• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

Adhell 3 - KNOX

Search This thread

Siminica

Senior Member
Jun 1, 2015
109
26
Instructions are so unclear that it looks like it's been written by an autistic person who assumes everyone has the same knowledge as him.

I followed them to best of my ability but adhell is showing uninteractable gray screen.

1. Got the correct emm app
2. launch it in normal shell
3. from recents clear it
4. enable secure folder from settings
5. add emm to secure folder and launch from there
6. clear it from recents again
7. Uninstall emm from normal system
8. open secure folder and remove that emm app from the secure folder
9. in secure folder hi,t three dots, settings/more/uninstall, keep the default "take media out" or whatever it's in English checked
10. Install adhell
11. without opening it, enable it in device admin apps
12. Boom, grey screen
have you seen also the reply I got to my initial question? what I was missing was the fact that secure folder must be completely uninstalled not only the emm app uninstalled from secure folder. so when I did that in step 8 of my sequence INSTEAD of removing the app from secure folder everything went fine for me.
before retrying the sequence I uninstalled everything related to this process including my existing secure folder and rebooted the phone
 

Siminica

Senior Member
Jun 1, 2015
109
26
It can't be COMPLETELY uninstalled. Choose your words better.

The three dots/options/more/options/uninstall is the only uninstall you're going to get.

Because there's no option to uninstall secure folder in device settings/apps. You can only disable it.

To COMPLETELY uninstall it you already need root.
ok, my bad - English is not my native so I might be mistakenly using some words. what I meant was uninstall secure folder instead of removing the emm app from it. so when I uninstalled secure folder the emm app was present there, maybe removing the app from secure folder also removes something from knox but uninstalling secure folder it doesn't, I can't say as I am no expert, but this approach did the trick for me
 
May 22, 2021
7
1
I uninstalled secure folder the emm app was present there, maybe removing the app from secure folder also remove something from knox but uninstalling secure folder it doesn't, I can't say as I am no expert, but this approach did the trick for me

That's what I was going to try.

Bevcause the moron who wrote those instruction on that lotita virus site didn't explain the logic behind this.

I'm guessing:

1. adhell needs special knox key to work
2. That key can't be obtained anymore
3. we install an official knox app to get that key locally stored on the device
4. we use a virtualization software (secure folder) to duplicate the app to fool adhell to refer to that location to obtain the key
5. the adhell provided in this page has the same com.something.name as the emm remote app?
6. when the emm remote app is uninstalled from normal system and adhell is installed, it's looking for keys
7. the virtualized emm app is providing the keys to the adhell app DESPITE being removed from secure folder and the secure folder is uninstalled

BUT HOW?

These instructions are plain wrong as the virtualized/sandboxed software's data shouldn't be accessed by any other app, it's virtualized and called SECURE folder for a reason ffs.

Is anyone well versed in this thing can explain how the process works rather than giving instructions?

We can make our own instructions if we know ticktock behind the process.
 

RRiVEN

Senior Member
Jun 4, 2008
59
35
That's what I was going to try.

Bevcause the moron who wrote those instruction on that lotita virus site didn't explain the logic behind this.

I'm guessing:

1. adhell needs special knox key to work
2. That key can't be obtained anymore
3. we install an official knox app to get that key locally stored on the device
4. we use a virtualization software (secure folder) to duplicate the app to fool adhell to refer to that location to obtain the key
5. the adhell provided in this page has the same com.something.name as the emm remote app?
6. when the emm remote app is uninstalled from normal system and adhell is installed, it's looking for keys
7. the virtualized emm app is providing the keys to the adhell app DESPITE being removed from secure folder and the secure folder is uninstalled

BUT HOW?

These instructions are plain wrong as the virtualized/sandboxed software's data shouldn't be accessed by any other app, it's virtualized and called SECURE folder for a reason ffs.

Is anyone well versed in this thing can explain how the process works rather than giving instructions?

We can make our own instructions if we know ticktock behind the process.
If I had to guess, Knox doesn't do a very good job validating the apk signature. So when the EMM app in Secure Folder is granted Knox access then removed, the system only sees one EMM (adhell) app so it assumes that is the one that was granted access to the Knox api and it lets it use the Knox API

Knox can see inside and outside of secure folder as it is baked in the Kernel and all over the device. Secure folder is just another user with its home directly encrypted and the permissions set so the main user can't see it. Nothing special about Secure Folder.
 

Hansoliv

Senior Member
Jul 12, 2007
355
78
Good day.
It seems that Adhell as been updated to version 3.2.455 last week.
Can be installed on top of version 3.2.366.
Uses the the knox license of the app 'NotifyRDS Add-on: S*msung'
 

Attachments

  • ah3_3.2.455_817d9be5.apk
    2.8 MB · Views: 137

Hansoliv

Senior Member
Jul 12, 2007
355
78
holup, who update adhell? i thought Fusion abandoned it?
Good day.
There is an update in GitLab 'Fusionjack' at 15 July. Am i seeing the wrong one?
Sorry, i stated the wrong date in the previous post, i only got hold of the apk, after was uploaded by 'CitizenV' at 30 of July.

1628336994382.png
 
Last edited:

fracarol

Senior Member
Feb 5, 2016
333
58
Is there a guide for making adhell work other than the one linked in post #659? Those found on that page are definitely sketchy, I'm sorry
 

aouni_tahech

Senior Member
Sep 20, 2011
179
52
I got the app to work based on the confusing instructions. However the domain/firewall blocking doesn't appear to be working even when I activate them in the app.

Edit: Nevermind. There was a typo in the firewall rule for Chrome.
I'm surprised that this actually works after it's been dead for quite a while!
I'm also surprised that this thread doesn't have a lot of attention. Any reason why? Are people using something else?
 
Last edited:

Nastrahl

Senior Member
I got the app to work based on the confusing instructions. However the domain/firewall blocking doesn't appear to be working even when I activate them in the app.

Edit: Nevermind. There was a typo in the firewall rule for Chrome.
I'm surprised that this actually works after it's been dead for quite a while!
I'm also surprised that this thread doesn't have a lot of attention. Any reason why? Are people using something else?
Probably because there's now private DNS so it's way simpler

Adhell may be more battery intensive too

Also, AdGuard does better as it can also do cosmetic blocking

Blocking apps components is quite hassle that maybe a few people don't want to do.
 

Hansoliv

Senior Member
Jul 12, 2007
355
78
Probably because there's now private DNS so it's way simpler

Adhell may be more battery intensive too

Also, AdGuard does better as it can also do cosmetic blocking

Blocking apps components is quite hassle that maybe a few people don't want to do.
Good day.
I do not agree with you in the battery part, because i tested myself and adhell just configures knox with the rules, and as soon as you close it, it does not even work in the background.
Tested it with Gsam and in 8 hours it used 0,0% of battery.

In my case i use adhell, because:
1. Has a firewall that does not use VPN to block access to the internet (and uses less battery that way)
2. Remove dangerous permissions of apps
3. Block ads
4. Disable bloatware and battery draining apps (130 apps in my case)
5. Freeze google and facebook and other trackers in apps
6. Change DNS in the apps i want
7. Turn off camera and mic access.

And all that in one free app that uses 0% of battery while in background ;)
 
Last edited:
  • Like
Reactions: fracarol and *elmo*

Nastrahl

Senior Member
Good day.
I do not agree with you in the battery part, because i tested myself and adhell just configures knox with the rules, and as soon as you close it, it does not even work in the background.
Tested it with Gsam and in 8 hours it used 0,0% of battery.

In my case i use adhell, because:
1. Has a firewall that does not use VPN to block access to the internet (and uses less battery that way)
2. Remove dangerous permissions of apps
3. Block ads
4. Disable bloatware and battery draining apps (130 apps in my case)
5. Freeze google and facebook and other trackers in apps
6. Change DNS in the apps i want
7. Turn off camera and mic access.

And all that in one free app that uses 0% of battery while in background ;)
Hello,

Sorry i wasn't enough specific.

It's actually not AdHell that eats up battery as you demonstrated, but blocked apps. I'll try to explain :

I think apps work with triggers and if you're not connected apps stop making unnecessary DNS and others connection requests to avoid consuming battery as the "connected state" trigger of the phone is off.

When connected but blocked with a firewall, apps got the "connected state" that's now on, and i tend to think tissus it's more battery intensive as they make more requests since they get no response from the server they try to reach.

I hope somebody can prove me wrong.
 

Hansoliv

Senior Member
Jul 12, 2007
355
78
Good day.
Does anyone here knows an app that uses knox to function as a task killer for system apps? (if that is even possible)
I know that samsung already has a task killer, but it is somehow limited only to user apps.
I used to use Greenify, but is annoying in the way it kills the apps without root, and some apps re-activate after some time.
Thank you.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 40
    Very unfortunate about samsungs policy changes indeed, tried getting a partner account but was rejected... Might give it another try with some extended information (now as the bare basics, hoped it would be a semi-automatic thing but seems they actually properly check).

    Using Adguard premium in the meantime, but adhell would be my preferred choice. Unfortunately no valid license anymore so too bad...

    Let's try a quick reality check about basic blocking of ads and tracking servers on unlocked Samsung phones. A lot depends on your actual needs and mostly paranoia level, but it's a lot easier than often assumed.

    - If you have a functional adhell, do nothing and keep using it. Nobody can predict the future, but when your key expires, you'll have other options. Just relax and have a pleasant day.

    - No adhell but you're on Pie? Set your Private DNS to "dns.adguard.com". Just relax and have a pleasant day.

    - No adhell and still on Nougat or Oreo? Grab Intra and set the DNS to "https://dns.adguard.com/dns-query". Just relax and have a pleasant day.

    - Want more control over what you block? Use a VPN such as VPN Hosts which supports wildcards and local hosts file. Just relax and have a pleasant day.

    - Don't like any of those? Grab any DNS server or VPN that strikes your fancy but please use your own judgement about what actually works for you, not what someone online somewhere (myself included) says you should do.

    Those are not formal recommendations or endorsements of any specific product or approach, merely a realistic assessment of simple alternatives with a minimal amount of confusing technobabble.

    For most users, any of the above options will be more than sufficient and chances are you won't notice any actual difference in battery use or speed. Try them for yourself, it's easy! ;)
    24
    Adhell 3.1.x – KNOX AdBlocker for Samsung Galaxy devices and Package Disabler
    . Adhell is a Samsung Knox based application which can Block system-wide Ads, trackers, analytics from applications without root. It has more functionalities than just Ad-Blocker including Package Disabler, Mobile Restricter, App Permissions controller

    Z6PkxmJm.jpg


    Features
    • Pre-Activated KNOX ELM Licence (Must be renewed every 3 months, and can be generated from url below)
    • Domain Limit Size Increase (50,000)
    • Disable Apps Enabled by default
    • Apps Component Enabled by default
    ADHell v3.1.1 - Download
    The APK provided my cease to function at any time, due to the restrictions put in place by Samsung Knox key validation and not due to the fault of my own doing.
    I hold zero responsibility for the use of this app in any liable circumstance.
    *Unknown Apps must be enabled to install third-party APK files.

    If you don't wish to use the above download you may compile your own APK from the source below




    WHAT TO DO WHEN IT DOES NOT ACTIVATE/BYOA (Build Your Own App)
    Error: 102
    This appears due to the Licence being activated more than six times with the same package name while using a developer ELM key and not a commercial partner unlimited use ELM key (Samsung KNOX restriction not the App)
    You have a couple of options -
    • Change the ELM Key pre-installed by opening the app and going to the settings menu of the Adhell3 then scroll to the bottom of the menu and you will find the button to change the key to your own Knox ELM you generated.
    • Use an APK editor to make a change to the installed package name so that it is unique which should allow the pre-installed key to activate (ask others how to do that, but this might bypass the six activation limit under the same package name)
    • Compile your own version of Adhell3, instructions to do so are below.
    Please note as of this time if you don't already have a Knox ELM key generated from some previous use of Knox API applications you will have to wait as ELM key generations have been removed from SEAP for non-partner developers until further notice.

    How to compile your own version of Adhell3
    1. First grab the KNOX SDK and LIB you want the Knox SDK 3.3 (API level 28) & supportlib.jar (Dec 17/18, for older devices)
    2. Get yourself a new KNOX ELM Key from here, It should look something like this.
    3. Grab the Adhell3 Scripts from here, and follow the instructions which are clearly written for your operating system. (Note: you may need to type
      Code:
      adhell3.cmd setup
      under windows 10)
    4. When you are done you should be left with a folder looking like this which has your built APK package file ready to be moved to your device for install.
      If you struggle to understand how to modify the app before compile I have a ready to go app.properties you can use as a base, just be sure to place the file where the instructions say and to add your OWN KEY in the
      Code:
      skl.key=yourkeyhere

      An example app.properties file could look like this -
      Code:
      package.name=com.adhell3.12345
      domain.limit=100000
      enable.disableApps=true
      enable.appComponent=true
      appComponent.showSytemApps=false
      skl.key=D39335379587987309734637654687675985678078960879789057y58659867967890876706780670





    Compiled from Sources -
    Fusion Jack- Adhell 3 GitLab Source
    Generate Samsung ELM KNOX Licence Key - SIGN IN FIRST then click the link and it should take you right to it.
    11
    Folks, I see LOTS of misinformation in this thread. I strongly suggest that you look at the "official" AdHell3 GitLab repo and associated discordapp support area. At the very least, check the README on GItLab.

    Compiling: AdHell's current dev has provided convenient scripts for Windows/MacOS/Linux that make creating/updating your own copy a trivial matter. You can also use Android Studio or git, but the scripts are probably by far the easiest approach for most casual users.

    Using precompiled APKs: Your only choice if you don't have access to a computer, but tread very carefully. You MUST change the package ID (with APK Editor?) and understand which buid and options whoever created that APK was using. This should be only a last resort. Compiling is a lot safer, easier and faster than you might think (updating and installing to a new build only takes seconds on most computers).

    The Knox key: Read the instructions carefully. Create/use a Samsung developer acount, revoke any previous keys you may have, and get a new EDU key (it's 128 bytes long). If you can't create a key or your key is rejected, that simply means you made a mistake. Re-read the instructions and try again. Your Samsung developer account can use any email address and is unrelated to your "real" Samsung user account. After 90 days, your key will expire. Revoke it or switch to a new dev account, then get a new EDU key for another 90 days, no need to change your AdHell settings besides entering the new key when prompted.

    Remember, AdHell is basically a tool to configure the Knox firewall included with our Samsung devices (not just S10). Pick the correct block lists and settings for your personal needs, and once that's done you don't even need to run AdHell at all, not even in background, until you need to change something.
    5
    I confirm that is a legitimate new version that works with kpe key and not only for partners. Anyway I would represent the question as quoted because I have the same issue. Is there any way to make it working?

    I know to. But how make this to work ?

    This again?? Please quit blindly spreading misinformation and repeating unsubstanciated rumors here. Check your sources!

    It's not a new version, merely ongoing code tweaks. If you'll simply look at the adhell3 repo, you'll see that the current source for build 3.2.309 is freely available, ready for YOU to compile and use with YOUR partner-issued ELM or KPE key. You don't have to "make it work", it "works" just fine with a legitimate key. Any other use, if any, would be illegal and clearly not appropriate for XDA.

    Anybody who signs up as a Samsung developer (free) can compile the source for personal use. Anybody who is a licensed B2B Partner can create a suitable key for use with adhell3. Everybody else should forget about adhell and simply use one of the many alternatives for domain blocking, apps/components disabling, etc. .

    I sincerely wish I had never gotten involved with making adhell, SABS, and adhell3 available back before Samsung fixed the key loophole. Mea culpa!
    4
    Interested in AdHell3? Some clarifications might be useful:

    AdHell3 is an ongoing project using the Knox APIs publicly available to SEAP (Samsung Enterprise Alliance Program) developers. It is officially distributed solely as open source code, but NOT as binaries (APKs - a practice to which Samsung would object). It is NOT an application that you can merely download and directly install on your device. It is NOT officially supported here on XDA. Note that the official AdHell3 support areas cannot help you with questions or concerns specific to this thread's OP.

    Useful AdHell3 links:

    Some dependable (yet unofficial) precompiled APKs and instructions are currently available for people who don't have computer access but still want to try AdHell3 for testing.

    Once you have AdHell properly installed, you need to decide which domains to block. Most all publicly available "block lists" on the net are emphatically NOT designed for use with Knox (they typically don't even use wildcards). Loading bigger "universal" lists (containing up to an outrageous 100K entries?) won't make them any more appropriate but merely waste memory and other system resources. We recommend that you start at most with the default lists suggested in the GitLab repo. FYI, some of us successfully use tiny lists of less than 100 entries (as discussed in the support channel) as our sole provider. The bottom line is that only YOU know which domains YOU want/need to block even though we probably all prefer not so see ads served from places that can be expressed as, for example, "ads.*" (a valid AdHell3 entry!), an obvious candidate for blocking. Resist the temptation to burden AdHell3 with unnecessary and often detrimental block files intended for generic "ad blockers" or cosmetic blockers, or meant as hosts file replacements for rooted device, or for other platforms besides Android, etc.