[Discussion] Magisk Delta - Another unofficial third-party Magisk fork

Search This thread

zgfg

Senior Member
But it's gone after I restart my phone tho
There is a Pixel Flasher thread - it's a great tool, helping Pixel users to install Magisk, etc

Plus, there are Pixel experts there who will better know about the issues specific to Pixel models and their updates - suggesting to ask there (recently, somebody asked in one of the Magisk threads here and eventually hard-bricked his phone based on the 'normal' answers he got)
 

uschipower

Senior Member
Mar 14, 2009
88
4
...App Data Isolation
which magisk module do you use for this?

Change the filename of /system/addon.d/99-magisk.sh to anything that doesn't contain magisk. Reboot and it will work
you are my hero - you found the new detection method
Is this script not neccessary for something to work?

is there a magisk/zygote module like HideMyApps which is doing the same for folders and files? so you could configure which folders/files are not visible for selected apps.
 

zgfg

Senior Member
  • Like
Reactions: onimorza

pndwal

Senior Member
you are my hero - you found the new detection method
Is this script not neccessary for something to work?
It will only be present if Magisk was installed as .zip installation from custom recovery and system is r/w... addon.d is a survival script function for addon packages like GApps and Magisk to survive ROM updates... version 2 supports full OTAs run while OS is booted...

If you forget to restore that directory before taking ROM update I'm guessing Magisk may simply not be restored (survive) and you'll need to do an initial installation again...

@osm0sis may like to investigate/comment on ways this directory can be hidden now that banks are evidently detecting it...
is there a magisk/zygote module like HideMyApps which is doing the same for folders and files? so you could configure which folders/files are not visible for selected apps.
Not that I'm aware of. PW
 
  • Wow
Reactions: osm0sis

Aldwarii

Member
Aug 20, 2019
25
4
Hi there

I am having difficulty with these applications: SNB, Absher, and Nafad. All other apps seem to be working for me. Would you like to try them to see if they work for you?

I am using Magisk Delta, zygisk . with hidemyapplist white-listing and magiskhide
 

martyfender

Senior Member
Mar 9, 2017
3,382
1,858
Indianapolis, IN
I had a suspicion this was going to happen.
This was posted in the Delta Telegram group:
I have to say with regret that Magisk Delta is dead... There will no more updates. Thank all for using Magisk Delta along with those days, we have many memories that should never be faded. I will miss you
 
Last edited by a moderator:

zgfg

Senior Member
I had a suspicion this was going to happen.
This was posted in the Delta Telegram group:
Yeah, there was no update since Mar 17.
Sad if true unfortunately, but thanks for an excellent and very useful Magisk fork - actually the best one, better than the original and with better support

Hoping to see tomorrow, April 2 bringing the better news
 

osm0sis

Senior Recognized Developer / Contributor
Mar 14, 2012
15,428
34,960
Halifax
GT-i9250
Google Nexus 4
It happened again.
Tan-App for german bank comdirect found a way to detect root again.
they released a new version a few days ago.
Change the filename of /system/addon.d/99-magisk.sh to anything that doesn't contain magisk. Reboot and it will work
It will only be present if Magisk was installed as .zip installation from custom recovery and system is r/w... addon.d is a survival script function for addon packages like GApps and Magisk to survive ROM updates... version 2 supports full OTAs run while OS is booted...

If you forget to restore that directory before taking ROM update I'm guessing Magisk may simply not be restored (survive) and you'll need to do an initial installation again...

@osm0sis may like to investigate/comment on ways this directory can be hidden now that banks are evidently detecting it...

The suggestion was only to rename the Magisk script itself, so addon.d function should all still work, and renaming a specific script shouldn't have any effect on its function, so nothing to worry about there. 👍

Concerning that user apps are digging around in /system now...

It would probably be worth reporting it as a bug to Lineage; they might be able to adjust the SELinux context or permissions of addon.d while still keeping it working.
 
  • Love
Reactions: pndwal

zgfg

Senior Member

Attachments

  • IMG_20230401_192837.jpg
    IMG_20230401_192837.jpg
    522.5 KB · Views: 97

uschipower

Senior Member
Mar 14, 2009
88
4
does AppDataIsolation make HmA obsolete? Or should I use it parallel to AppDataIsolation?

Does AppDataIsolation work for you?
Module is from 2021
I installed module in DeltaMagisk in an unofficial LOS19 (from retiredtab).
Device boot approxemately until unlock screen, then device reboots.
...for the alternative module, for A10 and older Android versions (if needed)
alternative module only for A10 and below, right, not for A11 and above?
It is listet in a repo in Fox's Magisk Module Mangaer
 

zgfg

Senior Member
does AppDataIsolation make HmA obsolete? Or should I use it parallel to AppDataIsolation?

Does AppDataIsolation work for you?
Module is from 2021
I installed module in DeltaMagisk in an unofficial LOS19 (from retiredtab).
Device boot approxemately until unlock screen, then device reboots.

alternative module only for A10 and below, right, not for A11 and above?
It is listet in a repo in Fox's Magisk Module Mangaer
I have App Data Isolation but still need HMA

The module I use was released on Jan 21, 2023 - but the module's code seems to be (at least 4 months) older:

Please better check on GitHub for which Android version the particular module is suitable, cannot tell you better than what their developers describe

I have only A11 and A12 hence I don't use that alternative module for A10 and earlier, and don't know anything more about that module.
Also, I don't use LOS

In Fox, click on Description and you will go to GitHub (it works for modules from the Alt Repo), there you can see provided info about the given module
 
Last edited:

ToXiTe

Senior Member
Jan 17, 2015
311
224
Using Magisk Delta fixed 2 out of 3 apps for me that used to crash.

But the other one, my banking app, still detects something. When you open it, it basically opens the browser and online website instead because it detected tampering. Previously, with original Magisk, it used to append rasp=root to the URL. Now it appends rasp=android_hook. So that's progress I guess.
 
Last edited:

m0han

Senior Member
Apr 30, 2012
5,557
2,666
All 'as before' - on Magisk-80d8cbf0-delta(25210).
 

Attachments

  • Screenshot_20230403-003526_Magisk Delta.png
    Screenshot_20230403-003526_Magisk Delta.png
    153.1 KB · Views: 88
  • Screenshot_20230403-004010_MemoryDetector.png
    Screenshot_20230403-004010_MemoryDetector.png
    67.9 KB · Views: 89
  • Screenshot_20230403-004207_TB Checker.png
    Screenshot_20230403-004207_TB Checker.png
    188.1 KB · Views: 87

ToXiTe

Senior Member
Jan 17, 2015
311
224
MemoryDetector says "Selinux has been modified by Magisk". What could be the cause?
 

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    If official magisk lets you disable zygisk,
    It does...
    then yes. You literally just make sure you are hiding root from starling (on official magisk you can do this with denylist i think, but shamiko won't work without zygisk so be sure to enable magisk's own denylist toggle,
    ...but Denylist requires Zygisk too.
    on delta it's "MagiskHide") and reboot with zygisk disabled. Log into starling then when you're in, reboot with zygisk enabled again. When starling gets to one day left on their timer, redo the process.
    I did have the Firebase url blocked in adaway, unsure if that's strictly required now but it's probably doing no harm to have it blocked.
    👍

    FWIW, I've already tried this with my current Alpha Magisk setup which is a POC for the upcoming native bridge Zygisk loading refactoring. It seems it's not yet enough to hide Zygisk from this app, but even initial work is not yet completed
    IMG_20230521_122937.jpg

    and native bridge compatible Shamiko is also brand new.

    I suspect when the final function above and testing are completed and NB Zygisk hits official Magisk (expected with 27.0) Zygisk may be properly hidable finally just as NB based Riru was.

    Of course Riru had integrated RiruHide, but Zygisk will always rely on third party hiding going to forward so some further compatibility tweaks for Shamiko will probably also be required for proper Zygisk hiding...

    Meanwhile, someone else might be interested in trying official Magisk with firebaseremoteconfig.googleapis.com blocked and @huskydg's p-trace based portable MagiskHide...

    Please say if passing PI deviceIntegrity verdict is also needed... (I suspect it will be, but some banks don't check this.) If it is, @huskydg's (improved) forked Riru build and his Riru-based forked safetynet-fix build could also be applied to TJW Magisk...

    I may try this when time permits, but real Starling users may have more motivation.

    👍 PW

    Edit:

    Tried this with current Alpha w/ MagiskHide instead of Denylist (Zygisk disabled), and voilà!:
    IMG_20230521_133635~2.jpg

    ... I can confirm PI deviceIntegrity is not checked as it is failing and blocking firebaseremoteconfig.googleapis.com was not required either... (12 May 2023 update.)
    1
    The work he does is always great, but we should not expect ETA's from him. Just let him take all the time he needs to resolve his personal business.
    1
    Hi, anybody got citi app to work with delta? Citibank version 14.3 is detecting root on the latest canary delta.
    I don't have a citibank account but a week or two ago I installed it in Magisk Delta and it works on my setup. I recently switched back from Delta with Zygisk to MagiskHide with riru modules.
    The Magisk app is hidden in settings
    Zygisk turned off in settings
    MagiskHide turned on in settings
    Under Configure MagiskHide I added apps I want to hide. In addition I for some reason have to add Google Play Services: com.google.android.gms and com.google.android.gms.ustable, as if the USF does not work as it should. (Does anyone know why?)

    The modules I have are:
    Riru v26.1.7 r530
    Riru Unshare v2.1
    Riru Momohider v0.0.13
    Riru LSPosed v1.8.6 (6886)
    Riru Universal SafetyNet Fix v2.4.0
    Hide My Applist v3.1.1-404

    I created a root template with all XPosed modules, The renamed hidden Magisk app and Hi My Applist added.

    Under App manage I have added all banking apps such as citibank, and all root detection apps only.

    I used this excellent guide:

    https://github.com/adrianmmiller/Hide-My-Applist-Guide

    I have no problem getting to the user login screen in citibank. I can go no further without an account.

    Overall, apps seem to be better hidden with this setup.

    I'm, however, not certain if the Module, Momohider, helps here considering I am using riru unshare.
    1
    .... I have shamiko and I am in magisk 26.1.... direct go detects .... how to fix it
    FYI: Shamiko update (v0.7.1) available

    https://forum.xda-developers.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-88498031
    1
    Hello, what are the differences between Magisk and Magisk Delta? Thank you have a nice day.
    Several. With Delta you can use the old (used to be better for hiding) MagiskHide instead of DenyList. And optionally in SuList (that is, whitelist mode). Etc (some don't enable Zygisk and use Riru modules instead - again, for hiding). Please take time and read through the discussion in this thread
  • 53
    This is not an officially supported topjohnwu project.
    If you are looking for official Magisk source, please go to this page


    Introduction

    Custom Magisk fork by HuskyDG. Sync with official Magisk adding back MagiskHide.
    http://huskydg.github.io/magisk-files

    REPORT BUG IS STILL ACCEPTED ON XDA THREAD BUT PLEASE INCLUDE ADDITIONAL INFORMATION SUCH AS LOGCAT AND MAGISK LOG
    7
    Revive MagiskHide from Magisk v23.0
    • The implementation of MagiskHide is ptrace Zygote process, every forks of Zygote will be notified and traced also.
    • MagiskHide from Magisk v23.0 which monitors every thread spawn event of Zygote fork (app process is heavily a multithreads process which will spawn threads to trigger MagiskHide to check UID and cmdline)
    • There is an exception that app zygote does not spawn threads and thus it won’t trigger MagiskHide to unmount Magisk and detach. (MagiskDetector and Momo take advantages of this fact to detect MagiskHide through ptrace)
    • To fix this problem, we trace the syscalls prctl() instead of thread spawn event of Zygote fork like MagiskHide in Magisk v23.0
    • After processes has been forked from zygote, there will be atleast prctl() is called to change the process name. For normal app process and isolated process, the process name will be changed as followed:
      • zygote -> (unknown name) -> <pre-initialized> -> (process name). So the key is <pre-initialized>, after that we can guess it is target process or not.
    • For app zygote, there is only once prctl() is called to change process name: zygote -> package.name_zygote.
    • The changing process name happens before apk is being loaded so we can detach it from ptrace, do unmount all Magisk files and nearly there is no traces left after that.
    6
    Thread re-opened
    6
    And now Bingo, with today's Magisk-017cca27-delta(25205), Momo does no more detect Zygisk

    - Zygisk and MagiskHide enabled, Shamiko disabled
    👍
    Btw, maybe I should start thinking of Livin' by Mandiri 😁
    Interesting analysis from @5ec1cff here:
    https://github.com/5ec1cff/my-notes/blob/master/analyse-livin.md

    Seems Livin / others may use smap for detection... This study discusses TJW's sanitize environment commit not working properly and LSP fixes in Shamiko as well as efforts needed to hide zygisk hooks, esp for functions of libandroid_runtime.so:
    https://github.com/5ec1cff/my-notes/blob/master/new-idea-detect-zygisk.md
    ... I note dev refers to @canye's (Magisk Bravo) analysis of environment variables too...

    This article analyses more recent Zygisk changes and Dev's attempts to hide zygisk /proc/self/attr/current exposure etc:
    https://github.com/5ec1cff/my-notes/blob/master/zygisk-new-start-mode.md
    ... it ends with this conjecture:
    "Maybe it's time to consider loading zygisk with native bridge?"
    More on this and comparison w/ riru hiding / methods and plans for hiding Zygisk here:
    https://github.com/5ec1cff/my-notes/blob/master/maru.md

    Many of the ideas revealed in Dev's notes above are implemented in Magisk Maru fork (and adopted for now in Delta)... See top 4 commits here:
    https://github.com/5ec1cff/Magisk/commits/maru
    ... use of complete native/src/zygisk/elf_util.cpp file from LSPosed in inject with native bridge Is interesting...

    ... Many other interesting notes here:
    https://github.com/5ec1cff/my-notes
    incl. "build-magisk-on-windows" etc...

    ... I've only taken a cursory glance at notes I mentioned...

    Very credible Zygisk hiding efforts for a fork like Delta however... 👍 👀 PW