1

I am working on security testing of an android application. There is a root detection in the Android application. objection, frida etc. It is possible to bypass this with ways.

My main question is: Can this qualify as a vulnerability and is it okay to present it as a vulnerability?

Improve this question
4
  • I don't think it would. If you find a way to use root and bypass some control allowing you to do something unintended, that bypass could be a vulnerability.
    – ThoriumBR
    Commented Aug 2, 2023 at 23:25
  • I'm not entirely sure either, I know there is no definitive solution for root detection. am i right?
    – Exnovan
    Commented Aug 2, 2023 at 23:30
  • Sometimes root detection is just to raise the bar, not a definitive protection. Try to find what you could explore using root and see if you find anything interesting.
    – ThoriumBR
    Commented Aug 2, 2023 at 23:31
  • I will see, thank you for your answer.
    – Exnovan
    Commented Aug 2, 2023 at 23:33

1 Answer 1

Reset to default
0

No, that's not a vulnerability. If you own a device, you should be able to make it lie to people who don't own it. In fact, it'd be possible to make a case for the exact opposite: that if a root detection method can't be bypassed, it'd constitute a vulnerability in the OS or device.

Improve this answer
1
  • (First I apologize for the late reply), So what kind of vulnerability does it register if it is not bypassed?
    – Exnovan
    Commented Aug 15, 2023 at 1:26

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .