[Discussion] Magisk Delta - Another unofficial third-party Magisk fork

Search This thread

AnonVendetta

Senior Member
Apr 29, 2016
1,112
433
Portland, OR
MagiskHide toggle is DenyList toggle
MagiskHide will keep zygisk to be loaded for apps on denylist

Shamiko will work even it say it's not working. It say it is not working because it receives denylist_enabled flag sent by zygisk.

And.. If you use shamiko, why not use official magisk.

I think your banking app will work fine without shamiko if it doesn't detect zygisks. Shamiko cannot really hide zygisk.
Can you clarify?
"MagiskHide is denylist toggle"
"MagiskHide will keep Zygisk to be loaded for apps on denylist"

Does this mean that enabling MagiskHide is *THE SAME* as official Magisk's "enforce denylist"?

I'm not trying to hide root from a banking app. I'm trying to hide it from 2 online games. Apex Legends Mobile, and Call of duty: Warzone Mobile. I was recently invited by Activision to take part in a closed alpha test for WZM. I can play, but I suspect it's detecting Magisk. When not rooted, WZM runs normally for hours without crashes. When rooted, it randomly crashes, and constantly. As soon as I unroot, the crashes go away. The game gives no messages about detecting root, but I'm suspicious anyway.

Also, Momo app detects an abnormal environment even when Shamiko and Universal SN Fix are enabled ("data not encrypted" and "found Zygisk". It also detects unlocked bootloader.
 

AnonVendetta

Senior Member
Apr 29, 2016
1,112
433
Portland, OR
Yes


Can you tell me how do you do when hiding root?
Well, you say Shamiko will work regardless of whether enforce denylist is enabled. Maybe you mean with your custom Magisk only. But what I've read elsewhere says that enforce denylist must be disabled for Shamiko to work. So, I'm confused.

What I do:
Install the games, but not launch them
Enable Zygisk and MagiskHide in your custom Magisk
Add Apex and WZM to the denylist
Reboot
Launch both games.

In the case of Apex, it detects root and won't let me log in, it even gives a message saying playing on a rooted device isn't allowed. For WZM, it just randomly crashes when rooted but not when unrooted. No root related messages are given. For now, both games are working fine, with this custom Magisk.
 

Timmmmaaahh!

Senior Moderator
Staff member
Sep 11, 2012
5,757
1
14,161
Bruges
OnePlus One
OnePlus 6T
Zygisk and MagiskHide can't be enabled at the same time?
Ah, yes, of course they can. I was just suggesting that hiding com.google.android.gms may already fix your problem (if it wasn't hidden already) as this would address SafetyNet but if that didn't work it's worth trying to disable Zygisk (leaving MagiskHide enabled) as those games might be detecting Zygisk.
 

AnonVendetta

Senior Member
Apr 29, 2016
1,112
433
Portland, OR
Ah, yes, of course they can. I was just suggesting that hiding com.google.android.gms may already fix your problem (if it wasn't hidden already) as this would address SafetyNet but if that didn't work it's worth trying to disable Zygisk (leaving MagiskHide enabled) as those games might be detecting Zygisk.

Right now they're working normally. So I don't think any more action is necessary for now. Apex doesn't give a root detected message on launch, and the random WZM crashes haven't happened in the past couple of hours. Along with both added to denylist. So far I'm just using the safety net fix module, Shamiko, and Zygisk/MagiskHide both enabled.

I switched to this custom Magisk a few hours ago, wanted to give something else a try besides official. I was just confused if Shamiko would work or not, since @huskydg has said that enabling hide is the same as enabling "enforce denylist", and Shamiko isn't supposed to work with that enabled. But he has also said Shamiko will work regardless, so I guess that only applies to this custom Magisk, not official Magisk.

I also find it weird that Momo detects an abnormal environment and Zygisk. Even though a few safety net checker apps say that basic integrity/CTS profile are passing.
 
  • Like
Reactions: Timmmmaaahh!

huskydg

Senior Member
Feb 17, 2021
207
209
I also find it weird that Momo detects an abnormal environment and Zygisk. Even though a few safety net checker apps say that basic integrity/CTS profile are passing.
Safetynet only checks for bootloader status (usnf prevent this), root, emulatior, some props (fingerprint, device model, security patch date,...) and a few modifications
 
Last edited:
  • Like
Reactions: Timmmmaaahh!

AnonVendetta

Senior Member
Apr 29, 2016
1,112
433
Portland, OR
Safetynet only checks for bootloader status (usnf prevent this), root, emulatior and a few modifications

I don't think it's currently common practice for online games to check SN. Pokemon Go is the only one I know of for sure that does. I play a handful of games online on mobile, most of them don't require hiding Magisk, etc. Obviously, checking SN makes sense for something like a banking app.
 

zgfg

Senior Member
Oct 10, 2016
7,650
5,054
Today I installed Delta to test

Be aware that package name is not con.topjohnwu.magisk (as for the official TJW Magisk) but io.github.huskydg.magisk and for non-power users of Magisk who do not uninstall Magisk before switching to Delta it will cause troubles: two Magisk apps installed in parallel (TJW Magisk and Delta Magisk), Delta Magisk app asking for root grant but showing Magisk not installed, etc)

Even when I uninstalled TJW Magisk app, but I did not yet patch my boot.img with Delta, TJW Magisk stub 1.0 was appearing hence I again had two Magisk icons on the home screen)

Recommendation:
Who is not power user of Magisk to understand all those quirks, ie, who does not understand himself what is going on and how to solve:
Please stay on TJW Magisk or fully uninstall both TJW Magisk app and TJW Magisk itself before switching to Delta

---

Observations once the issues were resolved

First, since I had LSPosed already installed with three modules, I did not want to uninstall TJW Magisk to loose all that. Therefore I ititially had the issues as above, but quickly solved them when uninstalled TJW Magisk app, later its stub and when I finally patched boot.img by Delta and flashed

Then, all my modules I did have set when I was on TJW Magisk, root grants and DenyList configured were preserved

---

Also because of not wanting to waste time of resetting my LSPosed modules again, I had to keep my Zygisk-LSPosed

Therefore I have to have Zygisk enabled in Delta

Hence I have both enabled, Zygisk and MagiskHide

(As previously commented by others, there is no Enforce DenyList option, but that's 'hijacked' by MagiskHide when MagiskHide is enabled)

---

Now with both Zygisk and MagiskHide, and Momo in DenyList:

- Without Shamiko and UnmountDenyList, Momo detects Zygisk

- With Unmount DenyList module, Momo still detects Zygisk

- But with Shamiko, Momo does no more detects Zygisk (hence Shamiko really works although it complains that it was disabled bcs of DenyList 'being' Enforced)

---

No other issues or observations. Delta works fine. Thanks 👍
 
Last edited:

m0han

Senior Member
Apr 30, 2012
5,006
2,058
Hide google gms from magisk denylist ,
restore magisk app with original name ,
instapay you need Egypt location to fully load the app, use Vpn if you want to try
momo app will show environment is broken with magiskhide
I'm on the latest Magisk Delta; not with LSPosed Riru, but with LSPosed Zygisk. Is there anything I can do to make my Momo cleaner and if so, how to go about it? Should I use Riru? Should I uninstall HMA app?

 

Attachments

  • Delta Momo and init.rc.jpg
    Delta Momo and init.rc.jpg
    181.2 KB · Views: 62

m0han

Senior Member
Apr 30, 2012
5,006
2,058
I see a new Canary; but, there is no 'Update' button. MD5: 8a806c6f1589a8ea4a57afb834f01c50 is correct? Dirty-install ok?
 

Attachments

  • Screenshot_20220706_224251.jpg
    Screenshot_20220706_224251.jpg
    167.8 KB · Views: 34

Top Liked Posts

  • There are no posts matching your filters.
  • 6
    Thread re-opened
    4
    Some files are required to be mounted earlier than "post-fs-data", example, manifest.xml need to be mounted before hwservicemanager which will be started in "init", replace it by magisk module is too late. So Magisk Delta has add early-mount.d function which allow module developers to replace files as soon as possible. https://huskydg.github.io/magisk-files/docs/internal-guide.html
    2
    I guess it is caused by the new changes made to Play Integrity API that break some banking apps. It just so happened to take place around the same time Magisk 25.2 was introduced.
    SafetyNet by itself still continued to work (it's the same SN checking as it was a week, month or so ago)

    Changes are related to Wallet that depends on the new Play Integrity API

    Nevertheless, you are quoting my post from Saturday - in this Internet time it is like from a medieval history 😁 - since then (on that phone) I installed USNF 2.3.2 to get it passing PI API, MEETS_DEVICE_INTEGRITY
    2
    The reason why I use it is because there are apps out there (e.g. PayPal) that tracks your root status covertly but doesn't give you any special indications in the app. It then sends that information to the server and goes into some kind of risk assessment of what kind of naughty things you are up to...
    That's what I said but maybe did not express clearly enough or you did not decode from my words

    Every app that smells of payments or similar ('banking' apps do not mean they must be for a particular bank), I would include to my MagiskHide or DenyList (depending on the sort of Magisk I use at the moment or on that phone), before opening that app for the first time

    Also for games - however, I don't play them hence I don't need to care about

    Eg, I fortunately also thought of in advance and applied DenyList/MagiskHide to a VPN authentication app we use at work - if I did not, I would have troubles witth security specialists from our IT dept

    However, I would never blindly apply MagiskHide Whitelist (IMHO, a lazyman option), thus risking to break some system's functionality
  • 20
    This is not an officially supported topjohnwu project.
    If you are looking for official Magisk source, please go to this page


    Introduction

    Custom Magisk fork by HuskyDG. Sync with official Magisk adding back MagiskHide.
    http://huskydg.github.io/magisk-files
    7
    There are known apps which start to detect zygisk and work with MagiskHide only: Itsme, Livin by Madiri, Instapay. If you use these apps, the only way is to disable zygisk and use only MagiskHide.
    6
    Thread re-opened
    4
    LSPosed has released new Shamiko which fixed Found zygisk for latest Momo but the banking apps that won't run with zygisk enabled like Livin by Madiri still not open.

    4
    Some files are required to be mounted earlier than "post-fs-data", example, manifest.xml need to be mounted before hwservicemanager which will be started in "init", replace it by magisk module is too late. So Magisk Delta has add early-mount.d function which allow module developers to replace files as soon as possible. https://huskydg.github.io/magisk-files/docs/internal-guide.html