[Discussion] Magisk - The Age of Zygisk.

Search This thread

amn1987

Senior Member
ICICI Pockets latest version (9.4) instantly crashes on all my rooted devices(Magisk 24.3,Shamiko). Works fine in a device running stock MIUI. It's the only app that I haven't been able to tame. Old version 9.2 became non-functional from yesterday.
Edit: Just restricting "Get Applications" was sufficient to get the app working in a manner of speaking. The app in general is quite buggy and I haven't been able to complete the on-boarding process despite multiple tries.
Edit2: I was finally able to login after manually granting every permission beforehand.
 
Last edited:

J.Michael

Recognized Contributor
Jan 20, 2018
1,174
1,102
Samsung Galaxy Tab A series
ICICI Pockets latest version (9.4) instantly crashes on all my rooted devices(Magisk 24.3,Shamiko). Works fine in a device running stock MIUI. It's the only app that I haven't been able to tame. Old version 9.2 became non-functional from yesterday.
Edit: Just restricting "Get Applications" was sufficient to get the app working in a manner of speaking. The app in general is quite buggy and I haven't been able to complete the on-boarding process despite multiple tries.
Edit2: I was finally able to login after manually granting every permission beforehand.
What permissions are you granting?
 

meric57

Senior Member
Oct 2, 2017
154
27
Oeutrange
Hello, in momo 4.1.1 I have in detail "partition, mounted adnormally" I thought it came from the USB port no so it came from memory or partition

I have a problem with magisk every time I add third-party application LSposed example from zisgisk or others.
Magisk once restart no longer works magisk app non zigysk non ramdisk non normal.
There is no module that remembers the installation to reactivate without reflashing or integrating backup in magisk.
thank you
 
Last edited:

pndwal

Senior Member
... And I thought Mr 73Sydney was the spanner guy!...

Yeah, cute, open source too... But who needs it here? ("WebRTC native client that utilizes hardware encoders such as NVIDIA Jetson and Raspberry Pi to deliver high quality video such as 4K and 1080p with less than a second delay...")

Could be some licencing issues w/ the name... except 'our' Momo seems to originate in China... 🤔

Anyway, you get my new award for original answers designed to kerflummox -

Spanner.jpeg

😁 PW
 
Last edited:

slimshouki

Senior Member
Dec 5, 2012
727
145
I have tried every single solution mentioned here in the thread to hide root from this banking app Instapay but unfortunately always detect root despite all other banking apps are working.
I Have Latest Magisk Alpha 24310
Latest Shamiko 0.5.0 (112)
InitRcHider
HMA lsposed and magisk module hiding all root request apps and lsposed modules from banking apps
USNF
MagiskHide Props Config
Bromite webview replaced Android webview using magisk module
Zygisk on and enforcing denylist off
App runs normally if magisk hide on and zygisk is disabled
 

73sydney

Senior Member
... And I thought Mr 73Sydney was the spanner guy!...

Yeah, cute, open source too... But who needs it here? ("WebRTC native client that utilizes hardware encoders such as NVIDIA Jetson and Raspberry Pi to deliver high quality video such as 4K and 1080p with less than a second delay...")

Could be some licencing issues w/ the name... except 'our' Momo seems to originate in China... 🤔

Anyway, you get my new award for original answers designed to kerflummox -

View attachment 5620571

😁 PW

Hey, I want my spanner back!


....and Ponkles to all
 

dewa5227

Senior Member
Oct 31, 2010
232
66
Surabaya
OnePlus 6
Xiaomi Mi Pad 4
I have tried every single solution mentioned here in the thread to hide root from this banking app Instapay but unfortunately always detect root despite all other banking apps are working.
I Have Latest Magisk Alpha 24310
Latest Shamiko 0.5.0 (112)
InitRcHider
HMA lsposed and magisk module hiding all root request apps and lsposed modules from banking apps
USNF
MagiskHide Props Config
Bromite webview replaced Android webview using magisk module
Zygisk on and enforcing denylist off
App runs normally if magisk hide on and zygisk is disabled
already try island ?
 

Top Liked Posts

  • 2
    Hi,

    Don't know if this is the right place ... anyways ...


    Firstly I don't have a clue why my github issue got closed by a bot.
    If I remember correctly, you have to fill a template when reporting. And you have to confirm there that you use the latest Debug version.
    Without all those formalities, the bot will immediately close your issue

    But even if you pass the bot, your 'issue' will be sooner or later closed by developers because it's not their business if some banking app detects 'root'

    Who knows how does it detect. Maybe by looking for Magisk Application (configuration of DenyList has nothing to do with that)

    Maybe the app guesses about 'root' by finding TWRP folder. Maybe the app recognizes that Bootloader is unlocked (like Momo app can find on some phones) and it guesses why would somebody unlock BL if not for rooting or installing a custom ROM

    It's not about detecting the 'root' but detecting that you are not running the 'safe' (read the CERTIFIED) stock firmware

    And TJW has clearly departed himself and his Magisk v24+ from those detections of 'root'. New DenyList is something totally different than previous MagiskHide. Even if somebody does not understand the differences in techniques, he should see a significant difference in their NAMES

    I only don't understand why TJW still keeps Hide (repackage) Magisk App option. If he really wanted to be straight about differentiating from hiding the 'root', he should have removed that option - that option (putting aside that it can be circumvented by smarter 'banking' apps) has no other purpose than to hide Magisk app from the 'banking' apps who try to look for the Magisk ('service', 'mask', whatever you call) by looking instead for (an easier task) the Magisk app. Hence TJW still stands here on the 'wrong' side, but apparently his employer does not care much (meanwhile trying to impose that apps soon will no more be able to search for the installed apps, hence hiding the Magisk app would become irrelevant)

    Ie, detecting and hiding root is a game. And AFAIK, Magisk GitHub does not accept reporting any 'issues' about
    1
    I found out on latest update of "App cloner", I couldn't avoid it detecting root.. I updated from magisk TJW 23.0 official to fork magisk delta 25.1 if incase it will work but no way.. root still detected. Check attached snapshots.
    Zygisk disabled
    Magisk hide enabled
    App added on denylist
    This is warning from your system security app, not from the app itself
    1
    How to solve this? I use Xiaomi Redmi 9 android 10. Thanks 😊
    Are you asking about com.miui.securitycenter

    Did you add it to DenyList?
    See the screenshots

    You might need to enable Show System and Show OS apps to be able to see in the Magisk app, Configure DenyList

    Alternatively (if it won't show in Configure DenyList), DenyList can be managed through the Terminal:
    Code:
    su
    magisk --denylist ls
    magisk --denylist add com.miui.securitycenter
    magisk --denylist ls
    1
    Okay thanks. I'll try that and give feedback.
    But I see now that you started by asking about App Cloner

    I don't see App Cloner in the MIUI Security. If that App Cloner is a third party app, then adding Security to DenyList would have no effect/not help

    Then I don't know why somebody recommended you to add MIUI Security to DenyList - my previous post was exclusively about adding Security to DenyList (since I remember that with some MIUI version and/or some Magisk version, Security was not showing in DenyList or in MagiskHide and I needed to be added through CLI in Terminal)
    1
    I noticed it was because of Zygisk that even on Magisk Delta it was detecting root. So I now installed Magisk Delta without Zygisk enabled and Hide list On and it works. Is there any significant difference for Zygisk and no Zygisk?

    I fail SafetyNet now
    Of course there is a BIG difference. Not easy to describe in few words (specially to a newbie regarding to Zygisk).But take your time and search/read in this and Magisk general thread, you can find a lot about Zygisk, how and why it was introduced, about its still not mature status, about its name (process starting from Android Zygote!), etc

    If you don't use Zygisk, and if you needed USNF (with Zygisk to pass SN), then now you need to go back to the lower version of USNF - new USNF is made for Zygisk.
    Please read and find info in the USNF thread - for Delta without Zygisk, you should look for the USNF version as for the old, pre v24 Magisk

    Or ask in the Delta thread - this thread here is for the official/new Magisk v24+ while Delta, with Zygisk disabled acts l(in some aspects) like Magisk v23-.
    Actually, it's ba specific mix of the old and new and should not be messed with the official Magisk v24/25
  • 15
    @ipdev can you add https://github.com/mywalkb/DenylistUnmount to this post, as an open source alternative to Shamiko? Many users are posting positive results with this module.
    I bookmarked it the other day when I ran across the link in a different thread. 🙃
    I added Denylist Unmount to Points of Interest.

    Unfortunately my time has been short lately. 🙁
    Life and sidetracked by other projects.

    I have been meaning to update Post #9 for awhile now.
    Post #9 was to be a catch all post for additional links recommended in the threads.
    I have been trying to figure a good way to format/layout and categorize it.​

    This is my current WIP.
    Still needs to be formatted better. The secondary title needs to be reworded. Add/reword descriptions.
    Other cleanup and format/layout.

    Points of Interest.
    Apps, Links, Modules, Posts and Threads.
    Additional links recommended by the xda family.

    Apps

    Hide My Applist
    Hide apps or reject app list requests.
    Requires Xposed.​
    Download Links:
    GitHub | PlayStore

    Oprek Root Detector
    Check Devices Health​
    Download Links:
    PlayStore

    Magisk Modules

    Denylist Unmount
    Unmount the denylist processes​
    Download Links:
    GitHub

    LSPosed
    Systemless Xposed framework.
    Zygisk releases are now included.
    Releases
    Download Links:
    GitHub

    Shamiko
    Add description​
    Download Links:
    GitHub

    xda Posts

    xda Threads

    Other


    Note(s)
    • Xposed is a framework for modules that can change the behavior of the system and apps without touching any APKs.

    Cheers. :cowboy:
    9
    Anyone here have issue with latest version of Shamiko and some banking apps?
    My Starling app keeps closing itself when I have enabled Shamiko but if I disable it and revert to enforce denylist the app works fine but one of my other apps does not work without shamiko!
    Try using my build, turn off zygisk (optional) and enable MagiskHide.

    About Zygisk: Zygisk is still not perfect for hiding and zygisk leave very obvious traces for some apps such as Livin by Madiri (only work without zygisk). The problem is not "root is not hidden" but "Zygisk is not hidden". Riru has RiruHide to hide itself from scanning /proc/<pid/maps but Zygisk doesn't have hiding method and DenyList doesn't hide zygisk. If you are using LSPosed, recommended to use Riru for now.


    If you apps are still detecting root, try install Riru - MomoHider: https://github.com/HuskyDG/Riru-Momohider/releases/tag/0.0.8-all-configs
    8
    a new safetynet update has been released https://github.com/kdrag0n/safetynet-fix/releases
    thanks to kdrag0n and osm0sis and benjibobs
    8
    Points of Interest.

    LSPosed
    Zygisk releases are now included.
    Download Links:

    Shamiko
    Download Links:
    @ipdev can you add https://github.com/mywalkb/DenylistUnmount to this post, as an open source alternative to Shamiko? Many users are posting positive results with this module.
    5
    How Momo detect some traces:
  • 117
    This is a discussion and help thread for the newer versions of Magisk.

    The main goal of this thread is to help users migrate to Magisk v24+
    • SafetyNet
      Basic integrity Pass
      CTS profile match Pass
    • Play Protect certification
      Device is certified

    Feel free to discuss or give links to other Magisk related issues.
    Fixes for gPay, banking apps and/or other apps and games that detect a 'compromised' Android system.
    Please try to restrain from discussing alternative (unofficial) Magisk builds that include changes that were removed or can not be included in the official Magisk builds. 🙃

    Please read John's State of Magisk (medium.com)

    Starting with the Magisk 23 (23010) canary builds.
    • MagiskHide is removed.
      MagiskHide masked the sensitive properties of the device to hide it from SafetyNet.
      Renaming (repackaging) the Magisk app is/was not part of MagiskHide.
      You still have the option to Hide the Magisk app under setting.​
    • Magisk Module online Repo is removed.
      The Magisk Module online Repo is still available and can be accessed outside of the Magisk app.​
    • Everything SafetyNet is removed.
      This includes the SafetyNet check that was incorporated into the Magisk app.​
    • Zygisk is introduced.
      Zygote + Magisk = Zygisk​
    • The Deny list replaces the Hide list.
      The Hide list (more or less) hid Magisk from the process on the list.
      The Deny list is similar but instead of hiding Magisk from the process, Magisk is unloaded so there is nothing to hide.​

    Starting with the Magisk 23 (23017) canary builds.
    • Magisk supports update channels per module.
      Each module can include it's own update link.​
    • Hide Magisk offline.
      You do not need internet connection to rename (repackage) the Magisk app.​

    What does this mean?
    Not much.
    It is just the next step in Magisk's development.
    Zygisk is a big step forward. ;)

    Even before these changes in Magisk, the xda family and the Android community have always been active and willing to share. :D

    Jump to Post


    This is post will be updated once Magisk v24 is released.
    62
    Magisk
    The Magic Mask for Android.

    Magisk Links:
    GitHub
    Release Notes

    Download Links:
    Stable and Beta releases.
    Canary
    • GitHub
      The notes.md file is the change log.
      The app-debug.apk is Magisk canary.
      Click on app-debug.apk and choose View Raw or click on the Download option.​

    Credits:
    topjohnwu
    All who contribute and support this project.
    57
    Modules

    MagiskHide Props Config
    This module allows you to add, change and adjust prop values systemlessly using Magisk.​

    MagiskHide Props Config Links:

    Download Links:

    Credits:
    Didgeridoohan
    All who contribute and support this project.


    Universal SafetyNet Fix
    It has been a year now since kdrag0n figured out how to 'trick' SafetyNet.
    This 'trick' has been implemented properly into quite a few custom roms.
    For custom roms that do not include it and/or stock roms, he turned it into a module.​

    Universal SafetyNet Fix Links:

    Download Links:

    Credits:
    kdrag0n
    All who contribute and support this project.
    52
    Apps

    Fox's Magisk Module Manager
    This app allows you to manage and install Magisk modules.
    Including from an online repo.​

    Fox's Magisk Module Manager Links:

    Download Links:

    Credits:
    Fox2Code
    All who contribute and support this project.


    YASNAC - Yet Another SafetyNet Attestation Checker
    YASNAC (short for Yet Another SafetyNet Attestation Checker) is an Android app that demonstrates SafetyNet Attestation API.​

    YASNAC Links:

    Download Links:

    Credits:
    RikkaW
    All who contribute and support this project.
    43
    Force Basic Attestation

    Newer devices are designed to support hardware attestation.
    Currently there is no way to hide the sensitive device properties when checked using hardware attestation.​

    To get around this, kdrag0n figured out how trick SafetyNet that the device does not support hardware attestation.
    SafetyNet will then fall back to check using basic attestation.

    Note:
    This method will work for devices that support hardware attestation and devices that do not.
    • Enable Zygisk.
    • Install the USNF module.
    • Reboot

    To keep posts short, the instructions are hid by spoiler tags.
    If you have not installed Magisk.
    Follow the installation link in the Magisk post.​

    Download the Universal SafetyNet Fix module.
    Download link is in the Modules post.​

    1. Enable Zygisk
      • Open the Magisk app.
      • Go to Settings.
      • Scroll down to the Magisk section.
      • Toggle Zygisk on.
      • Go back to the Magisk Home screen.
    2. Go to Modules.
      • Select Install from storage.
      • Navigate to the Universal SafetyNet Fix module zip file and select it.
    3. Reboot.

    The USNF module will adjust the sensitive props that are needed to pass SafetyNet.
    Depending on the device and system (ROM) configuration, you might need to adjust a few more.
    See the Adjust Prop values post.​