• We are moving to xdaforums.com!

    Posts made between now and when the migration is complete will not be carried over.
    You will be automatically redirected once the migration is complete.

[Discussion] Magisk Delta - Another unofficial third-party Magisk fork

Search This thread

supermansaga

Senior Member
Mar 12, 2011
340
72
Using Magisk Delta fixed 2 out of 3 apps for me that used to crash.

But the other one, my banking app, still detects something. When you open it, it basically opens the browser and online website instead because it detected tampering. Previously, with original Magisk, it used to append rasp=root to the URL. Now it appends rasp=android_hook. So that's progress I guess.
Delta won't be able to fix Marriott V10.13.1
 

Elsrougy

Member
May 19, 2017
14
2
Cairo
Hi there

I am having difficulty with these applications: SNB, Absher, and Nafad. All other apps seem to be working for me. Would you like to try them to see if they work for you?

I am using Magisk Delta, zygisk . with hidemyapplist white-listing and magiskhide
I have the same problem and have been searching everywhere for a while now but no luck.

I even made w thread on reddit for this:
https://www.reddit.com/r/Magisk/comments/11tzstn
It has some good suggestions. None of them worked for me, but you can try and check yourself maybe something will work with you. if it happens please let me know.
 
  • Like
Reactions: Aldwarii
Nov 25, 2022
5
1
Hi, everyone. I have a query.
I'm still relatively new to the world of custom ROMs, unlocked bootloaders and rooted phones so please forgive my naivety.

MemoryDetector v2.0.0 detects "Device status or bootloader has been tampered".

I see several screenshots of other people's MemoryDetector app showing "Looks Fine! Nothing is found." so I'm wondering if there's something I can do to resolve this.

Here are details of my setup:
Xiaomi Mi 8 (dipper)
LineageOS 20
Magisk Delta fdac22ba-delta (25210)
Zygisk enabled
MagiskHide enabled (with MemoryDetector in the MagiskHide list)
Universal SafetyNet Fix v2.4.0-MOD_1.2 (Displax) installed

Everything seems to be working OK (SafetyNet passes Basic Integrity and CTS Profile Match and Play Integrity API Checker confirms "MEETS_DEVICE_INTEGRITY and MEETS_BASIC_INTEGRITY).

I'm just curious how I might go about resolving the "Device status or bootloader has been tampered" message in MemoryDetector v2.0.0.
Others seems to have achieved this but I don't know how.

I'd be very grateful for any pointers anyone can give.
Thank you.

Screenshot_20230408-150940_MemoryDetector.png
 

DartGerion

Member
Dec 8, 2018
39
6
33
OnePlus 7
Samsung Galaxy Tab S6
Hello!
I had some question about the TJW Magisk and Delta. I've installed Delta with direct install (tried first with .zip, but it didn't activate) and as the result i had TJW Magisk (with spoofed name) and Delta (that updated to 25210). In TJW Magisk shows installed delta and promts to install v26 version. So as i understand now the delta has taken place of the old tjw magisk. So is it safe to uninstall the tjw magisk app, if the framework is now run by Delta?
 

zgfg

Senior Member
Oct 10, 2016
9,654
7,514
Redmi K20 / Xiaomi Mi 9T
Xiaomi Mi 11
Hello!
I had some question about the TJW Magisk and Delta. I've installed Delta with direct install (tried first with .zip, but it didn't activate) and as the result i had TJW Magisk (with spoofed name) and Delta (that updated to 25210). In TJW Magisk shows installed delta and promts to install v26 version. So as i understand now the delta has taken place of the old tjw magisk. So is it safe to uninstall the tjw magisk app, if the framework is now run by Delta?
Of course (it was also guided earlier), uninstall that old (renamed/repackaged or not) TJW Magisk app/manager and reboot. Check if Delta app then correctly shows the Magisk Delta version installed (you could reinstall Delta app then if really needed)

If Delta app asks that it needs to finish the installation and to reboot again, do that
 
  • Like
Reactions: DartGerion

DartGerion

Member
Dec 8, 2018
39
6
33
OnePlus 7
Samsung Galaxy Tab S6
Of course (it was also guided earlier), uninstall that old (renamed/repackaged or not) TJW Magisk app/manager and reboot. Check if Delta app then correctly shows the Magisk Delta version installed (you could reinstall Delta app then if really needed)

If Delta app asks that it needs to finish the installation and to reboot again, do that
Thank you for clearing this up and apologies for missing the info before. Could you also explain the SuList function in the settings?
 

zgfg

Senior Member
Oct 10, 2016
9,654
7,514
Redmi K20 / Xiaomi Mi 9T
Xiaomi Mi 11
Thank you for clearing this up and apologies for missing the info before. Could you also explain the SuList function in the settings?
MagiskHide works in blacklist mode - you have to add all 'banking' apps to the list, you want to hide root from

SuList works in the opposite whitelist mode - you only enlist the root apps, ie those that require access to the 'root'

The advantage: you don't need to add every newly installed banking app to MagiskHide list and to reboot

Scroll back and find additional posts/instructions like from a month ago

Install also SuList Auto Whitelist module - it will find all modules apps (like V4A, JamesDSP, etc) and will automatically add them to the SuList (without, they will not work properly in the SuList mode).
However, you still have to manually add eg AdAway to the SuLlst
 
Last edited:

supermansaga

Senior Member
Mar 12, 2011
340
72
MagiskHide works in blacklist mode - you have to add all 'banking' apps to the list, you want to hide root from

SuList works in the opposite whitelist mode - you only enlist the root apps, ie those that require access to the 'root'

The advantage: you don't need to add every newly installed banking app to MagiskHide list and to reboot

Scroll back and find additional posts/instructions like from a month ago

Install also SuList Auto Whitelist module - it will find all modules apps (like V4A, JamesDSP, etc) and will automatically add them to the SuList (without, they will not work properly in the SuList mode).
However, you still have to manually add eg AdAway to the SuLlst
Can SuList Auto Whitelist module handle Marriott v10.13.1 when the phone also has s ome LSposed modules installed?
 
  • Like
Reactions: naagiovanna

avisekarmani

New member
Apr 11, 2023
3
0
This is not an officially supported topjohnwu project.
If you are looking for official Magisk source, please go to this page


Introduction

Custom Magisk fork by HuskyDG. Sync with official Magisk adding back MagiskHide.
http://huskydg.github.io/magisk-files

REPORT BUG IS STILL ACCEPTED ON XDA THREAD BUT PLEASE INCLUDE ADDITIONAL INFORMATION SUCH AS LOGCAT AND MAGISK LOG
Hi @huskydg , the new updated magisk delta have some issues. The MagiskHide Props module is not working in new update.
I am attaching the log. Please review it and solve this issue. For this kind I always be thankful to you.
 

Attachments

  • propslogs.tar.gz
    733.3 KB · Views: 7

zgfg

Senior Member
Oct 10, 2016
9,654
7,514
Redmi K20 / Xiaomi Mi 9T
Xiaomi Mi 11
Hi @huskydg , the new updated magisk delta have some issues. The MagiskHide Props module is not working in new update.
I am attaching the log. Please review it and solve this issue. For this kind I always be thankful to you
Btw, are you sure it was really a problem on the MHCP side - the original MHCP module is no more maintained for a year or more (and I really don't know how is about the fork from the new developer - at least, there are not much news on his XDA thread)

Also, do you really need MHCP. Husky made like Sensitive Props module - ok, that's not for general purposes but for hiding the root
 

avisekarmani

New member
Apr 11, 2023
3
0
Btw, are you sure it was really a problem on the MHCP side - the original MHCP module is no more maintained for a year or more (and I really don't know how is about the fork from the new developer - at least, there are not much news on his XDA thread)

Also, do you really need MHCP. Husky made like Sensitive Props module - ok, that's not for general purposes but for hiding the root
Hello @zgfg , first of all thanks for your reply. Magiskhide Props Config module is working smoothly. I was using it in magisk delta some days ago. But when I updated my magisk delta into the latest version, it started showing error. Also, it is working smoothly in official magisk latest version. And I uses it for changing my device fingerprint and there is no any alternative of this module available. So I need this module.
I am attaching the image of error showing by the module in terminal and log of this module.
 

Attachments

  • IMG_20230412_021208_989.jpg
    IMG_20230412_021208_989.jpg
    91.7 KB · Views: 46
  • propslogs.tar.gz
    637.4 KB · Views: 7

zgfg

Senior Member
Oct 10, 2016
9,654
7,514
Redmi K20 / Xiaomi Mi 9T
Xiaomi Mi 11
Hello @zgfg , first of all thanks for your reply. Magiskhide Props Config module is working smoothly. I was using it in magisk delta some days ago. But when I updated my magisk delta into the latest version, it started showing error. Also, it is working smoothly in official magisk latest version. And I uses it for changing my device fingerprint and there is no any alternative of this module available. So I need this module.
I am attaching the image of error showing by the module in terminal and log of this module.
Screenshot says "Please reboot your device .." - did you try (and is the module enabled)?
 

zgfg

Senior Member
Oct 10, 2016
9,654
7,514
Redmi K20 / Xiaomi Mi 9T
Xiaomi Mi 11
I tried all the things but nothing happened.
Strange. I just installed MHPC v6.1.2 and it runs for me

However, I'm on the last but one v25210 Delta, 80d8cbf0 (I did not want to upgrade to fdac22ba "Temp fix 1/?" ?!)

Screenshots attached
 

Attachments

  • Screenshot_2023-04-12-07-50-09-435_io.github.huskydg.magisk-edit.jpg
    Screenshot_2023-04-12-07-50-09-435_io.github.huskydg.magisk-edit.jpg
    211.4 KB · Views: 47
  • Screenshot_2023-04-12-07-56-02-177_io.github.huskydg.magisk.jpg
    Screenshot_2023-04-12-07-56-02-177_io.github.huskydg.magisk.jpg
    580.4 KB · Views: 51
  • Screenshot_2023-04-12-07-49-12-927_com.offsec.nhterm.jpg
    Screenshot_2023-04-12-07-49-12-927_com.offsec.nhterm.jpg
    494.4 KB · Views: 46
  • Screenshot_2023-04-12-08-10-58-839_io.github.huskydg.magisk-edit.jpg
    Screenshot_2023-04-12-08-10-58-839_io.github.huskydg.magisk-edit.jpg
    190.7 KB · Views: 51

martyfender

Senior Member
Mar 9, 2017
3,385
1,860
Indianapolis, IN
Strange. I just installed MHPC v6.1.2 and it runs for me

However, I'm on the last but one v25210 Delta, 80d8cbf0 (I did not want to upgrade to fdac22ba "Temp fix 1/?" ?!)

Screenshots attached
I reverted to an older version my self. I had major problems with fdac22ba. No matter what I did, it would not pass the playstore integrity checker, Playstore certification and CTS Profile in Safety Net. I even went as far as reinstalling the Rom. That was on the older of my 2 Onn 8 1st gen, Android 9 tablets.
 

m0han

Senior Member
Apr 30, 2012
5,797
2,890
OnePlus 11

Attachments

  • Screenshot_20230412-183347_Magisk Delta.png
    Screenshot_20230412-183347_Magisk Delta.png
    181.8 KB · Views: 44
  • Screenshot_20230412-183423_TB Checker.png
    Screenshot_20230412-183423_TB Checker.png
    197.3 KB · Views: 45

Top Liked Posts

  • 5
    For all Malaysian users here, I did a quick test. Basically, uninstalled magisk, then install step by step and test the banking apps as below. Hope this will benefit and give some ideas to new users here.

    I am using magisk delta version 0fe46c5a. As of now, I think RHB is the most sensitive as I think it is detecting play integrity or HMA or Shamiko because even disabling them, RHB still does not work, probably needs uninstall. However, the workaround shared by me earlier is to create another partition(called second space in MIUI) and install RHB there, it will work even with sequence 6 below.

    1696416927356.png
    2
    I was using Riru LSPosed. I ditched Zygisk after switching to MD as Shamiko wasn't able to hide it from many apps.
    P.S. Kernel SU isn't available for your device assuming it is the Poco F2 Pro?
    Edit: I had to restore a TWRP backup from August so MD is no longer on the latest Canary and MagiskHide instead of Unmount Modules but I don't think it makes any difference. BTW uninstall HMA and check. Also any modules to hide Dev. Options if any.
    Applist detector shows that you don't have HMA properly configured. You have to hide your Magisk App and your Lsposed modules from the banking apps (and from Applist detector). Put them in a Blacklist template and apply it to all of them. That way everything is hidden.

    To hide Dev Options there is a Lsposed module called IAmNotADeveloper.
    1
    Disabling HMA won't help?Must be uninstalled?
    In my case only uninstalling it helped.
    1
    For all Malaysian users here, I did a quick test. Basically, uninstalled magisk, then install step by step and test the banking apps as below. Hope this will benefit and give some ideas to new users here.

    View attachment 6017365
    Congratulations! So, shamiko was the key if you wanted to use zygisk or lsposed. Nice work.
    1
    Really nice work! Just want a confirmation, for each configurations, the devices was restarted, right?

    Sorry, I know this thread for delta users, but if you're free & don't mind, can you please test with alpha? If can't, no pressure.
    Yes, device was restarted to ensure the activated modules/configuration are refreshed.
  • 5
    For all Malaysian users here, I did a quick test. Basically, uninstalled magisk, then install step by step and test the banking apps as below. Hope this will benefit and give some ideas to new users here.

    I am using magisk delta version 0fe46c5a. As of now, I think RHB is the most sensitive as I think it is detecting play integrity or HMA or Shamiko because even disabling them, RHB still does not work, probably needs uninstall. However, the workaround shared by me earlier is to create another partition(called second space in MIUI) and install RHB there, it will work even with sequence 6 below.

    1696416927356.png
    3
    The last update of iMobile is a real PITA. I remember when the app used to run just fine with just Magisk Hide, and then when Magisk Hide was deprecated, with Shamiko. Then came an update which started detecting apps too, but HMA took care of it. Then came another update which started detecting if Developer Options were enabled, again IAmNotADeveloper module fixed that. And now came this update, which is detecting God knows what.

    For the latest update, I tried uninstalled the LSPosed Manager app (was not using the Parasitic Manager since HMA was hiding it fine), disabled the module in Magisk and rebooted but the app still detected root. Suggestions? Only thing I haven't tried is completely uninstalling the module from Magisk, but I'm willing to give that a shot too when I have more time.

    I'll probably explore KernelSU (again, when I have some more time) and see if that helps, but I'll only switch to it if all my other modules, etc. work fine with it. Plus I'll also check if it works with Island, just in case.

    On a separate note, @pndwal any chance you can test the app (link to PlayStore) with NB Zygisk? Maybe it works with that, just wondering.
    Probably detecting Zygisk then...

    Hidable with LSPosed Metagisk Magisk WIP native bridge loaded Zygisk built in Alpha fork + latest Shamiko, Alpha Magisk hidden in stub ('Hide the Magisk app') and added in HMA XPosed module (w/ LSPosed) along with HMA itself and all other XPosed modules and all root apps and any associated with modding in any way:
    IMG_20230927_221658.jpg

    Nb. NB-Z may still not be fully baked but seems conflicts are now resolved... Devs hoped it would be ready for official Magisk 27.0... This PR:
    Refactor zygisk to use native bridge to inject

    So you can wait for official or try it in bleeding edge Alpha if you can't wait (warts and all)...

    Nb.2. I have Developer options, OEM unlocking and USB debugging disabled as well as Parasitic LSPosed manager openable via status notification (no shortcut) and haven't attempted otherwise...

    Nb. I always have Magisk hidden in stub and on hiding apps from banks in HMA (needed for this and app below) I include Magisk (hidden) stub app in hide templates too... Did this since observing that either obfuscating Magisk in stub or hiding full App via HMA wasn't enough for Sparkasse pushTAN German bank; Both methods were needed in tandey to circumvent their Promon security engine's dex pattern matching as well as simple package detection...So I haven't tried with full App and HMA...

    Hi,
    I'm using Lineage os 20 (A13) on oneplus9r, with Magisk delta.
    Few days back, my banking apps got updated, and they started detecting root.
    I updated the magisk delta to 26301, tried magisk also.
    Safetynet is passing with basic evaluation.
    But in Play integrity, all three are failing.

    Feeling clueless.

    Need help.

    iMobile Pay-Banking,Cards,Loan - Apps on Google Play

    Instant Loan, UPI, Fastag, Bill Payments & more for both ICICI & Non-ICICI users
    play.google.com

    Kotak Mobile Banking App - Apps on Google Play

    Kotak Mahindra Bank’s official mobile banking application for Android phones.
    play.google.com
    Click to collapse
    They are working in my case. Only the HDFC e Rupee app isn't working in the Mainland but at least it's working in Island. Strong Integrity fails of course but the other two pass.
    For Kotak to work I had to freeze the Magisk app. In case of iMobile I had to uninstall LSPosed. Even with HMA it was no good.
    P.S. Kernel SU is available for the OP9r. Use it instead. Every app works just fine as of now.
    Edit: Interestingly in case of the HDFC e Rupee app if I don't freeze the Magisk app it reports that Magisk rooting detected but after freezing it displays Rooting detected. When the Magisk app isn't hidden the message displayed is SU binary detected.
    So I've tested both iMobile Pay and Kotak Mobile Banking App on my Xiaomi Redmi Note 8T, stock MIUI, Android 11, configured as above... Kotak Mobile Banking App also works with the same setup:
    IMG_20230927_195448.jpg

    ... No need to freeze the Magisk App here...

    Hope it helps everyone... 🙂 PW
    2
    Magisk Delta has been updated to Magisk v26.3.
    They say the known bug from previous build should be fixed
    https://github.com/HuskyDG/magisk-files/releases/tag/24b5daf6-delta

    Things seem fine for me on my earlier device. Riru mode; not Zygisk. (All testing apps behave as before.)
    2
    Rebooting doesn't help, still magisk is not detected... During the troubleshooting for hiding magisk app, i also deleted my second space as I thought it was causing issue but now I don't dare to move further as I can't even install magisk by flashing using fastboot now. Hope some experts here can give me some pointers...Should have unhide before attempting to update....
    I see on TG channel that many have reported same/similar problem for the latest 8775765-Delta and they returned to the previous Delta version
    2
    Just sharing my current set up with new rom PixelOS on Pixel 7
    - magisk delta 26.3
    - zygisk enabled
    - youtube/music revanced/pixelify submodules
    - Unmount options ticked on both
    - Under mount list, only configured app that requires root such as Swift Backup
    - safetynet passed basic by default (PixelOS)

    TnG, MAE work
    HLB work (only version 1.1.51, newer like 52 will not work for now)
    Google Wallet works too for my CIMB CC
  • 66
    This is not an officially supported topjohnwu project.
    If you are looking for official Magisk source, please go to this page


    Introduction

    Custom Magisk fork by HuskyDG. Sync with official Magisk adding back MagiskHide.
    http://huskydg.github.io/magisk-files

    REPORT BUG IS STILL ACCEPTED ON XDA THREAD BUT PLEASE INCLUDE ADDITIONAL INFORMATION SUCH AS LOGCAT AND MAGISK LOG
    8
    Ptrace MagiskHide ported as Magisk module which allows user to hide without enabling Zygisk on Official Magisk v24.0+

    7
    Revive MagiskHide from Magisk v23.0
    • The implementation of MagiskHide is ptrace Zygote process, every forks of Zygote will be notified and traced also.
    • MagiskHide from Magisk v23.0 which monitors every thread spawn event of Zygote fork (app process is heavily a multithreads process which will spawn threads to trigger MagiskHide to check UID and cmdline)
    • There is an exception that app zygote does not spawn threads and thus it won’t trigger MagiskHide to unmount Magisk and detach. (MagiskDetector and Momo take advantages of this fact to detect MagiskHide through ptrace)
    • To fix this problem, we trace the syscalls prctl() instead of thread spawn event of Zygote fork like MagiskHide in Magisk v23.0
    • After processes has been forked from zygote, there will be atleast prctl() is called to change the process name. For normal app process and isolated process, the process name will be changed as followed:
      • zygote -> (unknown name) -> <pre-initialized> -> (process name). So the key is <pre-initialized>, after that we can guess it is target process or not.
    • For app zygote, there is only once prctl() is called to change process name: zygote -> package.name_zygote.
    • The changing process name happens before apk is being loaded so we can detach it from ptrace, do unmount all Magisk files and nearly there is no traces left after that.
    6
    And now Bingo, with today's Magisk-017cca27-delta(25205), Momo does no more detect Zygisk

    - Zygisk and MagiskHide enabled, Shamiko disabled
    👍
    Btw, maybe I should start thinking of Livin' by Mandiri 😁
    Interesting analysis from @5ec1cff here:
    https://github.com/5ec1cff/my-notes/blob/master/analyse-livin.md

    Seems Livin / others may use smap for detection... This study discusses TJW's sanitize environment commit not working properly and LSP fixes in Shamiko as well as efforts needed to hide zygisk hooks, esp for functions of libandroid_runtime.so:
    https://github.com/5ec1cff/my-notes/blob/master/new-idea-detect-zygisk.md
    ... I note dev refers to @canye's (Magisk Bravo) analysis of environment variables too...

    This article analyses more recent Zygisk changes and Dev's attempts to hide zygisk /proc/self/attr/current exposure etc:
    https://github.com/5ec1cff/my-notes/blob/master/zygisk-new-start-mode.md
    ... it ends with this conjecture:
    "Maybe it's time to consider loading zygisk with native bridge?"
    More on this and comparison w/ riru hiding / methods and plans for hiding Zygisk here:
    https://github.com/5ec1cff/my-notes/blob/master/maru.md

    Many of the ideas revealed in Dev's notes above are implemented in Magisk Maru fork (and adopted for now in Delta)... See top 4 commits here:
    https://github.com/5ec1cff/Magisk/commits/maru
    ... use of complete native/src/zygisk/elf_util.cpp file from LSPosed in inject with native bridge Is interesting...

    ... Many other interesting notes here:
    https://github.com/5ec1cff/my-notes
    incl. "build-magisk-on-windows" etc...

    ... I've only taken a cursory glance at notes I mentioned...

    Very credible Zygisk hiding efforts for a fork like Delta however... 👍 👀 PW