[Discussion] Magisk Delta - Another unofficial third-party Magisk fork
- Thread starter huskydg
- Start date
There is a Pixel Flasher thread - it's a great tool, helping Pixel users to install Magisk, etc
Plus, there are Pixel experts there who will better know about the issues specific to Pixel models and their updates - suggesting to ask there (recently, somebody asked in one of the Magisk threads here and eventually hard-bricked his phone based on the 'normal' answers he got)
The latest version of Magisk Monet v25.2.3 fixes the scrolling issue while flashing long script based modules. It'd be great to have it fixed in the next version of Magisk Delta as well.
which magisk module do you use for this?
you are my hero - you found the new detection method
Is this script not neccessary for something to work?
is there a magisk/zygote module like HideMyApps which is doing the same for folders and files? so you could configure which folders/files are not visible for selected apps.
GitHub - adrianmmiller/AppDataIsolation: An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+)
An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+) - GitHub - adrianmmiller/AppDataIsolation: An attempt to block apps from accessing other apps' priv...
github.com
It was previously asked/answered here or in another Magisk thread, there you can also find a link for the alternative module, for A10 and older Android versions (if needed)
It will only be present if Magisk was installed as .zip installation from custom recovery and system is r/w... addon.d is a survival script function for addon packages like GApps and Magisk to survive ROM updates... version 2 supports full OTAs run while OS is booted...
If you forget to restore that directory before taking ROM update I'm guessing Magisk may simply not be restored (survive) and you'll need to do an initial installation again...
@osm0sis may like to investigate/comment on ways this directory can be hidden now that banks are evidently detecting it...
Not that I'm aware of. PW
Hi there
I am having difficulty with these applications: SNB, Absher, and Nafad. All other apps seem to be working for me. Would you like to try them to see if they work for you?
I am using Magisk Delta, zygisk . with hidemyapplist white-listing and magiskhide
I am having difficulty with these applications: SNB, Absher, and Nafad. All other apps seem to be working for me. Would you like to try them to see if they work for you?
I am using Magisk Delta, zygisk . with hidemyapplist white-listing and magiskhide
I had a suspicion this was going to happen.
This was posted in the Delta Telegram group:
This was posted in the Delta Telegram group:
Last edited by a moderator:
Yeah, there was no update since Mar 17.
Sad if true unfortunately, but thanks for an excellent and very useful Magisk fork - actually the best one, better than the original and with better support
Hoping to see tomorrow, April 2 bringing the better news
osm0sis
Senior Recognized Developer / Contributor
It happened again.
Tan-App for german bank comdirect found a way to detect root again.
they released a new version a few days ago.
The suggestion was only to rename the Magisk script itself, so addon.d function should all still work, and renaming a specific script shouldn't have any effect on its function, so nothing to worry about there.
Concerning that user apps are digging around in /system now...
It would probably be worth reporting it as a bug to Lineage; they might be able to adjust the SELinux context or permissions of addon.d while still keeping it working.
shoey63
Recognized Contributor
shoey63
Recognized Contributor
Attachments
does AppDataIsolation make HmA obsolete? Or should I use it parallel to AppDataIsolation?
GitHub - adrianmmiller/AppDataIsolation: An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+)
An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+) - GitHub - adrianmmiller/AppDataIsolation: An attempt to block apps from accessing other apps' priv...
Does AppDataIsolation work for you?
Module is from 2021
I installed module in DeltaMagisk in an unofficial LOS19 (from retiredtab).
Device boot approxemately until unlock screen, then device reboots.
alternative module only for A10 and below, right, not for A11 and above?
It is listet in a repo in Fox's Magisk Module Mangaer
I have App Data Isolation but still need HMA
The module I use was released on Jan 21, 2023 - but the module's code seems to be (at least 4 months) older:
GitHub - adrianmmiller/AppDataIsolation: An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+)
An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+) - GitHub - adrianmmiller/AppDataIsolation: An attempt to block apps from accessing other apps' priv...
github.com
Please better check on GitHub for which Android version the particular module is suitable, cannot tell you better than what their developers describe
I have only A11 and A12 hence I don't use that alternative module for A10 and earlier, and don't know anything more about that module.
Also, I don't use LOS
In Fox, click on Description and you will go to GitHub (it works for modules from the Alt Repo), there you can see provided info about the given module
Last edited:
Using Magisk Delta fixed 2 out of 3 apps for me that used to crash.
But the other one, my banking app, still detects something. When you open it, it basically opens the browser and online website instead because it detected tampering. Previously, with original Magisk, it used to append
But the other one, my banking app, still detects something. When you open it, it basically opens the browser and online website instead because it detected tampering. Previously, with original Magisk, it used to append
rasp=root to the URL. Now it appends rasp=android_hook. So that's progress I guess.
Last edited:
Yes, Delta goes on
Attachments
Similar threads
Top Liked Posts
-
2
I see on TG channel that many have reported same/similar problem for the latest 8775765-Delta and they returned to the previous Delta version1
Last time unmount method works for me (no problem with tng + hlb connect + zygisk) but aosp mods and systemless lawnchair broke it totally and I couldnt find other way round. For now I just use kernelsu and everything seems to work with no issue. Kernelsu however is kernel dependent. So I really hope someday everything can be put together with magisk unmount. -
3
Probably detecting Zygisk then...
Hidable with LSPosed Metagisk Magisk WIP native bridge loaded Zygisk built in Alpha fork + latest Shamiko, Alpha Magisk hidden in stub ('Hide the Magisk app') and added in HMA XPosed module (w/ LSPosed) along with HMA itself and all other XPosed modules and all root apps and any associated with modding in any way:
Nb. NB-Z may still not be fully baked but seems conflicts are now resolved... Devs hoped it would be ready for official Magisk 27.0... This PR:
Refactor zygisk to use native bridge to inject
So you can wait for official or try it in bleeding edge Alpha if you can't wait (warts and all)...
Nb.2. I have Developer options, OEM unlocking and USB debugging disabled as well as Parasitic LSPosed manager openable via status notification (no shortcut) and haven't attempted otherwise...
Nb. I always have Magisk hidden in stub and on hiding apps from banks in HMA (needed for this and app below) I include Magisk (hidden) stub app in hide templates too... Did this since observing that either obfuscating Magisk in stub or hiding full App via HMA wasn't enough for Sparkasse pushTAN German bank; Both methods were needed in tandey to circumvent their Promon security engine's dex pattern matching as well as simple package detection...So I haven't tried with full App and HMA...
So I've tested both iMobile Pay and Kotak Mobile Banking App on my Xiaomi Redmi Note 8T, stock MIUI, Android 11, configured as above... Kotak Mobile Banking App also works with the same setup:
... No need to freeze the Magisk App here...
Hope it helps everyone...
PW2Magisk Delta has been updated to Magisk v26.3.
They say the known bug from previous build should be fixed
https://github.com/HuskyDG/magisk-files/releases/tag/24b5daf6-delta
Things seem fine for me on my earlier device. Riru mode; not Zygisk. (All testing apps behave as before.)2
You misunderstood. KSU is available for all my other devices barring the one in which I am using MD.2
I see on TG channel that many have reported same/similar problem for the latest 8775765-Delta and they returned to the previous Delta version2Just sharing my current set up with new rom PixelOS on Pixel 7
- magisk delta 26.3
- zygisk enabled
- youtube/music revanced/pixelify submodules
- Unmount options ticked on both
- Under mount list, only configured app that requires root such as Swift Backup
- safetynet passed basic by default (PixelOS)
TnG, MAE work
HLB work (only version 1.1.51, newer like 52 will not work for now)
Google Wallet works too for my CIMB CC -
65This is not an officially supported topjohnwu project.
If you are looking for official Magisk source, please go to this page
Introduction
Custom Magisk fork by HuskyDG. Sync with official Magisk adding back MagiskHide.
http://huskydg.github.io/magisk-files
REPORT BUG IS STILL ACCEPTED ON XDA THREAD BUT PLEASE INCLUDE ADDITIONAL INFORMATION SUCH AS LOGCAT AND MAGISK LOG8Ptrace MagiskHide ported as Magisk module which allows user to hide without enabling Zygisk on Official Magisk v24.0+
7Revive MagiskHide from Magisk v23.0
- The implementation of MagiskHide is ptrace Zygote process, every forks of Zygote will be notified and traced also.
- MagiskHide from Magisk v23.0 which monitors every thread spawn event of Zygote fork (app process is heavily a multithreads process which will spawn threads to trigger MagiskHide to check UID and cmdline)
- There is an exception that app zygote does not spawn threads and thus it won’t trigger MagiskHide to unmount Magisk and detach. (MagiskDetector and Momo take advantages of this fact to detect MagiskHide through ptrace)
- To fix this problem, we trace the syscalls prctl() instead of thread spawn event of Zygote fork like MagiskHide in Magisk v23.0
- After processes has been forked from zygote, there will be atleast prctl() is called to change the process name. For normal app process and isolated process, the process name will be changed as followed:
- zygote -> (unknown name) -> <pre-initialized> -> (process name). So the key is <pre-initialized>, after that we can guess it is target process or not.
- For app zygote, there is only once prctl() is called to change process name: zygote -> package.name_zygote.
- The changing process name happens before apk is being loaded so we can detach it from ptrace, do unmount all Magisk files and nearly there is no traces left after that.
6
Interesting analysis from @5ec1cff here:Btw, maybe I should start thinking of Livin' by Mandiri
https://github.com/5ec1cff/my-notes/blob/master/analyse-livin.md
Seems Livin / others may use smap for detection... This study discusses TJW's sanitize environment commit not working properly and LSP fixes in Shamiko as well as efforts needed to hide zygisk hooks, esp for functions of libandroid_runtime.so:
https://github.com/5ec1cff/my-notes/blob/master/new-idea-detect-zygisk.md
... I note dev refers to @canye's (Magisk Bravo) analysis of environment variables too...
This article analyses more recent Zygisk changes and Dev's attempts to hide zygisk /proc/self/attr/current exposure etc:
https://github.com/5ec1cff/my-notes/blob/master/zygisk-new-start-mode.md
... it ends with this conjecture:
"Maybe it's time to consider loading zygisk with native bridge?"
More on this and comparison w/ riru hiding / methods and plans for hiding Zygisk here:
https://github.com/5ec1cff/my-notes/blob/master/maru.md
Many of the ideas revealed in Dev's notes above are implemented in Magisk Maru fork (and adopted for now in Delta)... See top 4 commits here:
https://github.com/5ec1cff/Magisk/commits/maru
... use of complete native/src/zygisk/elf_util.cpp file from LSPosed in inject with native bridge Is interesting...
... Many other interesting notes here:
https://github.com/5ec1cff/my-notes
incl. "build-magisk-on-windows" etc...
... I've only taken a cursory glance at notes I mentioned...
Very credible Zygisk hiding efforts for a fork like Delta however... 
PW
