[Discussion] Magisk Delta - Another unofficial third-party Magisk fork
- Thread starter huskydg
- Start date
There is a Pixel Flasher thread - it's a great tool, helping Pixel users to install Magisk, etc
Plus, there are Pixel experts there who will better know about the issues specific to Pixel models and their updates - suggesting to ask there (recently, somebody asked in one of the Magisk threads here and eventually hard-bricked his phone based on the 'normal' answers he got)
The latest version of Magisk Monet v25.2.3 fixes the scrolling issue while flashing long script based modules. It'd be great to have it fixed in the next version of Magisk Delta as well.
which magisk module do you use for this?
you are my hero - you found the new detection method
Is this script not neccessary for something to work?
is there a magisk/zygote module like HideMyApps which is doing the same for folders and files? so you could configure which folders/files are not visible for selected apps.
GitHub - adrianmmiller/AppDataIsolation: An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+)
An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+) - GitHub - adrianmmiller/AppDataIsolation: An attempt to block apps from accessing other apps' priv...
github.com
It was previously asked/answered here or in another Magisk thread, there you can also find a link for the alternative module, for A10 and older Android versions (if needed)
It will only be present if Magisk was installed as .zip installation from custom recovery and system is r/w... addon.d is a survival script function for addon packages like GApps and Magisk to survive ROM updates... version 2 supports full OTAs run while OS is booted...
If you forget to restore that directory before taking ROM update I'm guessing Magisk may simply not be restored (survive) and you'll need to do an initial installation again...
@osm0sis may like to investigate/comment on ways this directory can be hidden now that banks are evidently detecting it...
Not that I'm aware of. PW
Hi there
I am having difficulty with these applications: SNB, Absher, and Nafad. All other apps seem to be working for me. Would you like to try them to see if they work for you?
I am using Magisk Delta, zygisk . with hidemyapplist white-listing and magiskhide
I am having difficulty with these applications: SNB, Absher, and Nafad. All other apps seem to be working for me. Would you like to try them to see if they work for you?
I am using Magisk Delta, zygisk . with hidemyapplist white-listing and magiskhide
I had a suspicion this was going to happen.
This was posted in the Delta Telegram group:
This was posted in the Delta Telegram group:
Last edited by a moderator:
Yeah, there was no update since Mar 17.
Sad if true unfortunately, but thanks for an excellent and very useful Magisk fork - actually the best one, better than the original and with better support
Hoping to see tomorrow, April 2 bringing the better news
osm0sis
Senior Recognized Developer / Contributor
It happened again.
Tan-App for german bank comdirect found a way to detect root again.
they released a new version a few days ago.
The suggestion was only to rename the Magisk script itself, so addon.d function should all still work, and renaming a specific script shouldn't have any effect on its function, so nothing to worry about there.
Concerning that user apps are digging around in /system now...
It would probably be worth reporting it as a bug to Lineage; they might be able to adjust the SELinux context or permissions of addon.d while still keeping it working.
shoey63
Recognized Contributor
shoey63
Recognized Contributor
Attachments
does AppDataIsolation make HmA obsolete? Or should I use it parallel to AppDataIsolation?
GitHub - adrianmmiller/AppDataIsolation: An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+)
An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+) - GitHub - adrianmmiller/AppDataIsolation: An attempt to block apps from accessing other apps' priv...
Does AppDataIsolation work for you?
Module is from 2021
I installed module in DeltaMagisk in an unofficial LOS19 (from retiredtab).
Device boot approxemately until unlock screen, then device reboots.
alternative module only for A10 and below, right, not for A11 and above?
It is listet in a repo in Fox's Magisk Module Mangaer
I have App Data Isolation but still need HMA
The module I use was released on Jan 21, 2023 - but the module's code seems to be (at least 4 months) older:
GitHub - adrianmmiller/AppDataIsolation: An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+)
An attempt to block apps from accessing other apps' private data on Android 11+ (API 30+) - GitHub - adrianmmiller/AppDataIsolation: An attempt to block apps from accessing other apps' priv...
github.com
Please better check on GitHub for which Android version the particular module is suitable, cannot tell you better than what their developers describe
I have only A11 and A12 hence I don't use that alternative module for A10 and earlier, and don't know anything more about that module.
Also, I don't use LOS
In Fox, click on Description and you will go to GitHub (it works for modules from the Alt Repo), there you can see provided info about the given module
Last edited:
Using Magisk Delta fixed 2 out of 3 apps for me that used to crash.
But the other one, my banking app, still detects something. When you open it, it basically opens the browser and online website instead because it detected tampering. Previously, with original Magisk, it used to append
But the other one, my banking app, still detects something. When you open it, it basically opens the browser and online website instead because it detected tampering. Previously, with original Magisk, it used to append
rasp=root to the URL. Now it appends rasp=android_hook. So that's progress I guess.
Last edited:
Yes, Delta goes on
Attachments
Similar threads
Top Liked Posts
-
There are no posts matching your filters.
-
3
It does...
...but Denylist requires Zygisk too.
FWIW, I've already tried this with my current Alpha Magisk setup which is a POC for the upcoming native bridge Zygisk loading refactoring. It seems it's not yet enough to hide Zygisk from this app, but even initial work is not yet completed
and native bridge compatible Shamiko is also brand new.
I suspect when the final function above and testing are completed and NB Zygisk hits official Magisk (expected with 27.0) Zygisk may be properly hidable finally just as NB based Riru was.
Of course Riru had integrated RiruHide, but Zygisk will always rely on third party hiding going to forward so some further compatibility tweaks for Shamiko will probably also be required for proper Zygisk hiding...
Meanwhile, someone else might be interested in trying official Magisk withfirebaseremoteconfig.googleapis.com blocked and@huskydg's p-trace based portable MagiskHide...
Please say if passing PI deviceIntegrity verdict is also needed... (I suspect it will be, but some banks don't check this.) If it is, @huskydg's (improved) forked Riru build and his Riru-based forked safetynet-fix build could also be applied to TJW Magisk...
I may try this when time permits, but real Starling users may have more motivation.
PW
Edit:
Tried this with current Alpha w/ MagiskHide instead of Denylist (Zygisk disabled), and voilà!:
... I can confirm PI deviceIntegrity is not checked as it is failing and blocking firebaseremoteconfig.googleapis.com was not required either... (12 May 2023 update.)21
FYI: Shamiko update (v0.7.1) available
https://forum.xda-developers.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-884980311
Install Su-List Auto-WhiteList module (scroll up in this thread to find about), or manually add module's apps to SuList (and reboot)1Starling bank app seems to be detecting root now regardless of Delta/Alpha,modules, or setting combos. Super frustrating. -
54This is not an officially supported topjohnwu project.
If you are looking for official Magisk source, please go to this page
Introduction
Custom Magisk fork by HuskyDG. Sync with official Magisk adding back MagiskHide.
http://huskydg.github.io/magisk-files
REPORT BUG IS STILL ACCEPTED ON XDA THREAD BUT PLEASE INCLUDE ADDITIONAL INFORMATION SUCH AS LOGCAT AND MAGISK LOG7Revive MagiskHide from Magisk v23.0
- The implementation of MagiskHide is ptrace Zygote process, every forks of Zygote will be notified and traced also.
- MagiskHide from Magisk v23.0 which monitors every thread spawn event of Zygote fork (app process is heavily a multithreads process which will spawn threads to trigger MagiskHide to check UID and cmdline)
- There is an exception that app zygote does not spawn threads and thus it won’t trigger MagiskHide to unmount Magisk and detach. (MagiskDetector and Momo take advantages of this fact to detect MagiskHide through ptrace)
- To fix this problem, we trace the syscalls prctl() instead of thread spawn event of Zygote fork like MagiskHide in Magisk v23.0
- After processes has been forked from zygote, there will be atleast prctl() is called to change the process name. For normal app process and isolated process, the process name will be changed as followed:
- zygote -> (unknown name) -> <pre-initialized> -> (process name). So the key is <pre-initialized>, after that we can guess it is target process or not.
- For app zygote, there is only once prctl() is called to change process name: zygote -> package.name_zygote.
- The changing process name happens before apk is being loaded so we can detach it from ptrace, do unmount all Magisk files and nearly there is no traces left after that.
6
Interesting analysis from @5ec1cff here:Btw, maybe I should start thinking of Livin' by Mandiri
https://github.com/5ec1cff/my-notes/blob/master/analyse-livin.md
Seems Livin / others may use smap for detection... This study discusses TJW's sanitize environment commit not working properly and LSP fixes in Shamiko as well as efforts needed to hide zygisk hooks, esp for functions of libandroid_runtime.so:
https://github.com/5ec1cff/my-notes/blob/master/new-idea-detect-zygisk.md
... I note dev refers to @canye's (Magisk Bravo) analysis of environment variables too...
This article analyses more recent Zygisk changes and Dev's attempts to hide zygisk /proc/self/attr/current exposure etc:
https://github.com/5ec1cff/my-notes/blob/master/zygisk-new-start-mode.md
... it ends with this conjecture:
"Maybe it's time to consider loading zygisk with native bridge?"
More on this and comparison w/ riru hiding / methods and plans for hiding Zygisk here:
https://github.com/5ec1cff/my-notes/blob/master/maru.md
Many of the ideas revealed in Dev's notes above are implemented in Magisk Maru fork (and adopted for now in Delta)... See top 4 commits here:
https://github.com/5ec1cff/Magisk/commits/maru
... use of complete native/src/zygisk/elf_util.cpp file from LSPosed in inject with native bridge Is interesting...
... Many other interesting notes here:
https://github.com/5ec1cff/my-notes
incl. "build-magisk-on-windows" etc...
... I've only taken a cursory glance at notes I mentioned...
Very credible Zygisk hiding efforts for a fork like Delta however... 
PW
