feat(maribank): PH 注册 OTP 突破、SG bypass 与中文文档

菲律宾 SeaBank 在 Root+LSPosed+Shamiko 下 register 已通过并触发 OTP；扩展 SG 包名、加密前 Hook、Magisk 设备伪装脚本，并将 docs 整理为中文操作与风控说明。

scripts/magisk/maribank-device-spoof/module.prop

@@ -0,0 +1,6 @@
+id=maribank_device_spoof
+name=MariBank Device Spoof
+version=v1.0
+versionCode=1
+author=miraclegarden
+description=Spoof serial/boot/build props for MariBank SHPSSDK fingerprint. Pair with Shamiko + DenyList for sg.com.maribankmobile.digitalbank. Generates a stable fake serial and android_id on first boot.

scripts/magisk/maribank-device-spoof/post-fs-data.sh

@@ -0,0 +1,50 @@
+#!/system/bin/sh
+# Early boot: spoof read-only props before most apps start.
+# resetprop is provided by Magisk.
+
+MODDIR=${0%/*}
+LOGTAG="maribank_device_spoof"
+
+log() {
+  echo "[$LOGTAG] $*" >> /cache/maribank_device_spoof.log 2>/dev/null
+  echo "[$LOGTAG] $*"
+}
+
+if [ ! -f "$MODDIR/serial.txt" ]; then
+  # 16-char alphanumeric serial, stable across reboots
+  SERIAL=$(cat /proc/sys/kernel/random/uuid 2>/dev/null | tr -d '-' | cut -c1-16)
+  [ -z "$SERIAL" ] && SERIAL="MB$(date +%s | tail -c 9)"
+  echo "$SERIAL" > "$MODDIR/serial.txt"
+fi
+SERIAL=$(cat "$MODDIR/serial.txt")
+
+log "serial=$SERIAL"
+
+# --- device identity (SHPSSDK / attestation often reads these) ---
+resetprop -n ro.serialno "$SERIAL"
+resetprop -n ro.boot.serialno "$SERIAL"
+resetprop -n ro.boot.serialno "$SERIAL"
+resetprop -n persist.sys.serialno "$SERIAL"
+
+# --- hide root / debug fingerprint ---
+resetprop -n ro.debuggable 0
+resetprop -n ro.secure 1
+resetprop -n ro.adb.secure 1
+resetprop -n ro.build.type user
+resetprop -n ro.build.tags release-keys
+resetprop -n ro.boot.verifiedbootstate green
+resetprop -n ro.boot.flash.locked 1
+resetprop -n ro.boot.vbmeta.device_state locked
+resetprop -n vendor.boot.vbmeta.device_state locked
+resetprop -n ro.boot.veritymode enforcing
+resetprop -n ro.boot.warranty_bit 0
+resetprop -n ro.crypto.state encrypted
+
+# --- adb off (match Java-layer bypass) ---
+resetprop -n init.svc.adbd stopped
+resetprop -n init.svc.adb stopped
+resetprop -n service.adb.root 0
+resetprop -n persist.sys.adb_enable 0
+resetprop -n persist.adb.wifi.enabled 0
+
+log "post-fs-data done"

scripts/magisk/maribank-device-spoof/service.sh

@@ -0,0 +1,37 @@
+#!/system/bin/sh
+# After boot: rotate Settings.Secure.android_id once (global, affects all apps).
+
+MODDIR=${0%/*}
+LOGTAG="maribank_device_spoof"
+
+log() {
+  echo "[$LOGTAG] $*" >> /cache/maribank_device_spoof.log 2>/dev/null
+}
+
+# Wait for SettingsProvider
+i=0
+while [ "$(getprop sys.boot_completed)" != "1" ] && [ "$i" -lt 120 ]; do
+  sleep 1
+  i=$((i + 1))
+done
+sleep 3
+
+if [ ! -f "$MODDIR/android_id.txt" ]; then
+  # 16 hex chars (standard ANDROID_ID format)
+  AID=$(cat /proc/sys/kernel/random/uuid 2>/dev/null | tr -d '-' | cut -c1-16)
+  [ -z "$AID" ] && AID="$(date +%s | md5sum 2>/dev/null | cut -c1-16)"
+  echo "$AID" > "$MODDIR/android_id.txt"
+fi
+AID=$(cat "$MODDIR/android_id.txt")
+
+settings put secure android_id "$AID" 2>/dev/null
+log "android_id=$AID"
+
+# Clear MariBank cache so SHPSSDK re-collects with new props (optional, user can disable)
+PKG="sg.com.maribankmobile.digitalbank"
+if [ -f "$MODDIR/clear_maribank_on_boot" ]; then
+  pm clear "$PKG" 2>/dev/null
+  log "pm clear $PKG"
+fi
+
+log "service.sh done"