yashsingh1/xdaforums huggingface dataset:
[Xposed Framework Modules] cmuc05:
I had already installed the SBXposed 1.1. This is not the problem.

Installed, activatet and rebooted. But Sparkasse still detects Xposed
[Xposed Framework Modules] tmh_:
Please try again with the more logging version of the module I posted here: http://xdaforums.com/showpost.php?p=69870215&postcount=13

I would need the Sparkasse APK and the complete Xposed Log. You could try to get the logfile directly in /data/data/de.robv.android.xposed.installer/log/ via adb for example.
[Xposed Framework Modules] K3V1991:
New update is out..

Sparkasse+ FC on start :'(
[Xposed Framework Modules] MarkusOSx:
+1 crashs for me too
[Xposed Framework Modules] MonomatiX:
ME too
[Xposed Framework Modules] mewn1:
Thanks for the info. I just deactivated the automatic update function. I think it is wrong to exclude the expose people as they always will find a way to bypass these restrictions at the cost of security. Imagine somebody is logging in to their bank account with an infected pc. No chance to prevent this.

Meanwhile I decompiled the apk. Seems legit. I didn't find anything which could steal your data. But there is something else...

First I have to say I'm not an expert in Android-Developement and I have never seen an app which was written for xposed. So I have no idea if this is true, but in my eyes the app does the following:

it looks for methods in the Sparkasse app which take no parameters and retrurn booleans. Then it sets those return values to true.

This is working as you can see, but there could be other methods of this type:

boolean method()

So this is very dangerous as you cant be sure that this app behaves like it should behave!
[Xposed Framework Modules] tmh_:
I'm working on it. You only need patience ;)

Other things are not changed in app, so could rollback the update until module is fixed.

This method is only used for the protection. I only search the methods generic for being compatible for the different app types. With the new update it makes another check additionally.
[Xposed Framework Modules] cmuc05:
[MENTION=5766709]tmh_[/MENTION]: I have sent you an error.log in as a private message.

Here again for all:

...
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:652)
at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:132)
at dalvik.system.NativeStart.main(Native Method)
SBXposed: Hook com.starfinanz.mobile.android.protect.Ijljjilj->ijjijilj
SBXposed: Hook com.starfinanz.mobile.android.protect.Ijljjilj->ijjljilj
java.lang.IllegalArgumentException: Cannot transfer object from class android.content.res.MiuiTypedArray to class android.content.res.XResources$XTypedArray
at de.robv.android.xposed.XposedBridge.setObjectClass(XposedBridge.java:773)
at de.robv.android.xposed.XposedBridge.access$6(XposedBridge.java:759)
...

if I start version 3.0.1, no entry for SBXposed appeared in the log.
[Xposed Framework Modules] Benny100:
Version 1.1 is not working of Sparkasse 3.0.1
[Xposed Framework Modules] playboy0187:
Yes not working of 3.0.1

Gesendet von meinem SM-G935F mit Tapatalk
[Xposed Framework Modules] Bushido1992:
Wait for Update...
[Xposed Framework Modules] mdxdave:
Anyone has 3.0.0 apk?
[Xposed Framework Modules] alienyd:
I appreciate the work of our dev, but I'd also support the idea of open sourcing the app though

weird,I have it here but I can't seem to be able to send....:confused:
[Xposed Framework Modules] MarkusOSx:
Yes, here http://www55.zippyshare.com/v/bDjqMPtM/file.html
[Xposed Framework Modules] mdxdave:
Thanks but I meant the Plus Version ?
[Xposed Framework Modules] tmh_:
Update progress

Hello all,

Actually, I'm making good progress, but it's not completely finished yet. Some detail parts currently displaying nothing, because calling the detection in other way.

Current Status: 65%

Some screenshots:

With the next update:

No root detection

Remove automatic crashlog. (It does not depend on analytics/privacy setting, so it ignores all and helps the developers patch the app again :( I decided to hook it.)

Hide Kwitt functions, because it's not legal with Xposed.

Since I have to do much more than before, and many features are patched into the app, I'll put the source on Github.

Also, this means that the app also gets an update faster and SBXposed no longer works. Therefore, before any update: make backup!

Sorry that I have to disappoint you, but if you have an app version not installed over the Playstore, the app breaks again.
[Xposed Framework Modules] Tanis64:
The reason the app doesn't work with Xposed is the Kwitt function, the BaFin did not allow the possibility of a manipulated app for Kwitt. Why they don't swap out Kwitt to an separatew app is the question. Hacking this app with Xposed may work, but I think it's not legal as long Kwitt works with the changed app.
[Xposed Framework Modules] Scrubsss:
On mine it works with normal Sparkasse app.

I downgraded from 3.0.1 to 3.0.0

You just have to unistall it completly and delete your database.
[Xposed Framework Modules] tmh_:
I do not support Kwitt or any other function for transactions. Maybe I could hide the menu item and activity for that.
[Xposed Framework Modules] hurray:
This would be awesome. "Kwik" is nothing I ever use.
[Xposed Framework Modules] sevenshorseman:
Sparkasse app is not starting for me.

Installed Version SbXposed 1.1.

It pops up with app is stopped.
[Xposed Framework Modules] sile87:
Yes, same Problem. And no Backup from older App...
[Xposed Framework Modules] defim:
Devs of this app are very insane...

They encrypted all internal used strings. This could be simply reverted if you watch the decoder.

But sometimes a same string is about 30 times decoded until the app crashes and throws "Error_X000001" (X is variable)

I'm not sure if it is a bug or feature. This crash is only at 1 device, my other works ^^

Btw, this app (not module..) phones home to https:\\services.starfinanz.de . I*m not sure what it transmits, i hope not my bank details. (I have no reasons to trust this deveoper)

The root detection is like with version below 3, but strings like "superuser.apk" are also "encrypted"
[Xposed Framework Modules] GreyFox777:
They are really crazy... i want to switch my bank account now... kaka sparkasse pfui:silly:
[Xposed Framework Modules] tmh_:
Yes, it's really bad.

The crashes are unfortunately not due to decrypt. Some times it looks like as if a check is hidden in the decrypt method.

They are calling home on every uncaught exception thrown. Uncatched exceptions are due to xposed, root, etc. In the report is much data, but nothing related to your bank-accounts (I think so, nothing found yet, except the requests for fetch transaction informations).
[Xposed Framework Modules] defim:
I'm nott using the app for Sparkasse but "Sparda".

Btw, "StarMoney" on Play Store is most the same but in blue, not red. Until now not yet Xposed check

And the PC version of StarMoney it is also a little bad, i had to buy every year a new version until i switched to "ALF-BanCo"

:eek:
[Xposed Framework Modules] astrit1:
Thanks working fine for me on Sparkasse+ version 3.0.0
[Xposed Framework Modules] Megolk:
Can you please upload the apk 3.0.0 +

Gesendet von meinem SM-G935F mit Tapatalk
[Xposed Framework Modules] astrit1:
Here you go , i didnt Upload it someone from boerse did

http://www.uploaded.net/file/maf8fdm6
[Xposed Framework Modules] mdxdave:
Google Drive Mirror:

https://drive.google.com/file/d/0B_flwqSox3t1bDkxeHozX29TT0k/view?usp=drivesdk

Thanks for your module [emoji16]
[Xposed Framework Modules] playboy0187:
Working of 3.0.1????

Gesendet von meinem SM-G935F mit Tapatalk
[Xposed Framework Modules] j1gga84:
The answer is no!

Currently it is not working with versions above 3.0.0 as you can read in the previous posts.

regards
[Xposed Framework Modules] SturmGhost:
For me 3.0.0 isn't working too. I can't add a new bank account - finance state is empty (no add button - nothing). Does someone know a fix? :confused:
[Xposed Framework Modules] MarkMR73:
For me, it does not work too. I already have the Sparkassen(+) app 3.0.1 and this runs on a Galaxy S5 with G900FXXU1CPK3 by Alexndr.

The app to start, but will be stopped shortly thereafter.
[Xposed Framework Modules] mdxdave:
He already mentioned that version 3.0.1 does not work...
[Xposed Framework Modules] MarkMR73:
Sorry, I had probably overlooked.
[Xposed Framework Modules] 4r44444:
Yeah with new Version the Sparkasse App is Forceclosing :/
[Xposed Framework Modules] K3V1991:
Wait for update..

Read the posts above you
[Xposed Framework Modules] jhnn.br:
Is this on Github yet? I would like to help you if you need any help updating to the newest version.
[Xposed Framework Modules] tmh_:
Source is now on Github... Help and PRs are always welcome...

There are so many different ways as the checks are called, so I'll need some more time.
[Xposed Framework Modules] highKo:
btw. there are different levels to check. i.e. I can start the app using systemless root und using suhide so that the app won't detect the xposed framework. but in the app I can't use the kwitt function. in this state you get a 6 digit code in the impressum unter the version number. if the app thanks all is fine you won't have this number in the impressum.
[Xposed Framework Modules] Tanis64:
Is there a possibility to add an export function so that you can export each Konto to an csv File? I think one reason people are hanging on this App is that they won't loose the Konto history when they change to an other app like Banking 4 all.
[Xposed Framework Modules] jhnn.br:
So I looked a bit at the source code and they indeed did some crazy stuff to obfuscate what they are doing.

They encrypted almost all of the strings in the app and are using a native library ("libapt.so", very unobtrusive ;) ) to decrypt them at run-time. Here is a mapping of encrypted to decrypted strings: //hastebin.com/limocobiva.json

The code is a lot easier to read after replacing the calls to Ijljjilj.ijljlilj with the decrypted strings.

Renaming all methods and classes to combinations of I, l and j seem to be even sillier, I sure hope they are able to map the obfuscated method names to the real ones, otherwise debugging would be very hard for them with traces that only contain calls to inexpressive method names.
[Xposed Framework Modules] breitseite:
Nice app, thanks for the work. Next time i dont update the sparkassen app before the xposed update is available

Gesendet von meinem ONEPLUS A3003 mit Tapatalk
[Xposed Framework Modules] playboy0187:
Gibt es denn ein update für die 3.0.1?

Gesendet von meinem SM-G935F mit Tapatalk
[Xposed Framework Modules] j1gga84:
English only please ;)

No there is no update until now..

Regards

Gesendet von meinem SM-G900F mit Tapatalk
[Xposed Framework Modules] playboy0187:
Oh sorry my mistake[emoji16]

Gesendet von meinem SM-G935F mit Tapatalk
[Xposed Framework Modules] Rzb88:
thanks but it Doesnt work

Hey, every Time i open the Sparkasse+ App it force closes :(

12-20 23:40:56.829 I/Xposed ( 6710): SBXposed: Try to find protect classes...
12-20 23:40:56.895 I/Xposed ( 6710): SBXposed: 1 classes found.
12-20 23:40:57.239 I/Xposed ( 6800): SBXposed: Try to find protect classes...
12-20 23:40:57.279 I/Xposed ( 6800): SBXposed: 1 classes found.
12-20 23:41:00.790 I/Xposed ( 7317): SBXposed: Try to find protect classes...
12-20 23:41:00.854 I/Xposed ( 7317): SBXposed: 1 classes found.
12-20 23:41:01.019 I/Xposed ( 7341): SBXposed: Try to find protect classes...
12-20 23:41:01.062 I/Xposed ( 7341): SBXposed: 1 classes found.
12-20 23:41:09.014 I/Xposed ( 8200): SBXposed: Try to find protect classes...
12-20 23:41:09.093 I/Xposed ( 8200): SBXposed: 1 classes found.
12-20 23:41:22.607 I/Xposed (10062): SBXposed: Try to find protect classes...
12-20 23:41:22.676 I/Xposed (10062): SBXposed: 1 classes found.
12-20 23:41:26.252 I/Xposed (10500): SBXposed: Try to find protect classes...
12-20 23:41:26.292 I/Xposed (10500): SBXposed: 1 classes

it would be very nice if i can use The SP+ App again soon :good:
[Xposed Framework Modules] Danmann:
Use version 3.0.0. That's still working.
[Xposed Framework Modules] breitseite:
How can i downgrade?

Gesendet von meinem Oneplus 3t via Tapatalk
[Xposed Framework Modules] Seosam:
Just uninstall 3.0.1 and install 3.0.0
[Xposed Framework Modules] breitseite:
But from who? In the playstore i get only 3.0.1

Gesendet von meinem Oneplus 3t via Tapatalk
[Xposed Framework Modules] mdxdave:
http://xdaforums.com/showthread.php?p=69966730
[Xposed Framework Modules] breitseite:
Thanks

Gesendet von meinem ONEPLUS A3003 mit Tapatalk
[Xposed Framework Modules] shomu:
Will there be a update for 3.01?

SBXposed 1.1 doesn't work with 3.01 on my Android 4.4.2
[Xposed Framework Modules] dferferfer:
yes on 5.1.1 sbxposed dosent work.

Thx for 3.0.0 apk
[Xposed Framework Modules] -leo-:
will it hide for other apps? thanks
[Xposed Framework Modules] mdxdave:
No.

BTW, this module does not really hide Xposed, instead it hooks into methods that checks for Xposed and returns false for this methods. [emoji6]
[Xposed Framework Modules] shomu:
Okay since there is no answer to my question if there will be a SBXposed Version for V 3.0.1 I Rollback to 3.0

Hope the APK from this Link is clean...
[Xposed Framework Modules] defim:
imho latest v2 version is much better, should be 2.11.2 #31202
[Xposed Framework Modules] Tanis64:
https://www.dropbox.com/s/rb2zr35o437cd1v/sparkasse_2.11.2_31202.apk?dl=0
[Xposed Framework Modules] distante:
I really do not want to take the risk, for now I will use the ugly web version. :rolleyes:
[Xposed Framework Modules] astrit1:
[MENTION=5766709]tmh_[/MENTION] S 'Push Tan is checking if xposed ist installed too, could you have a look at it ?

Thanx for you work
[Xposed Framework Modules] playboy0187:
When is there actually an update ????

Gesendet von meinem SM-G935F mit Tapatalk
[Xposed Framework Modules] DirkStorck:
First no question about ETA second I think when the dev has got it ready. [emoji6]
[Xposed Framework Modules] sir-harlekin:
+1
[Xposed Framework Modules] dima-82:
Hey guys, I just want to give you my comment ;)

I root my phone for years now and I use XPosed on every rooted phone. The capabilities are amazing. But with great power comes great responsibility.

So every one, who has no cl

A couple of months ago I had as well the problem that the Sparkasse app kicked me out, because I have XPosed installed. And I couldn’t find a way to trick it. On the other site I find it a bit dangerous to trick finance apps. So tmh_ thank you for your great module, but in my opinion it is too risky to use it. Even if I am a java SW developer and the source code is on GitHub, it is hard for me to find out, that there are no fishy thinks hidden in the code.

I wanted to downgrade the Sparkasse app, but here comes again the same problem, where to get a version from a thrusted source. And then you are all the time unpatched….

So I decided to find an alternative. There are not that many apps on the market for banking. And I wouldn’t use a Chinese or US app for my finances.

There I found Banking4A. First I lingered to pay almost 5 Euros for an app. But now I think it is worth it. The App is developed by a German company from Munich. I trust more Bavarians than others ;)

This is not advertisement. I just want to share my experience. And I hope this guys will never have the idea to check for Xposed or use the SafetyNet API.
[Xposed Framework Modules] Schattenspieler:
Well, it could be easier: If the devs of the Sparkasse app just displayed a warning and let the user decide, if it's worth to continue or not. But they decided to make the app stop working, if xposed was installed. That's not acceptable in my opinion and so here is a workaround of sorts. Most users of xposed will find this fix and so in terms of security the devs of SB-app just made the situation worse instead of better, because now it's not only xposed itself to worry about, but a potential "fix"-risk as well. Awesome backfire fail! just my 2 cents ...
[Xposed Framework Modules] defim:
[MENTION=7507600]dima-82[/MENTION]: As you are a java SW developer as you wrote, take the source and compile it by yourself.

To verify a apk downloaded somewhere, compare the signature of it with the one downloaded by Play Store :)
[Xposed Framework Modules] dima-82:
Yes I could make this effort. But it is not worth it.

There are better alternatives. If sparkasse will stay like it it now, the rating will be bad soon for their app on google play.

Already now a lot of xposed user are complaining.

Sparkasse decided to go this way and I decided not to use the app anymore.

Maybe, if there were no adequate alternatives on the marked, I would do the effort: checking the code, compile, test, etc.

But with alternatives like Banking4A I dont wont to waste my time.

It is a pitty that app developers go this way.

I my oponion the weakest point is still the user and people who know what xposed is and how to use it are not the users who should be protected by measurements like Sparkasse app introducec.
[Xposed Framework Modules] j1gga84:
[MENTION=7507600]dima-82[/MENTION]

Is 4.99 Euros for banking 4a worth it?

And is the functionality more than you have with the Sparkassen app?

Regards

Gesendet von meinem SM-G900F mit Tapatalk
[Xposed Framework Modules] dima-82:
I would never pay 5 Euro for a game app. But this is a banking app.

For a banking app I pay rather a couple of euros more than having ads on it, or try to find a modification or even a crack to trick it.

After the sparkasse app blocked me I searched a long time for an alternative.

There are many test on the internet like:

https://www.welt.de/wirtschaft/webwelt/gallery151654552/Die-beliebtesten-Banking-Apps-im-Test.html

(sorry, its in german ;) )

But the only reliable think you can do is to read the test AND test it.

OutBank was always one of the best, but it is not available for android.

According to test Centralway Numbers transfers your TANs to their servers. This is a nogo for me.

And the country of the programmer was an argument for me as wll.

There are a couple of other alternatives like: finanblick or 123banking

So I decided to try Banking4A. I think the reason was the google play rating...

About the funktionality:

I have three bank accounts. The Banking4A I replaced two native banking apps by it.

It has a lot of funktionalities and it takes time to get an overview.

In the end I can say that I do not miss anythink. I am happy with it.

By by sparkassen app :)
[Xposed Framework Modules] mdxdave:
Just compare the certificate of the apk you downloaded to the apk from Google play. It should be the same.

The devs explained that they blocked devices using Xposed because of the new (IMHO unnecessary) "Kwitt" feature. I already written them the should disable this feature for devices running Xposed, but the devs did not reply anymore. Most of the german businesses does not interest on their customers, they just want to make money ?
[Xposed Framework Modules] Schattenspieler:
I used the app, because it allows me to check multiple accounts at once (DeutscheBank and Postbank). And it was better then Finanzblick, as they want the PIN/login-info for the accounts to be saved on their servers (not just within the app).

Now they included "Kwitt", which I wont use, because I not a customer of Sparkasse (as a bank) and so the P2P-money transfer would take some time (like in days!). In that time I would have found an ATM and did the transfer "manually". That's no feature, it's a stub at best, especially considering that just because of that the app now refuses to run at all (with xposed installed). Certainly that's not gonna turn me into a Sparkasse customer anytime soon. And I shure as hell won't sacrifice xposed over some banking app. This was not thought through well in many ways …

Ok, nuff of the ot I guess, sry.
[Xposed Framework Modules] Tanis64:
I Think its worth it.

By the way it was free on Amazon last Month, maybe it's still free there.

For me one of the most feature plus against Sparkasse App is the ability to export / import the data.

I use the Sparkasse App since 2010 and all my data is now locked in the database of the app since there is (still) no export / import option.

So when I was now forced to use an other app then I will only use one with an h export / import function in case...

Regards
[Xposed Framework Modules] dima-82:
Well, now that you mention it. It was free on amazon. I can remember I used a couple of days for free. But today in the morning I couldnt find a demo version on google play.

After the app convinced me I bought it from google play and removed the amazon app store again ;)

Banking4A can sync the encrypted banking tresor with your dropbox cloud or WebDAV.

By the way, I saw that the Sparkasse App makes backups, but it was not clear for me why.

Actually its still not clear :)

You can view your sparkasse history in the online-banking web interface for about one or two past years.

So why having import / export functionality on the smartphone?
[Xposed Framework Modules] mdxdave:
To export and import your different accounts with credentials without enter them again ?
[Xposed Framework Modules] dima-82:
How does actually the Sparkasse app check for XPosed?

I think it does not use Google's SafetyNet API.

I have XPrivacy installed. There is an "apt" command called by the app. If I allow it, it says immediately that Xposed is installed, if I block it, it crashes.

Is is maybe possible to manipulate this execution instead of hooking into methods of the app?
[Xposed Framework Modules] defim:
[MENTION=7507600]dima-82[/MENTION]: I inspected the check a little, and it seems the Java part calls something in a native library to check. If Xposed is found, the Execpetion occurs in the native part.

From non-Android devices i know "LD_PRELOAD" to inject libs to en executable file.

Other idea: If you extend (before the 1st entry) the PATH variable of the native lib which calls apt by a custom dir which has a "apt" exeutable script you could return what you like
[Xposed Framework Modules] Django.de:
Will there come any update for SBXposed or should I look out from an alternative to the Sparkasse App?
[Xposed Framework Modules] mdxdave:
Banking 4A from Amazon Underground ?
[Xposed Framework Modules] playboy0187:
Super app[emoji106]

Gesendet von meinem SM-T555 mit Tapatalk
[Xposed Framework Modules] MiXT4PE:
If I install your Module on my OnePlus 3 with Xposed 3.1.1, the Sparkasse+ App crashes instantly after clicking on it. If I uninstall your Module it opens up again but gives me the Xposed-Error.
[Xposed Framework Modules] dima-82:
I didnt test the module, but as far as I know the last version it worked was 3.0.0. Correct me if I am wrong....
[Xposed Framework Modules] highKo:
3.0.0 works , even the kwitt function
[Xposed Framework Modules] dima-82:
You don't find that a bit fishy? :)

- A Xposed module for a banking app.

- The developer never posted something else. He (or she) released only this module.

- When the discussion started about the details how it works, he disappeared.

- No replies since then....

I know the code is on GitHub, but did anyone of you check it? I mean completely checked and understood?

The only certain process would be: Get the code, check and understand. Build the module yourself.

Or just trust the developer :)
[Xposed Framework Modules] defim:
[MENTION=7507600]dima-82[/MENTION]: It does not make sense to write the same answer multiple times. And if there is nothing to add to last answer, no reason to post again
[Xposed Framework Modules] Doc Sniper:
Is the DKB Push TAN App supported or is support planned ?
[Xposed Framework Modules] meiser:
It has its own module: http://repo.xposed.info/module/de.finnsta.pushtanenabler
[Xposed Framework Modules] chucky8:
Does this still work? App crashes v3.0.3

Gesendet von meinem Redmi 3S mit Tapatalk
[Xposed Framework Modules] Danmann:
No. It doesn't. Only in version 3.0.0.

Gruß,

Dan
[Xposed Framework Modules] chucky8:
Thank you, and what about pushtan?

Gesendet von meinem Redmi 3S mit Tapatalk
[Xposed Framework Modules] Danmann:
I don't know. Try it and let us know.