Comdirect photoTAN app detecting root

Search This thread

lemon567

Senior Member
Dec 28, 2013
89
32
Nexus 9
Huawei P20 Lite
Two more suggestions

1.) Use magisk hide props config and change your devices fingerprint to a pixel device with android 11 e.g pixel 5/5a

2.) Use magisk delta fork and use its magisk hide function some users reported that delta worked for them while the zygisk shamiko setup of topjohnwu didn't
 
I have a second device where it's set up as backup, to have a failsafe, … because setting up Google Pay (after clear cache play services) and phototan lock is really time-consuming. So I am up for more suggestions to try. Since it's failing xprivacy, even though it's not installed... is there any sort of leftover other than the folders in data/adb

??
 
i have updated to the newest xiaomi eu 13.0.8 stable for my pocox3 phone, this hasn't changed anything... as well

for xposed, i have disabled lsposed, removed app, disabled module, rebooted, cleaned cache / data of play services, play store and phototan

however root is always still detected. i have obviously also deleted lsposed folder from root data/adb

so i am continue to struggle
 
i have updated to the newest xiaomi eu 13.0.8 stable for my pocox3 phone, this hasn't changed anything... as well

for xposed, i have disabled lsposed, removed app, disabled module, rebooted, cleaned cache / data of play services, play store and phototan

however root is always still detected. i have obviously also deleted lsposed folder from root data/adb

so i am continue to struggle
Hide my apps list does not also seem to help, trying with shamiko, without shamiko, resetting all related app caches and files, hiding magisk as well as using air frozen.

Not sure what else could be the problem by now
 

lemon567

Senior Member
Dec 28, 2013
89
32
Nexus 9
Huawei P20 Lite
Hide my apps list does not also seem to help, trying with shamiko, without shamiko, resetting all related app caches and files, hiding magisk as well as using air frozen.

Not sure what else could be the problem by now
Have you tried the denylist unmount module I mentioned a few posts back?

 
  • Like
Reactions: Laptapper
Have you tried the denylist unmount module I mentioned a few posts back?

i tried it before, but i tried it again...

- install denylist unmount
- disable shamiko
- disable enforce list
- add phototan to denylist
- clear cache data on playstore and services, as well as phototan
- lsposed removed
- xprivacy not installed

TB checker says xprivacylua fails
all other seem good anyways

phototan says i am rooted
 

lemon567

Senior Member
Dec 28, 2013
89
32
Nexus 9
Huawei P20 Lite
i tried it before, but i tried it again...

- install denylist unmount
- disable shamiko
- disable enforce list
- add phototan to denylist
- clear cache data on playstore and services, as well as phototan
- lsposed removed
- xprivacy not installed

TB checker says xprivacylua fails
all other seem good anyways

phototan says i am rooted
I have to ask again is your device Play Protect Certified? Go to Playstore --> Settings --> Info --> scroll down to the bottom

regarding xprivacylua have you checked within your phones root directory --> /data/system/xlua
 
Last edited:
I have to ask again is your device Play Protect Certified? Go to Playstore --> Settings --> Info --> scroll down to the bottom

regarding xprivacylua have you checked within your phones root directory --> /data/system/xlua

- magisk renamed + frozen
- certified yes
- xlua folder just now deleted
- clean cache+data for all

rebootd

TB checker
- root checker all pass
- play integrity "strong integrity, virtual integrity" both fail
- basic + device integritypass

phototan still root detect
 

lemon567

Senior Member
Dec 28, 2013
89
32
Nexus 9
Huawei P20 Lite
- magisk renamed + frozen
- certified yes
- xlua folder just now deleted
- clean cache+data for all

rebootd

TB checker
- root checker all pass
- play integrity "strong integrity, virtual integrity" both fail
- basic + device integritypass

phototan still root detect
Have you checked if your cts profile match passes not just basic integrity

Download yasnac from playstore and see if your cts profile match passes if it does not you have to use magiskhide props config to pass it

The last thing I would try if cts profile match passes and root is still detected is to run the magisk delta fork switching is very easy just unhide the magisk app (if hidden) and simply flash delta within the magisk app and use its magisk hide feature
 
Have you checked if your cts profile match passes not just basic integrity

Download yasnac from playstore and see if your cts profile match passes if it does not you have to use magiskhide props config to pass it

The last thing I would try if cts profile match passes and root is still detected is to run the magisk delta fork switching is very easy just unhide the magisk app (if hidden) and simply flash delta within the magisk app and use its magisk hide feature

yasnac cts profile pass

ok, after a few more attempts and changes with delta magisk, it seems to be working. i just finished the activation process. as well as closing/killing task the app a few times, as well as reboot.

so the current settings are:

- delta magisk + hidden
- removed old magisk app
- flash magisk delta
- zygisk off
- magisk hide on
- enforce sulist (nothing ticked in the list though)

modules
- no shamiko, denylist because zygisk is disabled.

no lspoed app
no xprivacylua app



....

2 days activation period meh
 

Seppel007

Member
Jun 10, 2012
28
2
Stuttgart
ok, after a few more attempts and changes with delta magisk, it seems to be working. i just finished the activation process. as well as closing/killing task the app a few times, as well as reboot.

so the current settings are:

- delta magisk + hidden
- removed old magisk app
- flash magisk delta
- zygisk off
- magisk hide on
- enforce sulist (nothing ticked in the list though)

modules
- no shamiko, denylist because zygisk is disabled.

no lspoed app
no xprivacylua app



....

2 days activation period meh
Switching over to Magisk Delta worked for me too. Thanks!!

Oneplus5 rooted stock rom, faced new issues when accidently updating my ComDirect PhotoTan App.
 

p3rsi2k

Member
Feb 16, 2011
8
3
ok, after a few more attempts and changes with delta magisk, it seems to be working. i just finished the activation process. as well as closing/killing task the app a few times, as well as reboot.

so the current settings are:

- delta magisk + hidden
- removed old magisk app
- flash magisk delta
- zygisk off
- magisk hide on
- enforce sulist (nothing ticked in the list though)

modules
- no shamiko, denylist because zygisk is disabled.

no lspoed app
no xprivacylua app

Works nice! Thx!
 

Knotte

Senior Member
Nov 19, 2012
153
26
Munich
So I dug right into it to see which solution works for the newest version of photoTAN and this worked for my Galaxy S20+ with rooted Stock:
  1. Uninstall Magisk (if you don't have delta yet) from within the app, then install Magisk Delta the usual way you do for your phone model (most likely from recovery after renaming the *.apk to *.zip, I also had to install the APK after booting up the system)
  2. Now for me Zygisk is not needed, but I am enabling it so I can use the Universal SafetyNet Fix module for passing CTS for whatever other apps might need it
  3. Enable MagiskHide but leave Enforce SuList disabled, add photoTAN to the MagiskHide list
Voila, at least for me photoTAN works again, even without wiping its cache!
 

booyakax

Member
Dec 16, 2021
5
3
So I dug right into it to see which solution works for the newest version of photoTAN and this worked for my Galaxy S20+ with rooted Stock:
  1. Uninstall Magisk (if you don't have delta yet) from within the app, then install Magisk Delta the usual way you do for your phone model (most likely from recovery after renaming the *.apk to *.zip, I also had to install the APK after booting up the system)
  2. Now for me Zygisk is not needed, but I am enabling it so I can use the Universal SafetyNet Fix module for passing CTS for whatever other apps might need it
  3. Enable MagiskHide but leave Enforce SuList disabled, add photoTAN to the MagiskHide list
Voila, at least for me photoTAN works again, even without wiping its cache!
I am on Crdroid 8.14 and this is not working for me. I followed all the steps. Did i miss something?
 

Conan179

Senior Member
Apr 28, 2010
909
108
  1. Uninstall Magisk (if you don't have delta yet) from within the app, then install Magisk Delta the usual way you do for your phone model (most likely from recovery after renaming the *.apk to *.zip, I also had to install the APK after booting up the system)
  2. Now for me Zygisk is not needed, but I am enabling it so I can use the Universal SafetyNet Fix module for passing CTS for whatever other apps might need it
  3. Enable MagiskHide but leave Enforce SuList disabled, add photoTAN to the MagiskHide list
Voila, at least for me photoTAN works again, even without wiping its cache!
Working great on my Fold4!
 

Top Liked Posts

  • There are no posts matching your filters.
  • 14
    Since version 8.3.0 additional measures to detect root have been added, do not update as MagiskHide won't be able to prevent detection. Until a solution is found I would recommend staying on the previous version for as long as possible.

    Finding out what exactly is causing the root detection is beyond my technical abilities but I would provide as much information needed to those willing to help.

    ---

    Update: December 14th 2021 - Method no longer sufficient

    ---

    The solution found by @pxrave appears to be working:


    Hey fellas I got it working and others apps detect magisk before.

    Update to latest v23
    Install modules riru and riru unshare
    Remove data from tan app
    Go to magisk hide and tick all process to hide included the isolated
    Start the tan app and do the activation again.

    Problem you need wait 2 days to activate because comdirect use new activation process for photo tan app.

    Working fine all version 8.3


    Link to the Riru Unshare module:
    11
    1. deinstall old magisk-app
    2. install canary.apk
    https://raw.githubusercontent.com/topjohnwu/magisk-files/canary/app-debug.apk
    2.1 install safenet-fix modul
    https://github.com/kdrag0n/safetynet-fix/releases/download/v2.2.1/safetynet-fix-v2.2.1.zip
    (will not be active until you finished step 3.)
    3. repatch boot.rom with "install" & "direct" (installieren & direkte installation)
    4. after that reboot, etc... it should look sth like this
    1.jpg

    5. go to settings (red arrow)
    6. hide app (2.), enable zygisk (if not allready running) 3, enable deny-list (4), config deny-list (5)
    2.jpg

    7. enable all 3 processes
    3.jpg

    8. add other apps you may need in deny-list... like google pay & google play services

    during the hole process you may have to reboot your phone
    9
    Hey fellas I got it working and others apps detect magisk before.

    Update to latest v23
    Install modules riru and riru unshare
    Remove data from tan app
    Go to magisk hide and tick all process to hide included the isolated
    Start the tan app and do the activation again.

    Problem you need wait 2 days to activate because comdirect use new activation process for photo tan app.

    Working fine all version 8.3
    6
    To get rid of the Airplane mode (or toggling data off/on) I figured how to block the connection to the upgrade service right on the phone. The requests go to 'api.comdirect.de'.

    Use blacklist in TrackerControl
    -> Settings / Advanced options / Import hosts file (append)

    Create a file on the phone with this content:
    0.0.0.0 api.comdirect.de

    This way I can leave the connection to the internet on when starting/using the app.
    No version check can be performed, so the app should work forever ...

    One cannot use the TAN push service anymore but only the „photoTAN Grafik“.
    6
    So guys
    My favorite solution:
    Magisk canary
    Riru
    Riru unshare
    Riru lsposed
    Xprivacilua 1.30

    Safety net is ok
    Phototan working