[Discussion] Magisk Delta - Another unofficial third-party Magisk fork

Search This thread

huskydg

Senior Member
Feb 17, 2021
410
481
This is not an officially supported topjohnwu project.
If you are looking for official Magisk source, please go to this page


Introduction

Custom Magisk fork by HuskyDG. Sync with official Magisk adding back MagiskHide.
http://huskydg.github.io/magisk-files

REPORT BUG IS STILL ACCEPTED ON XDA THREAD BUT PLEASE INCLUDE ADDITIONAL INFORMATION SUCH AS LOGCAT AND MAGISK LOG
 
Last edited:

Timmmmaaahh!

Sr. Mod / Mod Cmte / Recognized Xmas Avatar Themer
Staff member
Sep 11, 2012
6,319
1
17,029
Bruges
OnePlus One
OnePlus 6T
Good day @huskydg! Delta has been running all things smoothly on my end except for the Keytrade Bank application.
I've briefly mentioned it before over here but I think this might be a better place to find a solution. I'm trying to avoid LSPosed but if there's no other solution I'll go for that anyway.
Any ideas are most welcome! Thank you for your time.
  • OnePlus 6T
  • OOS 11.1.2.2
  • Hidden Magisk 25.1-delta (25100)
  • Zygisk disabled
  • MagiskHide enabled
  • DenyList checked for pretty much all Google/Gov/Financial apps and com.google.android.gms
 
Good day @huskydg! Delta has been running all things smoothly on my end except for the Keytrade Bank application.
I've briefly mentioned it before over here but I think this might be a better place to find a solution. I'm trying to avoid LSPosed but if there's no other solution I'll go for that anyway.
Any ideas are most welcome! Thank you for your time.
  • OnePlus 6T
  • OOS 11.1.2.2
  • Hidden Magisk 25.1-delta (25100)
  • Zygisk disabled
  • MagiskHide enabled
  • DenyList checked for pretty much all Google/Gov/Financial apps and com.google.android.gms
Keytrade Bank is working with Delta / magiskhide
do you have enforce or permissive?
try to flash momohider module or join telegram group we have husky files to flash
you dont need to hide magisk app and you should flash safetynetfix 2.1.3 riru
 

jakito

Senior Member
Aug 9, 2016
132
72
OnePlus 7 Pro
Good day @huskydg! Delta has been running all things smoothly on my end except for the Keytrade Bank application.
I've briefly mentioned it before over here but I think this might be a better place to find a solution. I'm trying to avoid LSPosed but if there's no other solution I'll go for that anyway.
Any ideas are most welcome! Thank you for your time.
  • OnePlus 6T
  • OOS 11.1.2.2
  • Hidden Magisk 25.1-delta (25100)
  • Zygisk disabled
  • MagiskHide enabled
  • DenyList checked for pretty much all Google/Gov/Financial apps and com.google.android.gms
It's working on OOS 11.0.8 on my OP7 Pro. Your problem comes very probably from the hidden Magisk. If that doesn't solve it, Riru + Riru MomoHider should do the trick
 

Lord Sithek

Senior Member
Dec 19, 2018
1,360
695
Xiaomi Redmi Note 4
Huawei Watch 2
Good day @huskydg! Delta has been running all things smoothly on my end except for the Keytrade Bank application.
I've briefly mentioned it before over here but I think this might be a better place to find a solution. I'm trying to avoid LSPosed but if there's no other solution I'll go for that anyway.
Any ideas are most welcome! Thank you for your time.
  • OnePlus 6T
  • OOS 11.1.2.2
  • Hidden Magisk 25.1-delta (25100)
  • Zygisk disabled
  • MagiskHide enabled
  • DenyList checked for pretty much all Google/Gov/Financial apps and com.google.android.gms
I installed this app out of curiosity on two my devices: 1) Xiaomi Redmi Note 4 with custom ROM Android 10, rooted with Magisk Delta 25.1 (using Riru, LSPosed and MagiskHide); 2) Xiaomi Mi Note 10 with Xiaomi.eu ROM Android 11, rooted with official Magisk 25.1 (using Zygisk, LSPosed and Shamiko). And what I observed:

1) On the first device with custom ROM I was not able to fool Keytrade Bank app even with using MagiskHide enabled, repackaged Magisk Delta app, (I know it's rather redundant, but just in case ;), hidden LSPosed manager and using HideMyApplist properly configured. I suppose it may be involved with the old security patches because my ROM isn't being updated for Android 10 anymore.

2) On the second device I couldn't fool Keytrade app until I used HideMyApplist LSPosed module. It suggests that Keytrade is looking for a specific packages installed... Then by a process of elimination I determined it was the HideMyApplist app itself which causes the Keytrade app to crash! But since you dont have LSPosed installed at all, maybe there is another package which Keytrade app is looking for... Anyway, looks like running Keytrade is possible even with official Magisk and Shamiko (maybe even with Enforce DenyList as well)

EDIT: Pardon, it turned out that with only HideMyApplist app hidden Keytrade crashes after a while too. But I have 13 different apps with root access hidden with another template and with that applied to Keytrade I'm able to start a profile creation process
 
Last edited:

akhil17kr

Senior Member
Oct 8, 2011
589
64
gurgaon
Sir, i tried using this app in zenfone max pro m1 with latest masgik v25 with zygisk enabled. So after giving super user request YES 2 times (it prompts for 2 prompts one after another) i opening settings and enabled "magisk hide" and did reboot device.
But after reboot the root request automatically resets and i've to redo procedure again

BUT after disabling zygisk the root request reset issue didn't happened. So i did add the "instabiz ,My jio" apps to test if it detects root or not , but it still detects root.

SO how do i make it work ?
 
Sir, i tried using this app in zenfone max pro m1 with latest masgik v25 with zygisk enabled. So after giving super user request YES 2 times (it prompts for 2 prompts one after another) i opening settings and enabled "magisk hide" and did reboot device.
But after reboot the root request automatically resets and i've to redo procedure again

BUT after disabling zygisk the root request reset issue didn't happened. So i did add the "instabiz ,My jio" apps to test if it detects root or not , but it still detects root.

SO how do i make it work ?
after enable magiskhide
flash riru module
flash safetynetfix 2.1.3
go to denylist , add google services
reboot
add apps to denylist
 

razael25

New member
Dec 20, 2020
3
1
work perfectly fine with Livin, but i can't open Jago app.
Magisk Hide enabled
safetynet-fix 2.1.3
Riru - MomoHider
 

Timmmmaaahh!

Sr. Mod / Mod Cmte / Recognized Xmas Avatar Themer
Staff member
Sep 11, 2012
6,319
1
17,029
Bruges
OnePlus One
OnePlus 6T
(...) Then by a process of elimination I determined it was the HideMyApplist app itself which causes the Keytrade app to crash! (...)
OMG, that's it!! How stupid of me. I had reinstalled HideMyApplist but couldn't configure it as it needs LSPosed and forgot about it. After uninstalling, Keytrade immediately worked! Thank you!
 
Last edited:

BigChungus321

Senior Member
Tried Magisk Delta and sure enough it did pass the Instapay app. Used magisk hide, randomize package name, riru, momohider, unshare, and safety net. Downside is even though I have safetynet module, still can't pass basic attestation and somehow I broke momo app. For the momo app, I should only have init.rc as the failed test 'cause somehow momo can't see device is custom ROM and unlocked bootloader. Weird.

Edit: Safetynet passed, I just forgot to add gms and gms unstable in denylist.
 

Attachments

  • Screenshot_20220628-225819_InstaPay.png
    Screenshot_20220628-225819_InstaPay.png
    587.4 KB · Views: 1,180
  • Screenshot_20220628-225823_Momo.png
    Screenshot_20220628-225823_Momo.png
    198.4 KB · Views: 1,070
  • Screenshot_20220628-225835_Yet Another SafetyNet Attestation Checker.png
    Screenshot_20220628-225835_Yet Another SafetyNet Attestation Checker.png
    119.2 KB · Views: 1,180
  • Screenshot_20220628-225851_かわいい!!.png
    Screenshot_20220628-225851_かわいい!!.png
    186.8 KB · Views: 1,077
Last edited:
Tried Magisk Delta and sure enough it did pass the Instapay app. Used magisk hide, randomize package name, riru, momohider, unshare, and safety net. Downside is even though I have safetynet module, still can't pass basic attestation and somehow I broke momo app. For the momo app, I should only have init.rc as the failed test 'cause somehow momo can't see device is custom ROM and unlocked bootloader. Weird.
Hide google gms from magisk denylist ,
restore magisk app with original name ,
instapay you need Egypt location to fully load the app, use Vpn if you want to try
momo app will show environment is broken with magiskhide
 

AnonVendetta

Senior Member
Apr 29, 2016
1,586
577
Will Shamiko work with this custom Magisk? I know Shamiko needs Zygisk enabled. But it also needs "enforce denylist" disabled. However, this app doesn't have that option. So, does this app enforce denylist or does it not enforce it? Since there is no toggle for this setting.
 

huskydg

Senior Member
Feb 17, 2021
410
481
Will Shamiko work with this custom Magisk? I know Shamiko needs Zygisk enabled. But it also needs "enforce denylist" disabled. However, this app doesn't have that option. So, does this app enforce denylist or does it not enforce it? Since there is no toggle for this setting.
MagiskHide toggle is DenyList toggle
MagiskHide will keep zygisk to be loaded for apps on denylist

Shamiko will work even it say it's not working. It say it is not working because it receives denylist_enabled flag sent by zygisk.

And.. If you use shamiko, why not use official magisk.

I think your banking app will work fine without shamiko if it doesn't detect zygisks. Shamiko cannot completely hide zygisk.
 
Last edited:
  • Like
Reactions: pocketrule

Top Liked Posts

  • 1
    or perhaps google wrote him that they were about to sue him if wouldn't stop development? as they did with John
    That's not what happened with John.

    The only reason for John having changed his development priorities is because he took a job with Google.
    1
    or perhaps google wrote him that they were about to sue him if wouldn't stop development? as they did with John

    This never happened or any new version like 26 would have never been released
  • 3
    If official magisk lets you disable zygisk,
    It does...
    then yes. You literally just make sure you are hiding root from starling (on official magisk you can do this with denylist i think, but shamiko won't work without zygisk so be sure to enable magisk's own denylist toggle,
    ...but Denylist requires Zygisk too.
    on delta it's "MagiskHide") and reboot with zygisk disabled. Log into starling then when you're in, reboot with zygisk enabled again. When starling gets to one day left on their timer, redo the process.
    I did have the Firebase url blocked in adaway, unsure if that's strictly required now but it's probably doing no harm to have it blocked.
    👍

    FWIW, I've already tried this with my current Alpha Magisk setup which is a POC for the upcoming native bridge Zygisk loading refactoring. It seems it's not yet enough to hide Zygisk from this app, but even initial work is not yet completed
    IMG_20230521_122937.jpg

    and native bridge compatible Shamiko is also brand new.

    I suspect when the final function above and testing are completed and NB Zygisk hits official Magisk (expected with 27.0) Zygisk may be properly hidable finally just as NB based Riru was.

    Of course Riru had integrated RiruHide, but Zygisk will always rely on third party hiding going to forward so some further compatibility tweaks for Shamiko will probably also be required for proper Zygisk hiding...

    Meanwhile, someone else might be interested in trying official Magisk with firebaseremoteconfig.googleapis.com blocked and @huskydg's p-trace based portable MagiskHide...

    Please say if passing PI deviceIntegrity verdict is also needed... (I suspect it will be, but some banks don't check this.) If it is, @huskydg's (improved) forked Riru build and his Riru-based forked safetynet-fix build could also be applied to TJW Magisk...

    I may try this when time permits, but real Starling users may have more motivation.

    👍 PW

    Edit:

    Tried this with current Alpha w/ MagiskHide instead of Denylist (Zygisk disabled), and voilà!:
    IMG_20230521_133635~2.jpg

    ... I can confirm PI deviceIntegrity is not checked as it is failing and blocking firebaseremoteconfig.googleapis.com was not required either... (12 May 2023 update.)
    2
    Is magisk delta dead?
    This on TG Channel dt. 23-May-2023
    1
    I'm fairly new to MD, I have fdac22ba installed on Pixel 7 Pro. Its currently set up using Magisk Hide but I want to change it and use SU List instead but when I tried it I had trouble with 2 modules which showed as installed but I couldn't open them, BCR & AOSPMods. Anyone have similar issue with these apps. Or is there a specific way it has to be done. I tried reinstalling, rebooting etc.
    Install Su-List Auto-WhiteList module (scroll up in this thread to find about), or manually add module's apps to SuList (and reboot)
    1
    Starling bank app seems to be detecting root now regardless of Delta/Alpha,modules, or setting combos. Super frustrating.
    1
    Try this, it's per-app. Maybe it could help. (Lsposed)

    No luck with this either

    Edit:
    Got it working by disabling Zygisk entirely. App gives you 7 days from root detection once logged in so I guess I'll just turn zygisk off for a boot cycle once a week to keep the app going. Pain in the ass or what.
  • 54
    This is not an officially supported topjohnwu project.
    If you are looking for official Magisk source, please go to this page


    Introduction

    Custom Magisk fork by HuskyDG. Sync with official Magisk adding back MagiskHide.
    http://huskydg.github.io/magisk-files

    REPORT BUG IS STILL ACCEPTED ON XDA THREAD BUT PLEASE INCLUDE ADDITIONAL INFORMATION SUCH AS LOGCAT AND MAGISK LOG
    7
    Revive MagiskHide from Magisk v23.0
    • The implementation of MagiskHide is ptrace Zygote process, every forks of Zygote will be notified and traced also.
    • MagiskHide from Magisk v23.0 which monitors every thread spawn event of Zygote fork (app process is heavily a multithreads process which will spawn threads to trigger MagiskHide to check UID and cmdline)
    • There is an exception that app zygote does not spawn threads and thus it won’t trigger MagiskHide to unmount Magisk and detach. (MagiskDetector and Momo take advantages of this fact to detect MagiskHide through ptrace)
    • To fix this problem, we trace the syscalls prctl() instead of thread spawn event of Zygote fork like MagiskHide in Magisk v23.0
    • After processes has been forked from zygote, there will be atleast prctl() is called to change the process name. For normal app process and isolated process, the process name will be changed as followed:
      • zygote -> (unknown name) -> <pre-initialized> -> (process name). So the key is <pre-initialized>, after that we can guess it is target process or not.
    • For app zygote, there is only once prctl() is called to change process name: zygote -> package.name_zygote.
    • The changing process name happens before apk is being loaded so we can detach it from ptrace, do unmount all Magisk files and nearly there is no traces left after that.
    6
    Thread re-opened
    6
    And now Bingo, with today's Magisk-017cca27-delta(25205), Momo does no more detect Zygisk

    - Zygisk and MagiskHide enabled, Shamiko disabled
    👍
    Btw, maybe I should start thinking of Livin' by Mandiri 😁
    Interesting analysis from @5ec1cff here:
    https://github.com/5ec1cff/my-notes/blob/master/analyse-livin.md

    Seems Livin / others may use smap for detection... This study discusses TJW's sanitize environment commit not working properly and LSP fixes in Shamiko as well as efforts needed to hide zygisk hooks, esp for functions of libandroid_runtime.so:
    https://github.com/5ec1cff/my-notes/blob/master/new-idea-detect-zygisk.md
    ... I note dev refers to @canye's (Magisk Bravo) analysis of environment variables too...

    This article analyses more recent Zygisk changes and Dev's attempts to hide zygisk /proc/self/attr/current exposure etc:
    https://github.com/5ec1cff/my-notes/blob/master/zygisk-new-start-mode.md
    ... it ends with this conjecture:
    "Maybe it's time to consider loading zygisk with native bridge?"
    More on this and comparison w/ riru hiding / methods and plans for hiding Zygisk here:
    https://github.com/5ec1cff/my-notes/blob/master/maru.md

    Many of the ideas revealed in Dev's notes above are implemented in Magisk Maru fork (and adopted for now in Delta)... See top 4 commits here:
    https://github.com/5ec1cff/Magisk/commits/maru
    ... use of complete native/src/zygisk/elf_util.cpp file from LSPosed in inject with native bridge Is interesting...

    ... Many other interesting notes here:
    https://github.com/5ec1cff/my-notes
    incl. "build-magisk-on-windows" etc...

    ... I've only taken a cursory glance at notes I mentioned...

    Very credible Zygisk hiding efforts for a fork like Delta however... 👍 👀 PW