[Discussion] Magisk - The Age of Zygisk.

Search This thread

paarkhi

Senior Member
Jan 12, 2011
2,570
1,013
I did nothing specific...You may want to select "read applications" for Applist Detector in XprivacyLua

Actually mileage varies across rom for these xposed modules and their settings.

For eg. I am seeing Abnormal Environment whereas it is all good in your case.
I don't have XprivacyLua installed, maybe that's the reason, thanks for the reply
 

vaidhy2007

Senior Member
Feb 22, 2013
263
18
Asus ZenFone 2
Asus ZenFone 3
Hi Guys,

I have tried most of guides here using Zygisk, Denylist, Shamiko, MHPC, Lsposed, HMA, Xprivacylua.
I am using ICICI bank iMobile app, which after using Xprivacylua and disabling permissions, now goes past the first error screen which detects root, but after entering my mobile number it gets stuck at verification.
Can somebody share a proper guide to make ICICI mobile app work?
Thanks in advance
 

Attachments

  • photo_2022-05-27_18-36-56.jpg
    photo_2022-05-27_18-36-56.jpg
    46.2 KB · Views: 92
Last edited:

vaidhy2007

Senior Member
Feb 22, 2013
263
18
Asus ZenFone 2
Asus ZenFone 3
ICICI Pockets latest version (9.4) instantly crashes on all my rooted devices(Magisk 24.3,Shamiko). Works fine in a device running stock MIUI. It's the only app that I haven't been able to tame. Old version 9.2 became non-functional from yesterday.
Edit: Just restricting "Get Applications" was sufficient to get the app working in a manner of speaking. The app in general is quite buggy and I haven't been able to complete the on-boarding process despite multiple tries.
Edit2: I was finally able to login after manually granting every permission beforehand.
Can you guide me on your setup?
I am using iMobile app and unable to use it since some time.
Unable to complete the registration
 

Attachments

  • photo_2022-05-27_18-36-56.jpg
    photo_2022-05-27_18-36-56.jpg
    46.2 KB · Views: 63

amn1987

Senior Member
Can you guide me on your setup?
I am using iMobile app and unable to use it since some time.
Unable to complete the registration
Sorry I can't help you as I am not an ICICI bank customer although I plan to open an account as soon as next month. I followed the steps outlined by mgforce in this thread itself https://forum.xda-developers.com/goto/post?id=86767061 . Even Pockets app still crashes on launch. It works after 3-4 tries. In one device for some reason Play Services kept getting removed from the Denylist which further added to the frustration.
 
Last edited:

paarkhi

Senior Member
Jan 12, 2011
2,570
1,013
Did you start slow?

Posts in this thread indicate some people have great success with very little, maybe just Shamiko and USNF.
Sorry I couldn't understand what you meant by "Did you start slow?"
I came to this thread because the old version of icici banking app stopped working and new version of the app detecting root, I followed this post (which solved the issue), then I was going through this thread reading other posts just for knowledge and I saw Applist detection, so I downloaded and checked mine and saw that xposed modules were detected by the app so asked here.

old version of the banking app was working simply with Enforce Deny list and renaming magisk manager
 

J.Michael

Recognized Contributor
Jan 20, 2018
1,244
1,181
Samsung Galaxy Tab A series
Sorry I couldn't understand what you meant by "Did you start slow?"
I came to this thread because the old version of icici banking app stopped working and new version of the app detecting root, I followed this post (which solved the issue), then I was going through this thread reading other posts just for knowledge and I saw Applist detection, so I downloaded and checked mine and saw that xposed modules were detected by the app so asked here.

old version of the banking app was working simply with Enforce Deny list and renaming magisk manager
I meant did you install as little as possible to get the bank app to run. From your citation, you started with Magisk, Shamiko, LSposed, HMA. (No mention of USNF.)

I understand people wanting to be able to run the three top "detectors" and "pass" all tests, but from reading these posts I get the impression that more is not always better -- sometimes uninstalling something leads to success.

I haven't bothered learning about LSposed/Xsposed, what they're for, which works with newer Magisk or Zygisk.

Is your bank app working? If a better "detector" is detecting Xsposed modules, but the bank app is working, I'd say don't worry about it. (Until next week when the bank app stops working.)
 

paarkhi

Senior Member
Jan 12, 2011
2,570
1,013
I meant did you install as little as possible to get the bank app to run. From your citation, you started with Magisk, Shamiko, LSposed, HMA. (No mention of USNF.)

I understand people wanting to be able to run the three top "detectors" and "pass" all tests, but from reading these posts I get the impression that more is not always better -- sometimes uninstalling something leads to success.

I haven't bothered learning about LSposed/Xsposed, what they're for, which works with newer Magisk or Zygisk.

Is your bank app working? If a better "detector" is detecting Xsposed modules, but the bank app is working, I'd say don't worry about it. (Until next week when the bank app stops working.)
I was already using magisk and lsposed (for exi for swiftkey) and my banking apps were working with enforce denylist so never needed to go deeper (had to use USNF in the past on some other roms but not on the current rom), but today one of my banking app when forced me to update (the older version stopped working) and after update it was detecting root, so I started searching and landed in this thread and then I installed shamiko, HMA (I knew about shamiko before although never needed it, but not about HMA).

to answer your question, yes my banking app is working for now
Thanks to all the wonderful people in this thread :)
 
  • Like
Reactions: J.Michael

m0han

Senior Member
Apr 30, 2012
4,992
2,046
@zgfg/anyone seen/tried this module? your thoughts?
 

Attachments

  • Screenshot_20220527_231335.jpg
    Screenshot_20220527_231335.jpg
    151.8 KB · Views: 147

zgfg

Senior Member
Oct 10, 2016
7,570
4,977
@zgfg/anyone seen/tried this module? your thoughts?
Interesting. Didn't see. But you could also use AirFrozen app and 'permanently' freeze the Magisk app.
When you need, you simply un-freeze and use (without rebooting or so). When done, freeze again. You really need it maybe once every second day or so (once you install, setup modules, etc and settle)

However, it might be not enough. An app that is searching for Magisk app can still look for its package name (com.topjohnwu.magisk) even if frozen at the moment
 

adek33.21

Member
Jun 26, 2016
15
1
Moto G 2015
Moto G6 Plus
Hi. I've done everything from this post, but I have still problem with CTS profile match.

Device: Moto G6 Plus (evert) with Lineage 19

What have I done:
- wiped data
- updated Magisk (24.3),
- Zygisk is on and enforced denylist
- on DenyList: Play Store, Play Services (gms and unstable), GPay, local bank app
- installed Magisk modules: Universal SafetyNet fix and MagiskHide Props Config
- Selinux enforced

Every reboot make Google Play Services unchecked on DenyList. YASNAC app shows Basic integrity passed, but CTS unpassed. Evaluation type: basic.
Can someone help with this issue?
 

pndwal

Senior Member
Hi. I've done everything from this post, but I have still problem with CTS profile match.

Device: Moto G6 Plus (evert) with Lineage 19
Official LOS? If yes, you definitely need fingerprint configured in MHPC... If unofficial, this may spoof passing fingerprint, but it's still likely you need to configure one...
What have I done:
- wiped data
- updated Magisk (24.3),
- Zygisk is on and enforced denylist
Assume App Home page shows Zygisk - Yes.

Don't Enforce denylist w/ Shamiko; hijacks list, does proper hiding...
- on DenyList: Play Store, Play Services (gms and unstable),
Remove these, or USNF will remove at boot time; it does enhanced hiding of root from s/n.
GPay, local bank app
- installed Magisk modules: Universal SafetyNet fix and MagiskHide Props Config
Which fingerprint did you configure?
- Selinux enforced

Every reboot make Google Play Services unchecked on DenyList.
Intended, to prevent your settings breaking USNF module. Explained above.
YASNAC app shows Basic integrity passed,
Good
Bad
Evaluation type: basic.
Good
Can someone help with this issue?
Maybe... 😝🙃 PW
 

daemonicvs

Senior Member
Mar 5, 2015
67
18
Have you had solution for this? Can we hide this xlua folder for being detected?
nope. i think you gotta deinstall xprivacylua. i wont. i just dont use apps which detect root resp. missing cia spyware services. i have a phone with stock android. if i really need an app which does not work on rooted devices ill use this system.

but i really dont know if xlua is the problem or the missing spyware...
 

hilmibisri20

New member
May 31, 2022
1
0
Hey, i'm having camera problem when installing universal safety net fix, it brokes my camera. I have edited the build.prop and default.prop permission. but it gives me nothing, camera's not working.
 

dejson

Senior Member
May 21, 2007
601
374
Sarajevo
Hi everyone.
I am using intune portal. I am using zygisk as well and everything is working like a charm. Is it safe to update company portal and apps in work profile ? I mean root would not be detected.
 

martyfender

Senior Member
Mar 9, 2017
3,268
1,746
Indianapolis, IN
Several months ago I switched to the magisk alpha builds because it still had magiskhide. Soon after I started using zygisk when it was refined further. John now seems to be releasing new builds much more frequently than vvb2060, so I am considering switching back to John's builds.
Is there any reason to stay on magisk alpha builds?

Thanks
 

Top Liked Posts

  • There are no posts matching your filters.
  • 6
    Latest Official TJW Canary (release) & Debug (debug) Magisk builds:

    Magisk (f42c089b) (25102)​

    • [MagiskInit] Fix a potential issue when stub cpio is used
    • [MagiskInit] Fix reboot to recovery when stub cpio is used
    • [General] Better data encryption detection
    • [General] Move the whole logging infrastructure into Rust

    Diffs to v25.1​

    • [MagiskInit] Fix a potential issue when stub cpio is used
    • [MagiskInit] Fix reboot to recovery when stub cpio is used
    • [General] Better data encryption detection
    • [General] Move the whole logging infrastructure into Rust
    https://github.com/topjohnwu/magisk-files/blob/8fce25209918072f18b5bb056c43f596f771324d/notes.md

    👍 PW
    5
    Is it possible to find out what an app detects? I have Shamiko 0.5.1 installed and somehow a banking app still detects root. This is the app: https://play.google.com/store/apps/details?id=ro.raiffeisen.eToken&hl=ro&gl=US
    I just tried it on my phone (stock rom, Magisk 24.3, Shamiko 0.5.0, USNF).
    Without doing anything, it detects root.
    Adding it to denylist, still detects root.
    Freezing the Magisk app, goes through!
    5
    How should I hide apps?
    ... its just an addon script that (attempts, as best possible) to hide whatevers in the Deny List
    Just to avoid confusion/ be clear, Shamiko does not hide apps (in denylist or otherwise)...

    It's akin to old MagiskHide, and hides traces of root from apps in the list...
    ### Introduction
    Shamiko is a Zygisk module to hide Magisk root, Zygisk itself and Zygisk modules like riru hide.

    Shamiko read the denylist from Magisk for simplicity but it requires denylist enforcement to be disabled first.
    @appleman_wp
    If you wish to hide apps detected by banks etc, try the Hide My Applist LSPosed module...
    I don't think Shamiko has a "Settings". I think you use the Magisk Manager app's deny list. If you do not "Enforce Deny List" in Magisk, then Shamiko will use Magisk's Deny List to tell it what to hide [traces of root] from.
    (Edits mine.)

    Generally Shamiko is used without settings / extra configuration.
    ### Usage
    1. Install Shamiko and enable Zygisk and reboot
    1. Configure denylist to add processes for hiding
    1. *DO NOT* turn on denylist enforcement

    However it can actually be reconfigured (by those game / mavericks 😛) for whitelist mode usage. Note caveats:
    #### Whitelist
    - You can create an empty file `/data/adb/shamiko/whitelist` to turn on whitelist mode and it can be triggered without reboot
    - Whitelist has significant performance and memory consumption issue, please use it only for testing
    - Only apps that was previously granted root from Magisk can access root
    - If you need to grant a new app root access, disable whitelist first

    ... ts theoretically possible to... bootloop your device... At which point myself and the other senior members will pass around the chalice of your tears and drink heartily from it...
    Sadist! 😜 PW
    5
    I just tried it on my phone (stock rom, Magisk 24.3, Shamiko 0.5.0, USNF).
    Without doing anything, it detects root.
    Adding it to denylist, still detects root.
    Freezing the Magisk app, goes through!
    It's now been reported a number of times that freezing the Magisk app helps thwart root detection in many cases.

    So ... I now believe that what we need to do is not talk about that publicly too much, so that the banking-and-other-kinds-of-app developers who might check these forums don't catch on to the fact the Magisk app itself doesn't actually provide any run-time Magisk functionality.

    This way, those developers will keep thinking that checking for the existence of a non-frozen Magisk app itself is sufficient.

    Given the intelligence level of some of the banking people who lamely think that it's important to block root access under Android in order to "protect" their provided banking functionality, this ruse might actually be quite effective in many cases.

    After all, anyone who accesses a bank via their desktop computer is doing so on a rooted machine, and those idiotic banking software designers don't even care about "protecting" us against that. And those same banks issue us debit cards that we carry in our stealable wallets, and they don't prohibit us from using those debit cards, either. They go crazy only over trying to protect people against rooted Android devices, which are no more insecure than desktop computers and wallet-borne debit cards.
    4
    Interesting. I'll check it out. In addition to creating root, I assumed that Magisk needed to be resident in at least some way to do its ongoing work related to app compatibility, but if it's frozen that's apparently not the case. If the only time that it needs to be unfrozen is when you need to change a setting/update a module etc., then that sounds like a good way to go.
    "Magisk" *does* need to be "resident". You have been advised to freeze "the Magisk Manager app".

    You can see if freezing could possibly help by uninstalling the Magisk app -- not Magisk, the Magisk app. If that solves your detection problem, you might find the freezing more convenient than repeatedly uninstalling/reinstalling.
  • 120
    This is a discussion and help thread for the newer versions of Magisk.

    The main goal of this thread is to help users migrate to Magisk v24+
    • SafetyNet
      Basic integrity Pass
      CTS profile match Pass
    • Play Protect certification
      Device is certified

    Feel free to discuss or give links to other Magisk related issues.
    Fixes for gPay, banking apps and/or other apps and games that detect a 'compromised' Android system.
    Please try to restrain from discussing alternative (unofficial) Magisk builds that include changes that were removed or can not be included in the official Magisk builds. 🙃

    Please read John's State of Magisk (medium.com)

    Starting with the Magisk 23 (23010) canary builds.
    • MagiskHide is removed.
      MagiskHide masked the sensitive properties of the device to hide it from SafetyNet.
      Renaming (repackaging) the Magisk app is/was not part of MagiskHide.
      You still have the option to Hide the Magisk app under setting.​
    • Magisk Module online Repo is removed.
      The Magisk Module online Repo is still available and can be accessed outside of the Magisk app.​
    • Everything SafetyNet is removed.
      This includes the SafetyNet check that was incorporated into the Magisk app.​
    • Zygisk is introduced.
      Zygote + Magisk = Zygisk​
    • The Deny list replaces the Hide list.
      The Hide list (more or less) hid Magisk from the process on the list.
      The Deny list is similar but instead of hiding Magisk from the process, Magisk is unloaded so there is nothing to hide.​

    Starting with the Magisk 23 (23017) canary builds.
    • Magisk supports update channels per module.
      Each module can include it's own update link.​
    • Hide Magisk offline.
      You do not need internet connection to rename (repackage) the Magisk app.​

    What does this mean?
    Not much.
    It is just the next step in Magisk's development.
    Zygisk is a big step forward. ;)

    Even before these changes in Magisk, the xda family and the Android community have always been active and willing to share. :D

    Jump to Post


    This is post will be updated once Magisk v24 is released.
    63
    Magisk
    The Magic Mask for Android.

    Magisk Links:
    GitHub
    Release Notes

    Download Links:
    Stable and Beta releases.
    Canary
    • GitHub
      The notes.md file is the change log.
      The app-debug.apk is Magisk canary.
      Click on app-debug.apk and choose View Raw or click on the Download option.​

    Credits:
    topjohnwu
    All who contribute and support this project.
    57
    Modules

    MagiskHide Props Config
    This module allows you to add, change and adjust prop values systemlessly using Magisk.​

    MagiskHide Props Config Links:

    Download Links:

    Credits:
    Didgeridoohan
    All who contribute and support this project.


    Universal SafetyNet Fix
    It has been a year now since kdrag0n figured out how to 'trick' SafetyNet.
    This 'trick' has been implemented properly into quite a few custom roms.
    For custom roms that do not include it and/or stock roms, he turned it into a module.​

    Universal SafetyNet Fix Links:

    Download Links:

    Credits:
    kdrag0n
    All who contribute and support this project.
    52
    Apps

    Fox's Magisk Module Manager
    This app allows you to manage and install Magisk modules.
    Including from an online repo.​

    Fox's Magisk Module Manager Links:

    Download Links:

    Credits:
    Fox2Code
    All who contribute and support this project.

    Play Intergrity API Checker
    This app shows info about your device integrity as reported by Google Play Services.
    If any of this fails could mean your device is rooted or tampered in a way (for example you have an unlocked bootloader).​

    Development:

    Download Links:

    Credits:
    1nikolas
    All who contribute and support this project.

    YASNAC - Yet Another SafetyNet Attestation Checker
    YASNAC (short for Yet Another SafetyNet Attestation Checker) is an Android app that demonstrates SafetyNet Attestation API.​

    YASNAC Links:

    Download Links:

    Credits:
    RikkaW
    All who contribute and support this project.
    43
    Force Basic Attestation

    Newer devices are designed to support hardware attestation.
    Currently there is no way to hide the sensitive device properties when checked using hardware attestation.​

    To get around this, kdrag0n figured out how trick SafetyNet that the device does not support hardware attestation.
    SafetyNet will then fall back to check using basic attestation.

    Note:
    This method will work for devices that support hardware attestation and devices that do not.
    • Enable Zygisk.
    • Install the USNF module.
    • Reboot

    To keep posts short, the instructions are hid by spoiler tags.
    If you have not installed Magisk.
    Follow the installation link in the Magisk post.​

    Download the Universal SafetyNet Fix module.
    Download link is in the Modules post.​

    1. Enable Zygisk
      • Open the Magisk app.
      • Go to Settings.
      • Scroll down to the Magisk section.
      • Toggle Zygisk on.
      • Go back to the Magisk Home screen.
    2. Go to Modules.
      • Select Install from storage.
      • Navigate to the Universal SafetyNet Fix module zip file and select it.
    3. Reboot.

    The USNF module will adjust the sensitive props that are needed to pass SafetyNet.
    Depending on the device and system (ROM) configuration, you might need to adjust a few more.
    See the Adjust Prop values post.​