[Discussion] Magisk - The Age of Zygisk.

[patrickdrd]

Were you using Zygisk USNF module?; Won't be working w/ 23.0... PW

no, I didn't, it isn't available for 23 anyway I think

 

[pndwal]

no, I didn't, it isn't available for 23 anyway I think

I meant 'were you using' as in before you downgraded... Also I've added to last post... PW

 

[prokiller1199]

Getting black screen on latest v1.7.86 of this app. Suspect is new detection mechanism. Anyone can test?

Touch 'n Go eWallet - Apps on Google Play

Get rewarded with every 2 transactions!

play.google.com

Before this version is fine (v1.7.84). Pass safetynet, Shamiko, Added to deny list it just wont work on latest version.

Pixel 6 Pro Latest Nov patch, Magisk 25.2

 

[73sydney]

Getting black screen on latest v1.7.86 of this app. Suspect is new detection mechanism. Anyone can test?

Touch 'n Go eWallet - Apps on Google Play

Get rewarded with every 2 transactions!

play.google.com

Before this version is fine (v1.7.84). Pass safetynet, Shamiko, Added to deny list it just wont work on latest version.

Pixel 6 Pro Latest Nov patch, Magisk 25.2

ill have a crack, also Pixel 6 Pro, though on A13

Update:

No bueno...even with Hide My Applist

Perhaps a Magisk Delta user will test for you.....

 

[pupido]

A few years ago I installed Magisk v. 22 on my Note 9 (Android 10). Today I tried, using Magisk Manager, to update both the app and Magisk to the latest version (via direct installation).
However, while the app updated to v. 25.2, instead, Magisk updated to v. 23. Is this normal?
I thought Magisk would also update to v. 25.2 just like Magisk Manager.

 

[zgfg]

A few years ago I installed Magisk v. 22 on my Note 9 (Android 10). Today I tried, using Magisk Manager, to update both the app and Magisk to the latest version (via direct installation).
However, while the app updated to v. 25.2, instead, Magisk updated to v. 23. Is this normal?
I thought Magisk would also update to v. 25.2 just like Magisk Manager.

It's not normal but there are SO MANY differences in Magisk v25 (starting with v24) compared to your old v22 or v23) that I really suggest you:

- search on XDA for Magisk Zygisk thread and carefully read OP posts to be aware what has changed, and what would you need to configure manually from scratch , etc

- since you have happily lived so far with that ancient Magisk v22, maybe you don't need to jump to all the new things (Zygosk, DenyList instead of MagiskHide, no more Modules repository, optional Shamiko, USNF, Hide My Apps), and/or maybe you have an old version of Android that Magisk or important new modules (Shamiko, LSPosed) will not support

 

[pupido]

It's not normal but there are SO MANY differences in Magisk v25 (starting with v24) compared to your old v22 or v23) that I really suggest you:

- search on XDA for Magisk Zygisk thread and carefully read OP posts to be aware what has changed, and what would you need to configure manually from scratch , etc

- since you have happily lived so far with that ancient Magisk v22, maybe you don't need to jump to all the new things (Zygosk, DenyList instead of MagiskHide, no more Modules repository, optional Shamiko, USNF, Hide My Apps), and/or maybe you have an old version of Android that Magisk or important new modules (Shamiko, LSPosed) will not support

Thank you for your response.
I am interested in installing the Pixelify's module and I think with Magisk v. 23 it is not possible.

 

[Mr.Jlu]

Hi Guys,

I found the checks the HDFC Bank_11.1.5 app is performing for checking the root status, most of the stuff is obfuscated but we can get a glimpse of what is going around in the background.
Any suggestion to bypass this is much appreciated.

package com.backbase.android.core.security;

import android.content.Context;
import com.backbase.android.core.utils.DoNotObfuscate;
import com.backbase.p006a.C0843b;
import lxl.C6232aa;

@DoNotObfuscate
/* loaded from: classes2.dex */
public class RootVerification {
    private C0843b rootUtils;
    private boolean rooted;

    public RootVerification(Context context) {
        this.rootUtils = new C0843b(context);
    }

    public boolean isRooted() {
        return this.rooted;
    }

    public RootVerification withBinaries(String[] strArr) {
        int length = strArr.length;
        int i = 0;
        while (true) {
            if (i >= length) {
                break;
            } else if (C0843b.m10159a(strArr[i])) {
                this.rooted = true;
                break;
            } else {
                i++;
            }
        }
        return this;
    }

    public RootVerification withBusyBoxBinary() {
        this.rooted = C0843b.m10159a(C6232aa.m1119a(22896));
        return this;
    }

    public RootVerification withDangerousProps() {
        this.rooted = this.rootUtils.m10156b();
        return this;
    }

    public RootVerification withDefaultCheck() {
        C0843b c0843b = this.rootUtils;
        this.rooted = c0843b.m10157a((String[]) null) || c0843b.m10155b(null) || C0843b.m10159a(C6232aa.m1119a(22897)) || c0843b.m10156b() || c0843b.m10154c() || C0843b.m10160a() || C0843b.m10152d();
        return this;
    }

    public RootVerification withPotentiallyDangerousApps(String... strArr) {
        this.rooted = this.rootUtils.m10155b(strArr);
        return this;
    }

    public RootVerification withRootCloakingApps(String... strArr) {
        this.rooted = this.rootUtils.m10153c(strArr);
        return this;
    }

    public RootVerification withRootManagementApps(String... strArr) {
        this.rooted = this.rootUtils.m10157a(strArr);
        return this;
    }

    public RootVerification withRwSystem() {
        this.rooted = this.rootUtils.m10154c();
        return this;
    }

    public RootVerification withSuBinary() {
        this.rooted = C0843b.m10159a(C6232aa.m1119a(22898));
        return this;
    }

    public RootVerification withSuExist() {
        this.rooted = C0843b.m10152d();
        return this;
    }

    public RootVerification withTestKeys() {
        this.rooted = C0843b.m10160a();
        return this;
    }
}

Hello Guys,

[UPDATE]

I was able to bypass the root detection of this app using the following magisk module but it stopped working post reboot.

Magisk Module Name: InitRcHider
Reference URL:

[MODULE] InitRcHider

Several banking and security apps discover system modifications that Magisk injects through the init.rc file. These modifications can be successfully hidden with MomoHider (https://github.com/canyie/Riru-MomoHider), however, that module requires...

forum.xda-developers.com

XDA Download Link: https://forum.xda-developers.com/attachments/initrchider-zip.5472273/

 

[prokiller1199]

ill have a crack, also Pixel 6 Pro, though on A13

Update:

No bueno...even with Hide My Applist

Perhaps a Magisk Delta user will test for you.....

Thank you for your effort, at least I know that its not my problem

 

[Eagleman71]

FYI what to do post Android Security Update if wallet stops working (I don't know if someone else already wrote it or if it is so obvious that nobody needed to, LOL).

My Case:
Xiaomi MI 11 Ultra, Magisk 25.2 (33) installed and working. Banking apps and Wallet working.
Updates to new version with latest Android Security Patch.
Banking apps and Wallet NOT working anymore.

Just patch the new version of the boot.img, reflash and check once again the DenyList because sometimes some goolge servicer gets unflagged.
Al back to normal.

 

[anubisjack]

Thank you for your effort, at least I know that its not my problem

Fellow Malaysian here, and also before this new update, there are error code keep popping up, u notice? Like not even 1 second then it closed, maybe that was the detection mechanism but its not working yet, I installed the previous version of it for it to work temporary lol

 

[prokiller1199]

Fellow Malaysian here, and also before this new update, there are error code keep popping up, u notice? Like not even 1 second then it closed, maybe that was the detection mechanism but its not working yet, I installed the previous version of it for it to work temporary lol

Hey, u mean the stopped working dialog that appears and gone in seconds right. I solved that one by hiding all process in denylist, if not mistaken by default it only tick the first one.

 

[anubisjack]

Hey, u mean the stopped working dialog that appears and gone in seconds right. I solved that one by hiding all process in denylist, if not mistaken by default it only tick the first one.

My one still popping out even tho I alredi deny all the processes lol, even game like undecember still detected the root even I hide it also

 

[prokiller1199]

My one still popping out even tho I alredi deny all the processes lol, even game like undecember still detected the root even I hide it also

fine here

 

[anubisjack]

fine here

I only can hide it with shamiko, was on normal zygisk previously

 

[prokiller1199]

I only can hide it with shamiko, was on normal zygisk previously

I am on shamiko too, maybe they strengthen their security.

 

[pndwal]

Hello Guys,

[UPDATE]

I was able to bypass the root detection of this app using the following magisk module.

Magisk Module Name: InitRcHider
Reference URL:

[MODULE] InitRcHider

Several banking and security apps discover system modifications that Magisk injects through the init.rc file. These modifications can be successfully hidden with MomoHider (https://github.com/canyie/Riru-MomoHider), however, that module requires...

forum.xda-developers.com

XDA Download Link: https://forum.xda-developers.com/attachments/initrchider-zip.5472273/

Still haven't been able to do this on Xiaomi RN8T... Please say your device / OS... Thanks, PW

 

[ajlir]

Model: Xiaomi Mi A1 (tissot)
OS: Lineage (19-20221206-NIGHTLY-tissot)
Magisk version: 25.2
Magisk Modules:

• Advanced Charging Controller (ACC)
• Shamiko
• Systemless Hosts
• Universal SafetyNet Fix (Displax)
• Zygisk - LSPosed

LSPosed Module: Hide My Applist

Tested with Ruru and Momo (attached)

Not working with TnG ewallet (stuck at logo)

Will find resolution on Momo's findings and update here.

After reading through last 4-5 pages, I do not see anyone with my issues with Momo detection.

I'll keep looking in the meantime but can I get someone to help me on this, please?

 

[prokiller1199]

Model: Xiaomi Mi A1 (tissot)
OS: Lineage (19-20221206-NIGHTLY-tissot)
Magisk version: 25.2
Magisk Modules:

• Advanced Charging Controller (ACC)
• Shamiko
• Systemless Hosts
• Universal SafetyNet Fix (Displax)
• Zygisk - LSPosed

LSPosed Module: Hide My Applist

Tested with Ruru and Momo (attached)

Not working with TnG ewallet (stuck at logo)

Will find resolution on Momo's findings and update here.

Another TNG user here, I submitted a report to their developer team because I think it is app issues on latest version of TNG.

 

[anubisjack]

I am on shamiko too, maybe they strengthen their security.

I have just recently came across shamiko since undecember, sword art online VS, TnG being detected, previously the old magisk hide and zygisk had no problem for me