Step 2: Enable Shadow Package

Once Shadow Package is installed, go to your device's settings and scroll down to find the "Shadow" section. Inside, you can enable or disable Shadow for specific apps. Toggle it on for the app you want to bypass jailbreak detection on.

Now, when you open the app, it won't detect the jailbreak and should run without any issues.

SSL pinning is another security measure used by apps to ensure secure communication. However, sometimes you may need to analyze the traffic between an app and its server, and SSL pinning can make this challenging. Frida can help bypass SSL pinning, allowing you to inspect network traffic more easily.

Step 1: Install Frida

You can follow the step install frida on IOS here Click Here.

Step 2: Bypass SSL Pinning

Start by running the target app on your device. Then, use Frida to attach to the app's process using its name or identifier. For example:

In this command, replace "com.example.app" with the target app's package name.

With Frida attached, you can now intercept and analyze network traffic, even when SSL pinning is active.