[Discussion] Magisk - The Age of Zygisk.

Search This thread

dohanin

Senior Member
Mar 26, 2011
226
126
Sony Xperia X Compact
Xiaomi Mi Pad 4
freeze it and it doesn't work either. It works in all banks except one. My mobile has Android 12 (Miui 13), when I had Andorid 11 (Miui 12) I had the same problem but solved it using the magisk 23. Magisk 23 does not work on Android 12 , I read that some block URLs with Adaway but there is not much information about it
Is the Hang Seng bank app this one --> https://play.google.com/store/apps/details?id=com.hangseng.rbmobile ?

I tried it yesterday and confirmed that it stopped detecting root when the Magisk app was not enabled. Make sure you clear the app's storage and kill it first before opening it again.

I'm using Stock Android 12, Magisk stable with USNF and Shamiko modules.

I don't think Adaway would help, because it is just for blocking ads.
 
  • Like
Reactions: angelomb

angelomb

Member
Jun 4, 2013
10
1
Is the Hang Seng bank app this one --> https://play.google.com/store/apps/details?id=com.hangseng.rbmobile ?

I tried it yesterday and confirmed that it stopped detecting root when the Magisk app was not enabled. Make sure you clear the app's storage and kill it first before opening it again.

I'm using Stock Android 12, Magisk stable with USNF and Shamiko modules.

I don't think Adaway would help, because it is just for blocking ads.
the app is Yape -- > https://play.google.com/store/apps/details?id=com.bcp.innovacxion.yapeapp&hl=es_PE&gl=US

i tried Hang Seng bank app, I open that app and it didn't work then freeze the magisk app with the Airfrozen and it worked, but with my app "Yape" it does not work yet.
 

dohanin

Senior Member
Mar 26, 2011
226
126
Sony Xperia X Compact
Xiaomi Mi Pad 4
the app is Yape -- > https://play.google.com/store/apps/details?id=com.bcp.innovacxion.yapeapp&hl=es_PE&gl=US

i tried Hang Seng bank app, I open that app and it didn't work then freeze the magisk app with the Airfrozen and it worked, but with my app "Yape" it does not work yet.
Oh I see, you were talking about a different app. I wanted to try it, but it "is not available in your country". Well, if it doesn't work by hiding the Magisk app, you may give a go with Island, or try other methods discussed in this thread, e.g. Magisk Alpha, Magisk Delta, Denylist Unmount module, etc. For me I always use Shamiko plus hiding the Magisk app since the Zygisk era because it works for those apps I use.
 

angelomb

Member
Jun 4, 2013
10
1
Oh I see, you were talking about a different app. I wanted to try it, but it "is not available in your country". Well, if it doesn't work by hiding the Magisk app, you may give a go with Island, or try other methods discussed in this thread, e.g. Magisk Alpha, Magisk Delta, Denylist Unmount module, etc. For me I always use Shamiko plus hiding the Magisk app since the Zygisk era because it works for those apps I use.
this is the apk --> https://www.apkmirror.com/apk/banco...1-5-release/yape-2-31-5-android-apk-download/

i tried island app ,Denylist Unmount ,but they not work, i will try Magisk Alpha
 

huskydg

Senior Member
Feb 17, 2021
207
209
Tried the app myself now, it also detects root on my device. :(
It works for me lol ;)

Screenshot_20220703-220943_Yape.png
 
  • Like
Reactions: J.Michael

huskydg

Senior Member
Feb 17, 2021
207
209
I found an alternative DenylistUnmount (open source) is not perfect as shamiko but I think is good for many apps. I installed about 30 banking apps and only one detect root with DenylistUnmount but root is detected also with shamiko. So also shamiko is not perfect.
Has anyone tried this module yet?
So the one you mentioned detect zygisk ;) Can you tell the name of that app?
 

ipdev

Recognized Contributor
Feb 14, 2016
1,852
1
3,260
Google Nexus 10
Nexus 7 (2013)
this is the apk --> https://www.apkmirror.com/apk/banco...1-5-release/yape-2-31-5-android-apk-download/

i tried island app ,Denylist Unmount ,but they not work, i will try Magisk Alpha

Tried the app myself now, it also detects root on my device. :(
Odd. :unsure:

It worked for me a few different ways.

All I did was add the app to the Denylist.

Using the Denylist.
Denylist is enforced.​

Using the Denylist Unmount module.
Denylist is not enforced.​

Using the Shamiko module.
Denylist is not enforced.​

Did not make a difference if the Magisk app was hidden (renamed) or not.
I even had an active abd connection while testing. 😜


Tested on Pixel 6.
oriole-sq3a.220605.009.b1-factory-80f98167
app-debug (aka Magisk canary)
safetynet-fix-v2.3.1
LSPosed-v1.8.3-6552-zygisk-release
Shamiko-v0.5.1-115-release
denylist-v0.4

Cheers. :cowboy:

Screenshot_20220703-132219.png Screenshot_20220703-132329.png Screenshot_20220703-132354.png Screenshot_20220703-132401.png
 

J.Michael

Recognized Contributor
Jan 20, 2018
1,256
1,195
Samsung Galaxy Tab A series
I just installed Magisk v25.1 on my LG V20 H990DS with stock oreo and success without having kernel issues, but the app itself can't be opened (stuck on logo).
Of no use to you, just to satisfy my curiosity: How did you install Magisk? Did the Magisk app run before you installed Magisk?

If you uninstall the Magisk app and reboot, do you have a Magisk app? Does it behave any differently?
 

huskydg

Senior Member
Feb 17, 2021
207
209
It worked for me a few different ways.

All I did was add the app to the Denylist.

Using the Denylist.
Denylist is enforced.​

Using the Denylist Unmount module.
Denylist is not enforced.​

Using the Shamiko module.
Denylist is not enforced.​

Did not make a difference if the Magisk app was hidden (renamed) or not.
Did you test with these apps, my lord?
These app will beat your Shamiko and Momo detection ;)
 
Last edited:
  • Haha
Reactions: ipdev

dohanin

Senior Member
Mar 26, 2011
226
126
Sony Xperia X Compact
Xiaomi Mi Pad 4
Odd. :unsure:

It worked for me a few different ways.

All I did was add the app to the Denylist.

Using the Denylist.
Denylist is enforced.​

Using the Denylist Unmount module.
Denylist is not enforced.​

Using the Shamiko module.
Denylist is not enforced.​

Did not make a difference if the Magisk app was hidden (renamed) or not.
I even had an active abd connection while testing. 😜
No it makes no difference to me whether the Magisk is hidden or not.
FYI, I am not using the latest Magisk or Shamiko, because of the issue I have with the Zimperium zIPS app. (here)
Anyway, glad @angelomb found his solution and I'll stay in my current setup until it breaks :)
 
  • Like
Reactions: ipdev and angelomb

pndwal

Senior Member
Pixel 6 setup.
oriole-sq3a.220605.009.b1-factory-80f98167
app-debug (aka Magisk canary)
safetynet-fix-v2.3.1
LSPosed-v1.8.3-6552-zygisk-release
Shamiko-v0.5.1-115-release
denylist-v0.4
Just a minor note: Magisk Canary is now app-release, not app-debug...

If you installed app-debug, you're either on an old Canary build, or you've installed new Debug instead of Canary...

... And suddenly I thought I was in The life of Brian... Bit ironic if you happen to be Lord Brian... Wonder what his mum would say?

😝 PW

Nb. Life of Brian Cohen, Wise Man born (contentiously) in the 194th Olympiad, should not be confused with Life of Brian Corrigan, modern Australian Olympic Doctor of some note... which may be a further irony, especially if you were a Doc Brian...
 
Last edited:
  • Haha
Reactions: ipdev

ipdev

Recognized Contributor
Feb 14, 2016
1,852
1
3,260
Google Nexus 10
Nexus 7 (2013)
Did you test with these apps, my lord?
These app will beat your Shamiko and Momo detection ;)
No time to test at the moment but, I will give them a try in the next few days. 🙃

I will let you know my results sire. ;)

Cheers. :cowboy:
 
  • Love
Reactions: pndwal

ipdev

Recognized Contributor
Feb 14, 2016
1,852
1
3,260
Google Nexus 10
Nexus 7 (2013)
Just a minor note: Magisk Canary is now app-release, not app-debug...

If you installed app-debug, you're either on an old Canary build, or you've installed new Debug instead of Canary...

... And suddenly I thought I was in The life of Brian... Bit ironic if you happen to be Lord Brian... Wonder what his mum would say?

😝 PW

Nb. Life of Brian Cohen, Wise Man born (contentiously) in the 194th Olympiad, should not be confused with Life of Brian Corrigan, modern Australian Olympic Doctor of some note... which may be a further irony, especially if you were a Doc Brian...
I did not find where it was mentioned but, basically release is the 'lite' version.
The debug version is the 'heavy' version including extra logging and more for debugging the Magisk build. 🙃

I might be wrong but..

Both canary (release) and debug are released at the same time and John does not specify a difference between the two.
They both point back to the latest commit at the time of their release.

Magisk [GitHub] - Release new canary build
magisk-files [GitHub] - Update Canary Channel: Upstream to 9183a0a6
magisk-files [GitHub] - Commit history.​

So I assume the current debug version is still just the debug version of the canary build. ;)

The current Magisk build script.
./build.py --help
Code:
usage: build.py [-h] [-r] [-v] [-c CONFIG] {all,binary,app,stub,emulator,avd_patch,clean,ndk} ...

Magisk build script


optional arguments:
  -h, --help            show this help message and exit
  -r, --release         compile in release mode
  -v, --verbose         verbose output
  -c CONFIG, --config CONFIG
                        custom config file (default: config.prop)

actions:
  {all,binary,app,stub,emulator,avd_patch,clean,ndk}
    all                 build everything
    binary              build binaries
    app                 build the Magisk app
    stub                build the stub app
    emulator            setup AVD for development
    avd_patch           patch AVD ramdisk.img
    clean               cleanup
    ndk                 setup Magisk NDK


Cheers. :cowboy:
 

Lossani

Member
Sep 13, 2021
27
1
Odd. :unsure:

It worked for me a few different ways.

All I did was add the app to the Denylist.

Using the Denylist.
Denylist is enforced.​

Using the Denylist Unmount module.
Denylist is not enforced.​

Using the Shamiko module.
Denylist is not enforced.​

Did not make a difference if the Magisk app was hidden (renamed) or not.
I even had an active abd connection while testing. 😜


Tested on Pixel 6.
oriole-sq3a.220605.009.b1-factory-80f98167
app-debug (aka Magisk canary)
safetynet-fix-v2.3.1
LSPosed-v1.8.3-6552-zygisk-release
Shamiko-v0.5.1-115-release
denylist-v0.4

Cheers. :cowboy:

View attachment 5651385 View attachment 5651387 View attachment 5651389 View attachment 5651391
I have Shamiko and Magisk 25 and can't pass this Yape app
 

Top Liked Posts

  • 2
    OMG from 2650 pages in old magisk thread to 112 pages in this new thread. Is there an option in xda to add a sticky post like in TGram that tells the visitor for example : Step1 through StepN to bypass SNet for bank apps? (sorry if I appear lazy)

    you appear lazy

    most people manage to read the first page of the thread which gets you better than 99% of the way for 99% of people. The rest, and up to date fixes for any current or emerging issue (in any thread) will always be found in the last 5-10 pages, as makes sense. Dig in
  • 6
    Latest Official TJW Canary (release) & Debug (debug) Magisk builds:

    Magisk (f42c089b) (25102)​

    • [MagiskInit] Fix a potential issue when stub cpio is used
    • [MagiskInit] Fix reboot to recovery when stub cpio is used
    • [General] Better data encryption detection
    • [General] Move the whole logging infrastructure into Rust

    Diffs to v25.1​

    • [MagiskInit] Fix a potential issue when stub cpio is used
    • [MagiskInit] Fix reboot to recovery when stub cpio is used
    • [General] Better data encryption detection
    • [General] Move the whole logging infrastructure into Rust
    https://github.com/topjohnwu/magisk-files/blob/8fce25209918072f18b5bb056c43f596f771324d/notes.md

    👍 PW
    5
    How should I hide apps?
    ... its just an addon script that (attempts, as best possible) to hide whatevers in the Deny List
    Just to avoid confusion/ be clear, Shamiko does not hide apps (in denylist or otherwise)...

    It's akin to old MagiskHide, and hides traces of root from apps in the list...
    ### Introduction
    Shamiko is a Zygisk module to hide Magisk root, Zygisk itself and Zygisk modules like riru hide.

    Shamiko read the denylist from Magisk for simplicity but it requires denylist enforcement to be disabled first.
    @appleman_wp
    If you wish to hide apps detected by banks etc, try the Hide My Applist LSPosed module...
    I don't think Shamiko has a "Settings". I think you use the Magisk Manager app's deny list. If you do not "Enforce Deny List" in Magisk, then Shamiko will use Magisk's Deny List to tell it what to hide [traces of root] from.
    (Edits mine.)

    Generally Shamiko is used without settings / extra configuration.
    ### Usage
    1. Install Shamiko and enable Zygisk and reboot
    1. Configure denylist to add processes for hiding
    1. *DO NOT* turn on denylist enforcement

    However it can actually be reconfigured (by those game / mavericks 😛) for whitelist mode usage. Note caveats:
    #### Whitelist
    - You can create an empty file `/data/adb/shamiko/whitelist` to turn on whitelist mode and it can be triggered without reboot
    - Whitelist has significant performance and memory consumption issue, please use it only for testing
    - Only apps that was previously granted root from Magisk can access root
    - If you need to grant a new app root access, disable whitelist first

    ... ts theoretically possible to... bootloop your device... At which point myself and the other senior members will pass around the chalice of your tears and drink heartily from it...
    Sadist! 😜 PW
    4
    I have a problem with shamiko. I tried many times to install it via magisk. Itinstalls itsuccessfully however the app is not showing in the app drawer. Could someone help why shamiko is not on my device?

    It doesnt get added to the app drawer, its a module...many/most modules do not include an app in them

    Look in your list of modules section (last menu item in bottom right) in Magisk Manager, you'll find it there
    4
    Universal SafetyNet Fix?

    Check attestation with an app like YASNAC.

    I also remember having to pull my device ID hex value (I cant remember how), and registering the device with google on their certification website, so that my phone would be certified in google play.

    More recently, I had to use Magisk Build Prop editor to change the signature of my phone to an older (a11) firmware so that Google Pay would work.

    You can probably tell I'm no expert, so hopefully someone clever can come along and convert my garbage into something useful for you!

    Just a heads up that you should be able to revert the MagiskHide Props Config module fingerprint change (uninstall the module) and install this Universal SafetyNet Fix (modded) module to pass SafetyNet and have Google Pay working, seamlessly after doing so. This is currently the preferred way with least side effects per device. What it does, as explained in the post, is spoof an early Android version ONLY to Google Play SafetyNet, and otherwise retains your devices other props. Its a clever solution. Give @Displax a like if it works for you...

    4
    Isn't there a way to hide root from Company Intune Portal app? I tried downgrading but it doesn't work... :(
    See this thread
    People are struggling to make it work (including me). Some have manually re-installed the previous version.
  • 120
    This is a discussion and help thread for the newer versions of Magisk.

    The main goal of this thread is to help users migrate to Magisk v24+
    • SafetyNet
      Basic integrity Pass
      CTS profile match Pass
    • Play Protect certification
      Device is certified

    Feel free to discuss or give links to other Magisk related issues.
    Fixes for gPay, banking apps and/or other apps and games that detect a 'compromised' Android system.
    Please try to restrain from discussing alternative (unofficial) Magisk builds that include changes that were removed or can not be included in the official Magisk builds. 🙃

    Please read John's State of Magisk (medium.com)

    Starting with the Magisk 23 (23010) canary builds.
    • MagiskHide is removed.
      MagiskHide masked the sensitive properties of the device to hide it from SafetyNet.
      Renaming (repackaging) the Magisk app is/was not part of MagiskHide.
      You still have the option to Hide the Magisk app under setting.​
    • Magisk Module online Repo is removed.
      The Magisk Module online Repo is still available and can be accessed outside of the Magisk app.​
    • Everything SafetyNet is removed.
      This includes the SafetyNet check that was incorporated into the Magisk app.​
    • Zygisk is introduced.
      Zygote + Magisk = Zygisk​
    • The Deny list replaces the Hide list.
      The Hide list (more or less) hid Magisk from the process on the list.
      The Deny list is similar but instead of hiding Magisk from the process, Magisk is unloaded so there is nothing to hide.​

    Starting with the Magisk 23 (23017) canary builds.
    • Magisk supports update channels per module.
      Each module can include it's own update link.​
    • Hide Magisk offline.
      You do not need internet connection to rename (repackage) the Magisk app.​

    What does this mean?
    Not much.
    It is just the next step in Magisk's development.
    Zygisk is a big step forward. ;)

    Even before these changes in Magisk, the xda family and the Android community have always been active and willing to share. :D

    Jump to Post


    This is post will be updated once Magisk v24 is released.
    63
    Magisk
    The Magic Mask for Android.

    Magisk Links:
    GitHub
    Release Notes

    Download Links:
    Stable and Beta releases.
    Canary
    • GitHub
      The notes.md file is the change log.
      The app-debug.apk is Magisk canary.
      Click on app-debug.apk and choose View Raw or click on the Download option.​

    Credits:
    topjohnwu
    All who contribute and support this project.
    57
    Modules

    MagiskHide Props Config
    This module allows you to add, change and adjust prop values systemlessly using Magisk.​

    MagiskHide Props Config Links:

    Download Links:

    Credits:
    Didgeridoohan
    All who contribute and support this project.


    Universal SafetyNet Fix
    It has been a year now since kdrag0n figured out how to 'trick' SafetyNet.
    This 'trick' has been implemented properly into quite a few custom roms.
    For custom roms that do not include it and/or stock roms, he turned it into a module.​

    Universal SafetyNet Fix Links:

    Download Links:

    Credits:
    kdrag0n
    All who contribute and support this project.
    53
    Apps

    Fox's Magisk Module Manager
    This app allows you to manage and install Magisk modules.
    Including from an online repo.​

    Fox's Magisk Module Manager Links:

    Download Links:

    Credits:
    Fox2Code
    All who contribute and support this project.

    Play Intergrity API Checker
    This app shows info about your device integrity as reported by Google Play Services.
    If any of this fails could mean your device is rooted or tampered in a way (for example you have an unlocked bootloader).​

    Development:

    Download Links:

    Credits:
    1nikolas
    All who contribute and support this project.

    YASNAC - Yet Another SafetyNet Attestation Checker
    YASNAC (short for Yet Another SafetyNet Attestation Checker) is an Android app that demonstrates SafetyNet Attestation API.​

    YASNAC Links:

    Download Links:

    Credits:
    RikkaW
    All who contribute and support this project.
    43
    Force Basic Attestation

    Newer devices are designed to support hardware attestation.
    Currently there is no way to hide the sensitive device properties when checked using hardware attestation.​

    To get around this, kdrag0n figured out how trick SafetyNet that the device does not support hardware attestation.
    SafetyNet will then fall back to check using basic attestation.

    Note:
    This method will work for devices that support hardware attestation and devices that do not.
    • Enable Zygisk.
    • Install the USNF module.
    • Reboot

    To keep posts short, the instructions are hid by spoiler tags.
    If you have not installed Magisk.
    Follow the installation link in the Magisk post.​

    Download the Universal SafetyNet Fix module.
    Download link is in the Modules post.​

    1. Enable Zygisk
      • Open the Magisk app.
      • Go to Settings.
      • Scroll down to the Magisk section.
      • Toggle Zygisk on.
      • Go back to the Magisk Home screen.
    2. Go to Modules.
      • Select Install from storage.
      • Navigate to the Universal SafetyNet Fix module zip file and select it.
    3. Reboot.

    The USNF module will adjust the sensitive props that are needed to pass SafetyNet.
    Depending on the device and system (ROM) configuration, you might need to adjust a few more.
    See the Adjust Prop values post.​