Bigdroidos 201 Patched -
As this was a "Patched" challenge, a more permanent solution involves modifying the APK itself (smali patching) to bypass the check permanently.
Instead of guessing the password, I decided to hook the verifyCredentials method in the AuthManager class and force it to return true.
Frida Script (bypass.js):
Java.perform(function ()
var AuthManager = Java.use("com.bigdroid.ctf.AuthManager");
AuthManager.verifyCredentials.implementation = function (user, pass)
console.log("Hooking verifyCredentials...");
console.log("User: " + user);
console.log("Pass: " + pass);
// Force return true
return true;
;
);
After booting:
For those considering downloading and installing BigDroidOS 201 Patched, here are its most notable features as reported by community forums (e.g., XDA Developers, 4PDA, Reddit’s r/AndroidEmulation): bigdroidos 201 patched
| Feature | Description | |---------|-------------| | Kernel version | Linux 4.19+ with custom Cherry-Pick patches for low-latency input | | Android base | Android 9 Pie or 10 Q (varies by source) | | Architecture support | x86_64 (primary), with libhoudini ARM translation for ARM-only apps | | Pre-installed apps | F-Droid, Aurora Store, AdAway, Magisk Manager | | GPU acceleration | VirGL, Vulkan 1.2, and native GPU passthrough for NVIDIA/AMD | | Storage optimization | Sparse image format with resizable userdata partition | | Network tweaks | DNS over TLS, VPN-friendly routing, and tethering fixes |
Additionally, BigDroidOS 201 Patched often includes a custom launcher (e.g., Lawnchair or a modded Pixel Launcher) and removes Google Play Services bloat—though this breaks many apps that rely on GMS (Google Mobile Services). Some variants re-add microG as an open-source replacement. As this was a "Patched" challenge, a more
Yes if:
No if: