Meituan Technology Team

Feb 2, 2018 · Information Security

Detection Techniques for Xposed Installer and Cydia Substrate on Android

The article explains how Android hooking frameworks Xposed Installer and Cydia Substrate operate and provides practical Java‑ and native‑level detection methods—such as package‑name checks, stack‑trace inspection, memory‑map scanning, and signature matching—to identify their presence and strengthen app security.