[Discussion] Magisk - The Age of Zygisk.

[gallegonovato]

Good afternoon:

First of all I apologize for taking time to respond, but I was busy.

I put without problems the connection in Adaway's allowed. And Magisk seems to be working fine.

I'm still looking for the source that blocks it. But now that connection is in allowed

Best regards and thanks for your help and time

 

[Reator]

... Bit more Native Bridge Zygisk testing...

Santander:
View attachment 5898353


Singpass:
View attachment 5898373
Nb. Root detected (before adding to denylist w/ Shamiko) locked me out completely... After adding user can use app but gets this warning due to 'compromising' app(s) being detected:
View attachment 5898379
After configuring Hide My Applist LSPosed module for this app there are no more detections at all.


We Connect (VW)
View attachment 5898371


C6 Yellow:
View attachment 5898355
Digio:
View attachment 5898361


Revolut:
View attachment 5898435
(Denylist enforcement disabled )


Citibank SG:
View attachment 5899325
Nb. Needed Hide My Applist configured in whitelist mode (system apps excepted) for this app... My blacklist wasn't sufficient...


BNA+:
View attachment 5899343
... I didn't need Hide My Applist at all for this one...

--------
​

... Please see my post above regarding this POC for official Magisk 27.0+...

PW

Can you help me with CItiBank TH?

Citibank TH - Apps on Google Play

An easy way to view your account, make payment and find privileges from Citibank

play.google.com

I have Magisk 26100
HMA
MagiskHide (Module)
Shamiko
USNF

but this bank still detected.

 

[pndwal]

Can you help me with CItiBank TH?

Citibank TH - Apps on Google Play

An easy way to view your account, make payment and find privileges from Citibank

play.google.com

I have Magisk 26100
HMA
MagiskHide (Module)
Shamiko
USNF

but this bank still detected.

Did you read the comment at end of my post? PW

 

[Reator]

Did you read the comment at end of my post? PW

I'm sorry, which one?

Or the Citi SG one? Cause I already try CitiSG (HMA in whitelist mode) but it still detected.

 

[pndwal]

I'm sorry, which one?View attachment 5900735

Or the Citi SG one? Cause I already try CitiSG (HMA in whitelist mode) but it still detected.

The last one... The 'post above' explains it's a proof-of-concept for Magisk 27.0+ in Alpha Magisk fork... Clearly you'd need that to try it, but better for most users to wait till refactoring project is complete and released in 27.0... PW

 

[Darkmasterhk]

Turning zygisk on causes my phone to stuck at the boot animation (Asus Zenfone 9), anyone an idea what to do? Magisk 26.1

 

[zgfg]

Turning zygisk on causes my phone to stuck at the boot animation (Asus Zenfone 9), anyone an idea what to do? Magisk 26.1

Do you have some modules installed and which ones?

Particularly, you should not have Riru modules - Zygisk and Riru are not compatible

Disable all modules and try again

 

[Darkmasterhk]

Do you have some modules installed and which ones?

Particularly, you should not have Ruru modules - Zygisk and Ruru are not compatible

Disable all modules and try again

Thanks, no I don't have any modules installed. I started from a clean flash, not even all my apps are installed.
Also it worked a few month ago, with an older version. Because it's a fresh install I even cleared data a couple of times, switched kernel, but still the same result. :/

A few month ago I switched from stock rom to a custom one and returned to stock yesterday. Now it doesn't work anymore.
If I remember right, version 26 brought some bigger changes, could it be related to them?

 

[jons99]

Thanks, no I don't have any modules installed. I started from a clean flash, not even all my apps are installed.
Also it worked a few month ago, with an older version. Because it's a fresh install I even cleared data a couple of times, switched kernel, but still the same result. :/

A few month ago I switched from stock rom to a custom one and returned to stock yesterday. Now it doesn't work anymore.
If I remember right, version 26 brought some bigger changes, could it be related to them?

works fine on my zf9 I'll tell you what you can do first flash magisk 25.2 in twrp then turn on zygisk reboot once and then update with direct install

 

[pndwal]

Thanks, no I don't have any modules installed. I started from a clean flash, not even all my apps are installed.
Also it worked a few month ago, with an older version. Because it's a fresh install I even cleared data a couple of times, switched kernel, but still the same result. :/

A few month ago I switched from stock rom to a custom one and returned to stock yesterday. Now it doesn't work anymore.
If I remember right, version 26 brought some bigger changes, could it be related to them?

When returning to stock I assume you clean installed (factory reset / data wipe)... Also, did you flash recovery or fastboot type ROM? ... And did you extract and patch boot image from current ROM? PW

 

[Darkmasterhk]

works fine on my zf9 I'll tell you what you can do first flash magisk 25.2 in twrp then turn on zygisk reboot once and then update with direct install

Hm maybe I try this, just finished setting up everything, afraid of having to wipe again

When returning to stock I assume you clean installed (factory reset / data wipe)... Also, did you flash recovery or fastboot type ROM? ... And did you extract and patch boot image from current ROM? PW

As mentioned, I wiped data / factory reset more than once by now.
It's a recovery type.
Yes, did patch it, else magisk shouldn't work at all anyway. Also tried using a custom kernel no difference. :/

 

[pndwal]

As mentioned, I wiped data / factory reset more than once by now.
It's a recovery type.

Fastboot is a more complete ROM generally... When something is messed up by custom rom, Fastboot is sometimes needed to restore all partitions...

Yes, did patch it, else magisk shouldn't work at all anyway. Also tried using a custom kernel no difference. :/

I meant are you sure it's boot.img from current ROM; eg if you took an OTA update you'd need to download new full ROM to get boot.img (or use TWRP backup dump of new boot.img)... PW

 

[m0han]

.... you should not have Ruru modules - Zygisk and Ruru are not compatible...

Riru modules. Ruru is 'that app'. (Pretty sure it was a typo.)

 

[zgfg]

Riru modules. Ruru is 'that app'. (Pretty sure it was a typo.)

Yes, and it's actually due to the stupid spelling checker - corrected now

 

[mmbaknnba]

Hello, greetings.
Pardon any mistakes in my English.

I'm using Nord AC2003 (Global), OOS12, build F.18. Just want to share my Magisk's setup for apps detection:

1- Started with the latest official Magisk (26.1).
2- Zygisk + Enforce DenyList enabled.
3- Changed to Magisk Alpha (26101).
4- Randomized the Magisk Alpha app's name.

P/s: Use the Alpha at your own risk. Already tested the Magisk Delta, have some issues with my modules, specifically with font module, besides I'm not really a fan of the GUI. Official Magisk's GUI is better for me.

1. Tested with Applist Detector, Momo, SafetyNet Test & TB Checker.
2. My modules: Busybox, Kill GMS Font, Product Sans A12, Systemless Hosts, Systemless Host - Unified, Official USNF & VoEnabler.
3. I'm from Malaysia. So basically my daily apps with pay function are Hotlink, Celcom, Yes, TnG EWallet, Shopee, Pos Malaysia & HSBC Malaysia. When I was on official Magisk 26.1, only TnG wasn't working. With Delta & Alpha, all apps are working flawlessly.

8 screenshots.

 

[pndwal]

Hello, greetings.
Pardon any mistakes in my English.

I'm using Nord AC2003 (Global), OOS12, build F.18. Just want to share my Magisk's setup for apps detection:

1- Started with the latest official Magisk (26.1).
2- Zygisk + Enforce DenyList enabled.
3- Changed to Magisk Alpha (26101).
4- Randomized the Magisk Alpha app's name.

P/s: Use the Alpha at your own risk. Already tested the Magisk Delta, have some issues with my modules, specifically with font module, besides I'm not really a fan of the GUI. Official Magisk's GUI is better for me.

1. Tested with Applist Detector, Momo, SafetyNet Test & TB Checker.
2. My modules: Busybox, Kill GMS Font, Product Sans A12, Systemless Hosts, Systemless Host - Unified, Official USNF & VoEnabler.
3. I'm from Malaysia. So basically my daily apps with pay function are Hotlink, Celcom, Yes, TnG EWallet, Shopee, Pos Malaysia & HSBC Malaysia. When I was on official Magisk 26.1, only TnG wasn't working. With Delta & Alpha, all apps are working flawlessly.

8 screenshots.

Official Universal SafetyNet Fix is broken and most use @Displax's modded build, but I think you don't even need it for your Nord...

I'd be interested to know if you pass deviceIntegrity in Play Integrity API Checker if you just remove/disable USNF, add Google Play Services attestation/droidguard process com.google.android.gms.unstable and main process com.google.android.gms in denylist, install Shamiko module, deselect DenyList enforcement (ie. unenforced, so Shamiko can use it as hidelist) and reboot...

Also, installing LSPosed and configuring Hide My Applist XPosed module should remove Magisk stub detections...

PW

 

[m0han]

.... install Shamiko module....

Shamiko update (v0.7.1) available

Spoiler: More Info

Shamiko
Version: 0.7.1 (166), 05/04/2023

Developer: LSPosed Developers

Specifications: Android 8.1+ | Magisk 26000+ or KernelSU 10818+

Description of work, functionality: An experimental module for hiding most external factors of third-party interference in the device (Magisk Root, Zygisk itself and its modules).

Usage
1. Activate Zygisk.
2. Install the module.
3. Customize the DenyList in Magisk settings (add any apps and processes you want to hide to it). Don't enable the "Activate DenyList" option!
4. Restart your device.

What's new:
Version: 0.7.1 (166)
Merge Magisk and KernelSU branch

 

[mmbaknnba]

Official Universal SafetyNet Fix is broken and most use @Displax's modded build, but I think you don't even need it for your Nord...

I did the test again with both builds on 25.2, 26.1 & Alpha. Surprisingly, Basic/Device integrity & SafetyNet passed. Before this, I remembered I installed the modded build and failed, but I'm not sure on what Magisk's version. So, I decided to use the official one.

I'd be interested to know if you pass deviceIntegrity in Play Integrity API Checker if you just remove/disable USNF, add Google Play Services attestation/droidguard process com.google.android.gms.unstable and main process com.google.android.gms in denylist, install Shamiko module, deselect DenyList enforcement (ie. unenforced, so Shamiko can use it as hidelist) and reboot...

Failed. Any words on this?

Also, installing LSPosed and configuring Hide My Applist XPosed module should remove Magisk stub detections...

Thanks for this information. I didn't know how to configure HMA before, so I tried again, and success in hiding the stub. Was my setup correct? Btw, what is 'PM Intent Queries'?

 

[pndwal]

I did the test again with both builds on 25.2, 26.1 & Alpha. Surprisingly, Basic/Device integrity & SafetyNet passed. Before this, I remembered I installed the modded build and failed, but I'm not sure on what Magisk's version. So, I decided to use the official one.

Failed. Any words on this?

With USNF disabled (reboot), do you see BASIC as evaluationType in YASNAC?

Thanks for this information. I didn't know how to configure HMA before, so I tried again, and success in hiding the stub. Was my setup correct? Btw, what is 'PM Intent Queries'?

An app detection method used by some apps... Seems you're on an old version if seeing that option... I don't have it in 3.x HMA... PW

 

[mmbaknnba]

With USNF disabled (reboot), do you see BASIC as evaluationType in YASNAC?

Yes.

An app detection method used by some apps... Seems you're on an old version if seeing that option... I don't have it in 3.x HMA... PW

Not really, I'm on the latest version 3.1.1, downloaded from GitHub.