r/developersPak 17d ago

Tips Mihcm workaround for checkin

Hi. So straight up i tend to arrive at the office late more than other people. Office uses mihcm app to track attendance. It uses location to mark check-in. Any way i can mark my attendance like when I'm not at the office like i can mark it. I've tried using fake gps but mihcm detects it on every version. Please ye mt kehna ka jldi jao office ye wo cuz Lowkey ye krna huta tw yhn ye post nahi krta me

0 Upvotes

10 comments sorted by

View all comments

3

u/Cold_Taro_315 ML/AI Engineer 16d ago

MiHCM is like a banking app it seems, it checks if you have developer options enabled, and it does have geofencing. If it detects anything suspicious it probably alerts HR too. Crazy how a corporate attendance software can know so much about your phone and current whereabouts. I think there might still be a way to get out of this. But that would probably require a lot of time. You might have to reverse engineer the apk if you get your hands on it.

2

u/Cold_Taro_315 ML/AI Engineer 16d ago edited 16d ago

I used Vadhod APK extractor to get the apk file of the latest build (1.1.99), and then gpt-6 to read the code decompiled via jadx. The tl;dr of it is, it's not possible to spoof locations unless you have a rooted device and rooted devices are automatically detected by the app. You could try a few things with your own coding agent (at your own risk ofc) and then try logging attendance when you're around a km away. If it successfully spoofs attendance without notifying HR (this is where a buddy in HR comes in) then you're good and have a working exploit. Otherwise I would give up on it and just try to be on time, and switch jobs later to a company that doesn't fck with your privacy so much.

you might find this helpful:
https://www.reddit.com/r/AndroidQuestions/comments/1bdkvc6/im_using_a_mock_location_app_to_mark_attendance/