• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!
  • Fill out your device list and let everyone know which phones you have!    Edit Your Device Inventory

Adhell 3 - KNOX

Search This thread

Hansoliv

Senior Member
Jul 12, 2007
347
71
Good news Everyone!
I am not a developer or coder but as i am the type of person that likes to "make his own sandwich", so i decompiled 'Ashell' with a tool called 'APK Easy Tool' and recompiled it again.
And there's no more malware! :D
Is there another way or anyone that could double check that?
Thank you.
 

Attachments

  • Screenshot_20210311-122055_Samsung Internet Beta.jpg
    Screenshot_20210311-122055_Samsung Internet Beta.jpg
    388.9 KB · Views: 135
  • Screenshot_20210311-122220_Malwarebytes.jpg
    Screenshot_20210311-122220_Malwarebytes.jpg
    289.8 KB · Views: 136
  • Adhell3 2.3.5 Mod.apk
    2.8 MB · Views: 74
  • Screenshot_20210311-140334_Adhell3 235.jpg
    Screenshot_20210311-140334_Adhell3 235.jpg
    368.8 KB · Views: 127
Last edited:

arf8

Senior Member
Mar 30, 2014
632
72
Still getting flagged by malwarebytes RTP when downloading. Maybe it is a false positive on malwarebytes part.

One hit is too many. The open source code compiles fine without being flagged by MB.

Good news Everyone!
I am not a developer or coder but as i am the type of person that likes to "make his own sandwich", so i decompiled 'Ashell' with a tool called 'APK Easy Tool' and recompiled it again.
And there's no more malware! :D
Is there another way or anyone that could double check that?
Thank you.

APK easy tool only marginally works, if progaurd was used there is likely code obfuscation, you will not be able to rid the virus just be decompiling and recompiling the apk.
If it is being flagged it is being flagged for a reason. If you have access to the source than you are better off but you don't.
As I said above the original source is never flagged, what does that tell you.
 

Hansoliv

Senior Member
Jul 12, 2007
347
71
Thank you anyway
As i said i'm not a developer.
In my ignorance i made myself an idiot sandwich 😅 .
It was worth the shot 🤷‍♂️
 
Last edited:

Hansoliv

Senior Member
Jul 12, 2007
347
71
Good day.
Could someone please share with me the files 'knoxsdk.jar' and 'supportlib.jar'? As i am not an KPP partner, i cannot download them from Samsung.
I think i found a way to make adhell work without the license, but all the compiled versions that i downloaded seem to have some kind of malware, and to be sure, i would like to compile it myself, but without those files, it's not possible.
 
Last edited:

Web_E

Senior Member
Sep 8, 2012
355
150
Bangalore / Kolkata
Good day.
Could someone please share with me the files 'knoxsdk.jar' and 'supportlib.jar'? As i am not an KPP partner, i cannot download them from Samsung.
I think i found a way to make adhell work without the license, but all the compiled versions that i downloaded seem to have some kind of malware, and to be sure, i would like to compile it myself, but without those files, it's not possible.
I have an old apk of adhell installed ( which I believe is virus free). It was downloaded six month before samsung shutdown dev key generation. will that work for your purpose?
 

Hansoliv

Senior Member
Jul 12, 2007
347
71
Good day.
Could anyone here with experience in android development give me his opinion?

Why does that ALL 'CitizenV' built files and even the first file in this thread ADHell v3.1.1 (https://forum.xda-developers.com/attachment.php?attachmentid=4719055&stc=1&d=1552045494), and even other user's built files throughout the internet, is flagged with malware 'bankbot' after i decompile and rebuild, either in my pc or in my phone with 'Apktool' or 'apk editor'?
I have acomplished adhell working without a license but i am out of options for making sure that is safe.
 
Last edited:

dia_naji

Senior Member
Aug 29, 2011
478
107
Buffalo, NY
The only real way to get Adhell working is getting a KPE license. Unfortunately those aren't available unless you submit a form that you will be using keys for business purposes. I myself own a IT business and have been using adhell for years
 

Hansoliv

Senior Member
Jul 12, 2007
347
71
The only real way to get Adhell working is getting a KPE license. Unfortunately those aren't available unless you submit a form that you will be using keys for business purposes. I myself own a IT business and have been using adhell for years
Hi.
Do you have the files 'knoxsdk.jar' and 'supportlib.jar'? If yes, could you share them with me?

It is possible to make Adhell work even without KPE license, i had it working in my phone working version 3.2.366 compiled by the user 'CitizenV', after changing 2 lines of code. The issue here is that after editing the code and recompiling the apk, Malwarebytes flags the file as if it contains malware.
And i am trying to build it myself so i am sure it is clean.
 

VirtualWaver

Senior Member
Jun 14, 2011
182
7
London
Hi.
Do you have the files 'knoxsdk.jar' and 'supportlib.jar'? If yes, could you share them with me?

It is possible to make Adhell work even without KPE license, i had it working in my phone working version 3.2.366 compiled by the user 'CitizenV', after changing 2 lines of code. The issue here is that after editing the code and recompiling the apk, Malwarebytes flags the file as if it contains malware.
And i am trying to build it myself so i am sure it is clean.
Hi Mate,

Could you please advise what lines exactly did you change in the code to make it work without KPE license? I think I know how to mask the app as other app to activate it. I need to experiment but want to know how to bypass KPE license and use Knox activation instead. I will post a step by step instruction on how to compile and activate it once testing is succesful. Thanks.
 
Last edited:
  • Like
Reactions: blazethelight

mozn

Member
May 24, 2011
15
1
adhell-XE v3.2.496

i found this on a polish forum named mobilneforum.

checking on virustotal //edit: same (false?) flag?

what do you guys think about it
 

Attachments

  • Ashell-XE 2.3.5_Mod.apk
    2.7 MB · Views: 17
Last edited:

VirtualWaver

Senior Member
Jun 14, 2011
182
7
London
adhell-XE v3.2.496

i found this on a polish forum named mobilneforum.

checking on virustotal //edit: same (false?) flag?

what do you guys think about it

For me, I just downloaded the one posted above by CitizenV (which is virus free), modified it and compiled it back. Activated via Knox. Works like a charm.


I believe the virus thing is false positive as the original build by CitizenV is clean and some AVs only flag it after recompiling. Corect me if I am wrong but if the AVs don't flag the original one, its impossible for virus to appear out of nowhere after recompilling, especially when we recompile it by ourselves.

I certainty won't install modified mods that are flagged by AVs but this base build is virus free and I can certanly see it is flagging after I recompile so no way for virus to appear.
 

Mrxyzl

Senior Member
May 1, 2015
774
424
Good day.
Could someone please share with me the files 'knoxsdk.jar' and 'supportlib.jar'? As i am not an KPP partner, i cannot download them from Samsung.
I think i found a way to make adhell work without the license, but all the compiled versions that i downloaded seem to have some kind of malware, and to be sure, i would like to compile it myself, but without those files, it's not possible.
Can you share the apk you compiled that work?
 

Mrxyzl

Senior Member
May 1, 2015
774
424
Good day.
I'm sorry, i erased the apk, because after compiling, the apk is still flagged with a trojan.
You could ask VirtualWaver for is apk.
Thks for the info. I manage to make the apk. Ill test it with virus total again to see how it work.

Edit: the result show no virus except for the pua debug key (which mean i modified the stock apk). So i guess its safe. I modified via mt manager not apktool so thats why i guess.

Heres the link for the check

Edit 2: testing on phone and adhell work like it should be. Thanks @VirtualWaver and @Hansoliv for the tip and guide

Edit 3: add attachments
 

Attachments

  • Screenshot_20210615-010700_Iceraven.jpg
    Screenshot_20210615-010700_Iceraven.jpg
    942.8 KB · Views: 26
  • Screenshot_20210615-010927_Adhell3.jpg
    Screenshot_20210615-010927_Adhell3.jpg
    177.9 KB · Views: 27
Last edited:
  • Like
Reactions: blazethelight

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    Thanks to users VirtualWaver and Mrxyzl, i has finally able to create a working version of Adhell3, based on 'CitizenV' ah3 3.2.541, without samsung keys and no malware, using an app called MT Manager. :geek:
    Clean with ESET, Virustotal and Malwarebytes.
    2
    Ah Adhell good to have you back!
    2
    Still can't get it to work. Followed the instructions best I could but no luck. Not too sure on step 2 so might be doing it wrong. Any help appreciated.

    I'm assuming "EMM Remote" is "Remote Support for Knox Manager" and "My Safe" is "Secur Folder"
    Now that i am re-reading, the instructions, they are not very clear.
    You are right in your assumptions.
    Just to be sure, here is the link for the right app.

    Before you try again, uninstall "Remote Support for Knox Manager" and reboot the phone.

    In step 2, after installing, execute the app, activate the knox license and after that you should have a screen like the screenshot attached (may have a number or not) and exit the app.

    Now go to secure folder and add the app "Remote Support for Knox Manager", and inside the secure folder, execute again "Remote Support for Knox Manager" and get the knox license again like in step 2.

    Now you can follow the instructions from step 4 (should be step 5)
    1
    Good day.
    I used the app 'EMM remote supp*rt' from play store to get the knox license for Adhell to work.
    Hope it helps.
    1
    Which Adhell3 version is virus free that's being used?

    Good day.
    I have created two versions, see post #651 and #655.
    Instructions for instalation see post #659.
    Hope it helps
  • 40
    Very unfortunate about samsungs policy changes indeed, tried getting a partner account but was rejected... Might give it another try with some extended information (now as the bare basics, hoped it would be a semi-automatic thing but seems they actually properly check).

    Using Adguard premium in the meantime, but adhell would be my preferred choice. Unfortunately no valid license anymore so too bad...

    Let's try a quick reality check about basic blocking of ads and tracking servers on unlocked Samsung phones. A lot depends on your actual needs and mostly paranoia level, but it's a lot easier than often assumed.

    - If you have a functional adhell, do nothing and keep using it. Nobody can predict the future, but when your key expires, you'll have other options. Just relax and have a pleasant day.

    - No adhell but you're on Pie? Set your Private DNS to "dns.adguard.com". Just relax and have a pleasant day.

    - No adhell and still on Nougat or Oreo? Grab Intra and set the DNS to "https://dns.adguard.com/dns-query". Just relax and have a pleasant day.

    - Want more control over what you block? Use a VPN such as VPN Hosts which supports wildcards and local hosts file. Just relax and have a pleasant day.

    - Don't like any of those? Grab any DNS server or VPN that strikes your fancy but please use your own judgement about what actually works for you, not what someone online somewhere (myself included) says you should do.

    Those are not formal recommendations or endorsements of any specific product or approach, merely a realistic assessment of simple alternatives with a minimal amount of confusing technobabble.

    For most users, any of the above options will be more than sufficient and chances are you won't notice any actual difference in battery use or speed. Try them for yourself, it's easy! ;)
    24
    Adhell 3.1.x – KNOX AdBlocker for Samsung Galaxy devices and Package Disabler
    . Adhell is a Samsung Knox based application which can Block system-wide Ads, trackers, analytics from applications without root. It has more functionalities than just Ad-Blocker including Package Disabler, Mobile Restricter, App Permissions controller

    Z6PkxmJm.jpg


    Features
    • Pre-Activated KNOX ELM Licence (Must be renewed every 3 months, and can be generated from url below)
    • Domain Limit Size Increase (50,000)
    • Disable Apps Enabled by default
    • Apps Component Enabled by default
    ADHell v3.1.1 - Download
    The APK provided my cease to function at any time, due to the restrictions put in place by Samsung Knox key validation and not due to the fault of my own doing.
    I hold zero responsibility for the use of this app in any liable circumstance.
    *Unknown Apps must be enabled to install third-party APK files.

    If you don't wish to use the above download you may compile your own APK from the source below




    WHAT TO DO WHEN IT DOES NOT ACTIVATE/BYOA (Build Your Own App)
    Error: 102
    This appears due to the Licence being activated more than six times with the same package name while using a developer ELM key and not a commercial partner unlimited use ELM key (Samsung KNOX restriction not the App)
    You have a couple of options -
    • Change the ELM Key pre-installed by opening the app and going to the settings menu of the Adhell3 then scroll to the bottom of the menu and you will find the button to change the key to your own Knox ELM you generated.
    • Use an APK editor to make a change to the installed package name so that it is unique which should allow the pre-installed key to activate (ask others how to do that, but this might bypass the six activation limit under the same package name)
    • Compile your own version of Adhell3, instructions to do so are below.
    Please note as of this time if you don't already have a Knox ELM key generated from some previous use of Knox API applications you will have to wait as ELM key generations have been removed from SEAP for non-partner developers until further notice.

    How to compile your own version of Adhell3
    1. First grab the KNOX SDK and LIB you want the Knox SDK 3.3 (API level 28) & supportlib.jar (Dec 17/18, for older devices)
    2. Get yourself a new KNOX ELM Key from here, It should look something like this.
    3. Grab the Adhell3 Scripts from here, and follow the instructions which are clearly written for your operating system. (Note: you may need to type
      Code:
      adhell3.cmd setup
      under windows 10)
    4. When you are done you should be left with a folder looking like this which has your built APK package file ready to be moved to your device for install.
      If you struggle to understand how to modify the app before compile I have a ready to go app.properties you can use as a base, just be sure to place the file where the instructions say and to add your OWN KEY in the
      Code:
      skl.key=yourkeyhere

      An example app.properties file could look like this -
      Code:
      package.name=com.adhell3.12345
      domain.limit=100000
      enable.disableApps=true
      enable.appComponent=true
      appComponent.showSytemApps=false
      skl.key=D39335379587987309734637654687675985678078960879789057y58659867967890876706780670





    Compiled from Sources -
    Fusion Jack- Adhell 3 GitLab Source
    Generate Samsung ELM KNOX Licence Key - SIGN IN FIRST then click the link and it should take you right to it.
    11
    Folks, I see LOTS of misinformation in this thread. I strongly suggest that you look at the "official" AdHell3 GitLab repo and associated discordapp support area. At the very least, check the README on GItLab.

    Compiling: AdHell's current dev has provided convenient scripts for Windows/MacOS/Linux that make creating/updating your own copy a trivial matter. You can also use Android Studio or git, but the scripts are probably by far the easiest approach for most casual users.

    Using precompiled APKs: Your only choice if you don't have access to a computer, but tread very carefully. You MUST change the package ID (with APK Editor?) and understand which buid and options whoever created that APK was using. This should be only a last resort. Compiling is a lot safer, easier and faster than you might think (updating and installing to a new build only takes seconds on most computers).

    The Knox key: Read the instructions carefully. Create/use a Samsung developer acount, revoke any previous keys you may have, and get a new EDU key (it's 128 bytes long). If you can't create a key or your key is rejected, that simply means you made a mistake. Re-read the instructions and try again. Your Samsung developer account can use any email address and is unrelated to your "real" Samsung user account. After 90 days, your key will expire. Revoke it or switch to a new dev account, then get a new EDU key for another 90 days, no need to change your AdHell settings besides entering the new key when prompted.

    Remember, AdHell is basically a tool to configure the Knox firewall included with our Samsung devices (not just S10). Pick the correct block lists and settings for your personal needs, and once that's done you don't even need to run AdHell at all, not even in background, until you need to change something.
    5
    I confirm that is a legitimate new version that works with kpe key and not only for partners. Anyway I would represent the question as quoted because I have the same issue. Is there any way to make it working?

    I know to. But how make this to work ?

    This again?? Please quit blindly spreading misinformation and repeating unsubstanciated rumors here. Check your sources!

    It's not a new version, merely ongoing code tweaks. If you'll simply look at the adhell3 repo, you'll see that the current source for build 3.2.309 is freely available, ready for YOU to compile and use with YOUR partner-issued ELM or KPE key. You don't have to "make it work", it "works" just fine with a legitimate key. Any other use, if any, would be illegal and clearly not appropriate for XDA.

    Anybody who signs up as a Samsung developer (free) can compile the source for personal use. Anybody who is a licensed B2B Partner can create a suitable key for use with adhell3. Everybody else should forget about adhell and simply use one of the many alternatives for domain blocking, apps/components disabling, etc. .

    I sincerely wish I had never gotten involved with making adhell, SABS, and adhell3 available back before Samsung fixed the key loophole. Mea culpa!
    4
    Interested in AdHell3? Some clarifications might be useful:

    AdHell3 is an ongoing project using the Knox APIs publicly available to SEAP (Samsung Enterprise Alliance Program) developers. It is officially distributed solely as open source code, but NOT as binaries (APKs - a practice to which Samsung would object). It is NOT an application that you can merely download and directly install on your device. It is NOT officially supported here on XDA. Note that the official AdHell3 support areas cannot help you with questions or concerns specific to this thread's OP.

    Useful AdHell3 links:

    Some dependable (yet unofficial) precompiled APKs and instructions are currently available for people who don't have computer access but still want to try AdHell3 for testing.

    Once you have AdHell properly installed, you need to decide which domains to block. Most all publicly available "block lists" on the net are emphatically NOT designed for use with Knox (they typically don't even use wildcards). Loading bigger "universal" lists (containing up to an outrageous 100K entries?) won't make them any more appropriate but merely waste memory and other system resources. We recommend that you start at most with the default lists suggested in the GitLab repo. FYI, some of us successfully use tiny lists of less than 100 entries (as discussed in the support channel) as our sole provider. The bottom line is that only YOU know which domains YOU want/need to block even though we probably all prefer not so see ads served from places that can be expressed as, for example, "ads.*" (a valid AdHell3 entry!), an obvious candidate for blocking. Resist the temptation to burden AdHell3 with unnecessary and often detrimental block files intended for generic "ad blockers" or cosmetic blockers, or meant as hosts file replacements for rooted device, or for other platforms besides Android, etc.