[Discussion] Magisk - The Age of Zygisk.

[williamcll]

Anyone know what I need to get around Hang Seng bank's detection? Safteycheck is all good, but putting the app in denylist as well as closing almost all services in servicely doesn't work. Installing shamiko and turning off denylist doens't work either.

Edit: Island work

 

[dohanin]

Anyone know what I need to get around Hang Seng bank's detection? Safteycheck is all good, but putting the app in denylist as well as closing almost all services in servicely doesn't work. Installing shamiko and turning off denylist doens't work either.

Try disabling the Magisk app.

 

[williamcll]

that's a bit too far fetched, I also asked on the XDA discord and they told me to use Island, which worked.

 

[dohanin]

that's a bit too far fetched, I also asked on the XDA discord and they told me to use Island, which worked.

Well, using a work profile is more than just freezing the Magisk app, isn't it? Anyway, some people who need to reserve work profile for company use (like my case), cannot use island. And to clarify, I was suggesting to disable (i.e. freeze) the Magisk app, not Magisk itself.

 

[pndwal]

that's a bit too far fetched, I also asked on the XDA discord and they told me to use Island, which worked.

Not clear if you used/tried Hide the Magisk app in App settings...

Also, using HMA LSPosed module to further hide already hidden Magisk App also works for many bank apps... PW

 

[huskydg]

Well, using a work profile is more than just freezing the Magisk app, isn't it? Anyway, some people who need to reserve work profile for company use (like my case), cannot use island. And to clarify, I was suggesting to disable (i.e. freeze) the Magisk app, not Magisk itself.

If you compile a custom magisk with different custom package name by yourself, you will not have to freeze magisk app

 

[huskydg]

Zygisk is just for hiding root???? Since i just see you guys discuss about hiding root in zygisk thread

 

[dohanin]

Not clear if you used/tried Hide the Magisk app in App settings...

Also, using HMA LSPosed module to further hide already hidden Magisk App also works for many bank apps... PW

I guess he did. I did as well, but hiding Magisk app with a random package name appears not enough for some banking apps. For some reasons, they can still identify Magisk app unless it's disabled (or hidden by other methods like HMA) - well, I never understand this part. Are all apps allowed to look through other apps in the device, but not for apps that are disabled?

 

[pndwal]

I guess he did.

Hope so too... Not clear though...

I did as well, but hiding Magisk app with a random package name appears not enough for some banking apps. For some reasons, they can still identify Magisk app unless it's disabled (or hidden by other methods like HMA) - well, I never understand this part.

See this:
https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87078475

Are all apps allowed to look through other apps in the device, but not for apps that are disabled?

and this:
https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87078529

PW

 

[dohanin]

Hope so too... Not clear though...

See this:
https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87078475

and this:
https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87078529

PW

Thank you. But I found no explanation of why disabled app can avoid detection. There are some apps that can show a lot of information of installed apps (enabled or not), e.g. https://play.google.com/store/apps/details?id=com.majeur.applicationsinfo ,without requesting any permissions.

But why some banking apps only check enabled apps? Sorry if I missed some key points in your links.

 

[pndwal]

Thank you. But I found no explanation of why disabled app can avoid detection.

Still, you said

but hiding Magisk app with a random package name appears not enough for some banking apps. For some reasons, they can still identify Magisk app unless it's disabled (or hidden by other methods like HMA) - well, I never understand this part.

... the need for further hiding is explained; I went to some trouble to distil the info from that GitHub issue re. pattern matching etc...

There are some apps that can show a lot of information of installed apps (enabled or not), e.g. https://play.google.com/store/apps/details?id=com.majeur.applicationsinfo

Good share, thanks...

,without requesting any permissions.

This was possible in A10 but was supposed to be fixed in A11 in May 2021.

App Devs discovered an easy bypass however, using the QUERY_ALL_PACKAGES permission, and have since exploited this loophole (and others).

Google has been slow to patch /enforce their rules... Enforcement for compliance was pushed back to Nov ('for Covid-related reasons'), and it seems still not enforced till recently, but a new ultimatum gave June 1 2022 as the date apps would begin to be pulled for non-essential use of this permission or failure to issue a proper statement re. why use is 'essential'...

This is all in the link(s)...

But why some banking apps only check enabled apps?

I think they do whatever they can... Fraud / scams / hacking / device security are becoming critical issues... With IOS ahead of the game and Google's SafetyNet API an abysmal failure*, banks are becoming as inventive as possible and Google compliance rules are also viewed as fair game / expendable...

* Read 'Totally unreliable', at least while fallback from Hardware to Basic evaluation for attestation to TEE is possible; this effectively bypasses / makes a joke of (A)ndroid (V)erified (B)oot and it's 'Chain of Trust' ...

Sorry if I missed some key points in your links.

You did, but hopefully the summary will clarify a few things for all... PW

 

[williamcll]

Well, using a work profile is more than just freezing the Magisk app, isn't it? Anyway, some people who need to reserve work profile for company use (like my case), cannot use island. And to clarify, I was suggesting to disable (i.e. freeze) the Magisk app, not Magisk itself.

Turning off magisk might break my other apps.

Not clear if you used/tried Hide the Magisk app in App settings...

Also, using HMA LSPosed module to further hide already hidden Magisk App also works for many bank apps... PW

Zygisk was on as well as LSPosed and Shamiko was turned on the whole time and it didn't work.

 

[zgfg]

Turning off magisk might break my other apps.

Zygisk was on as well as LSPosed and Shamiko was turned on the whole time and it didn't work.

Please distinguish Magisk from Magisk app = former Magisk Manager

You even uninstall Magisk APPLICATION but Magisk, all its modules, root Grants, DenyList continue working as you previously configured.
Any time you install Magisk APK back. you continue using it

App is only user interface to make you managing the Magiske more easier - otherwise, you would need to use Magisk CLI )command line interface)

 

[dohanin]

Turning off magisk might break my other apps.

As said, I meant disabling (freezing) the magisk app, not Magisk itself. The app is only needed when you grant superuser access, adding apps to denylist, managing modules and other settings.

There are a number of apps which could automate the freezing. E.g. Airfrozen, Ice Box.

 

[pndwal]

Turning off magisk might break my other apps.

It won't... Even uninstalling Magisk App does not disable (or 'turn off') Magisk...

Some actually resort to uninstalling it during bank app use / when not needed... Works well enough for them...

Zygisk was on as well as LSPosed and Shamiko was turned on the whole time and it didn't work.

Still not clear if you used/tried Hide the Magisk app in App settings, or used HMA LSPosed module to further hide the already hidden Magisk App... PW

 

[m0han]

Fox's Magisk Module Manager updated to 0.5.3

Releases · Fox2Code/FoxMagiskModuleManager

A module manager for Magisk because the official app dropped support for it - Fox2Code/FoxMagiskModuleManager

github.com

 

[doniedogawa]

I just installed Magisk v25.1 on my LG V20 H990DS with stock oreo and success without having kernel issues, but the app itself can't be opened (stuck on logo).

 

[angelomb]

Anyone know what I need to get around Hang Seng bank's detection? Safteycheck is all good, but putting the app in denylist as well as closing almost all services in servicely doesn't work. Installing shamiko and turning off denylist doens't work either.

Edit: Island work

what is island ? how does it work? I have the same problem with an app , if yu have a link with a tutorial I would appreciate

 

[dohanin]

what is island ? how does it work? I have the same problem with an app , if yu have a link with a tutorial I would appreciate

Just search Island (from Oasis Feng) in Google Play. It sets up work profile, in which you can install your apps, and avoid root app detection.

But I still think it's too much work just to hide the Magisk app. I suggested simply freezing your Magisk app. It works for HSBC and some other bank apps too. Of course, you still need to add those bank apps to the denylist.

 

[angelomb]

Just search Island (from Oasis Feng) in Google Play. It sets up work profile, in which you can install your apps, and avoid root app detection.

But I still think it's too much work just to hide the Magisk app. I suggested simply freezing your Magisk app. It works for HSBC and some other bank apps too. Of course, you still need to add those bank apps to the denylist.

freeze it and it doesn't work either. It works in all banks except one. My mobile has Android 12 (Miui 13), when I had Andorid 11 (Miui 12) I had the same problem but solved it using the magisk 23. Magisk 23 does not work on Android 12 , I read that some block URLs with Adaway but there is not much information about it