<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Detecting Rooted/Jailbroken Devices

## Objection Bypass Commands
```bash
# Android
android root disable                     # Bypass root detection
android root simulate                    # Simulate non-rooted env

# iOS
ios jailbreak disable                    # Bypass jailbreak detection
ios jailbreak simulate                   # Simulate non-jailbroken env
```

## Magisk
```bash
magisk --hide enable                     # Enable MagiskHide (legacy)
magisk --hide add PACKAGE                # Add app to hide list
magisk --hide rm PACKAGE                 # Remove from hide list
magisk --hide ls                         # List hidden apps
# Zygisk: Settings > Configure DenyList
```

## Frida Root/Jailbreak Bypass
```bash
frida -U -f com.target.app -l root_bypass.js --no-pause
frida -U -f com.target.app -l jb_bypass.js --no-pause
```

## SafetyNet / Play Integrity
```bash
# Check from app
# SafetyNetClient.attest() — returns JWS response
# Fields: ctsProfileMatch, basicIntegrity, evaluationType

# Play Integrity API (replacement)
# IntegrityTokenRequest → IntegrityTokenResponse
# Verdict: MEETS_DEVICE_INTEGRITY, MEETS_BASIC_INTEGRITY
```

## iOS Detection Bypass Tools
| Tool | Method |
|------|--------|
| Liberty Lite | Cydia tweak, hooks file checks |
| Shadow | Comprehensive jailbreak hiding |
| A-Bypass | Alternative hiding tweak |
| FlyJB X | Advanced JB detection bypass |
| Choicy | Disable tweak injection per-app |

## Android Detection Libraries
| Library | Method |
|---------|--------|
| RootBeer | Multi-check root detection |
| SafetyNet | Google attestation (deprecated) |
| Play Integrity | Google device integrity API |
| ProGuard/R8 | Code obfuscation |
