LSPosed Xposed Framework [8.1-13.0]. Simple Magisk Module

What Xppsed Framework are You Using??


  • Total voters
    1,723
Search This thread

Fif_

Senior Member
Jun 5, 2013
1,246
1,370
Google Nexus 10
Google Nexus 4
can anyone advised to uninstall this via adb or recovery..? i presume that lsposed is forcing my phone back into boot loop..?
Ow, sorry to hear.
If you have access to adb in recovery and you can decrypt /data, you can remove /data/adb/modules/zygisk_lsposed.
If not, should be able to boot into safe mode, which disables all Magisk modules, after which you should be able to recover.
 

cognitivedissonance

Senior Member
Jan 11, 2012
668
217
Think of it this way - LSPosed is a somewhat new version of Xposed. Both are an unofficial Android framework made for changing codes of system apps. By changing these codes, new customization options and features can be added to the Android device using the LSPosed Framework.

-- Most modules that I have thrown at LSPosed that were designed for XPosed have stuck thus far.
-- Bear in mind that some XPosed modules just will not function on LSPosed [hit or miss].

You can also compare the alternative projects

-- TrustMeAlready - Disable SSL verification and pinning on Android, system-wide

-- VirtualXposed - A simple app to use Xposed without root, unlock the bootloader or modify system image, etc.

-- Hide-My-Applist - An Xposed module to intercept applist detections

-- Riru - Inject into zygote process

-- XPrivacyLua - Really simple to use privacy manager for Android 6.0 Marshmallow and later

-- MagiskOnEmulator - Install Magisk on Official Android Emulator

-- Magisk-Ad-Blocking-Module - Magisk module to block ads on android

-- riru_edxposed

-- TaiChi - A framework to use Xposed module with or without Root/Unlock bootloader, supportting Android 5.0 ~ 11.

-- EdXposedManager - Companion Android application for EdXposed
Thanks for the list, I wasn't aware that so many of these existed because I haven't messed with Xposed for probably 6+ years at this point. My current setup is Pixel 2 XL, Android 10, Magisk, SafetyNetFix, Shamiko and it's solid - even the best root detectors (the Chase app) isn't noticing root at this point, which is very impressive.

Anyway, I'm considering trying to get unlimited original quality photos back w/ Pixelify, which uses either LSPosed or EdXposed. You seem to have a very good understanding of the options available, so I was wondering if you'd suggest one over the other. Thanks!
 
  • Like
Reactions: thomasnsr

TraderJack

Senior Member
Oct 5, 2008
533
345
Google Pixel 3 XL
Can someone explain on both a basic an somewhat technical level the "Parasitic" mode of LSposed is?
I understand that it means the app remains installed and functioning even when removing the manager.apk.
I assume this is to help prevent in detection.

However the whole idea is rather nebulous and I'm unsure if the "Parasitic" term is a general Android development term or a catchy term just being used by LSPosed devs?

Can someone explain in a bit of depth why it is needed, how it works, and major benefits/drawbacks of it?
 

josephcsible

Senior Member
Nov 3, 2016
225
93
Can someone explain on both a basic an somewhat technical level the "Parasitic" mode of LSposed is?
I understand that it means the app remains installed and functioning even when removing the manager.apk.
I assume this is to help prevent in detection.

However the whole idea is rather nebulous and I'm unsure if the "Parasitic" term is a general Android development term or a catchy term just being used by LSPosed devs?

Can someone explain in a bit of depth why it is needed, how it works, and major benefits/drawbacks of it?
It means it forces your phone's Settings system app to create and own the launcher widget for the manager. It works by injecting into the Settings app through the Xposed API.
 

TraderJack

Senior Member
Oct 5, 2008
533
345
Google Pixel 3 XL
It means it forces your phone's Settings system app to create and own the launcher widget for the manager. It works by injecting into the Settings app through the Xposed API.
Still a bit confused. LSposed is Xposed right (a particular implementation of it), so how does LSposed inject itself through an API if it isn't already loaded?

Additionally though, I'm interested in why? What is the advantage of it. I would think that anything which could be written to detect it normally should be able to detect it in this mode as well since it still needs to have traces in specific places.

thanks.

p.s. I'm happy to actually read something already published on the matter, but haven't been able to find much.
 

robinho8618

New member
Jul 25, 2022
1
0
Moderator Translation:
Why am I not able to update xposed?

Porque não estou conseguindo atualizar o xposed?
 
Last edited by a moderator:

xn0live

Senior Member
Dec 22, 2012
1,625
393
What did i wrong?
 

Attachments

  • Screenshot_2022-07-30-12-39-40-808_com.topjohnwu.magisk.jpg
    Screenshot_2022-07-30-12-39-40-808_com.topjohnwu.magisk.jpg
    341.8 KB · Views: 99
  • Screenshot_2022-07-30-12-39-35-763_com.topjohnwu.magisk.jpg
    Screenshot_2022-07-30-12-39-35-763_com.topjohnwu.magisk.jpg
    277.8 KB · Views: 100
This has been discussed at length, try the following:
- Hiding the Magisk app (pay attention that you'll need to unhide before applying future Magisk upgrades)
- Freezing the Magisk app before launching your banking apps.
- DenyList Unmount (open source) or Shamiko (closed source, more powerful at hiding)
- Hide My AppList (HMA) or XprivacyLua with app list hooks enabled.

Search XDA for the details, and read the instructions.
My setup
Magisk 25.2 Zygisk
AirFrozen to freeze magisk
Shamiko 0.5.2
Old + Uninstalled
LSPosed 1.8.3
Hide My AppList 2.3.2

I too have similar issue with banking apps, specifically ICICI and SBI banks.
I have all your said setup but as long as LSPosed is installed those bank apps are detecting root. I tested in rootbeer and Oprek Detector and Applist detector and all pass but still bank apps detect root. (apps dont show anything like detected instead crashes)
I uninstalled LSPosed and Hide My AppList and then ICICI works but SBI still complains about TeamViewer app installed. (SBI detecting apps list for TeamViewer as harmful app)
For this I need to use HMA but I cant.
I need your help here.

Any specific modules to install in LSPosed and any other way for LSPosed to be not detected by bank apps
 
  • Like
Reactions: digger16309

Top Liked Posts

  • There are no posts matching your filters.
  • 4
    lsposed stopped working on my poco f1 after upgrading from lineage-21.0-20240319-nightly-beryllium-signed.zip to lineage-21.0-20240416-nightly-beryllium-signed.zip, the manager won't open and the UI will freeze for a few seconds. Downgrading to 20240319 fixed lsposed again
    1
    Would like to say, that i am very sorry that this great project was abandoned. A quality module, providing many possibilities, supporting even OEM skins and old Android versions (recently they released a fix for Android 9 or something like that). I understand, that nobody likes to work for free, therefore i supported the project - luckily, i have the possibility to do it. But now it is gone, because of some idiots, who decided to bully the devs. Very sad. You can do something good or support it, but at all case there will be someone around, who will come and destroy it. But of course, a donation doesn't bind anyone to anything.

    I hope, that the devs will maybe reconsider their decision at some time.

    View attachment 6070432
    There are three good new forks:
    Mod by mywalkb https://github.com/mywalkb/LSPosed_mod
    Mod by pumPCin https://github.com/pumPCin/LSPosed
    Mod by CMDQ8575 https://github.com/CMDQ8575/LSPosed
    1
    We will wait until A15 is officially out, i think, then it will be clear if there will be a reborn of LSPosed and if yes - which one it will be.
  • 88
    Developers: LSPosed Developers
    Homepage: GitHub
    Requirements:
    • Magisk 21+
    • Android 8.1-13

    Riru(NOT NEEDED) USE ZYGISK
    Description:
    Riru module providing ART interception framework (natively for Android Pie) that provides consistent API -interfaces with OG Xposed, using YAHFA (or SandHook) interception environment, supports Android 8.1 ~ 11.
    & Installation:
    • Install Riru 23+
    • Install Riru - LSPosed via Magisk Manager
    • Install LSPosed Manager app (Note: No Saparate App and Zip, App Will be Installed Automatically)
    • Reboot your device.


    Download:
    For stable release, please go to Github Release page For canary build use telegram.
    Go to second post for latest version Download

    Notes:
    I'm just sharing this from github, I'm not responsible if you bricked your device.

    GPay and other banking apps working fine without any issue so this xposed alternative is worth trying and safer.

    Note: If anyone facing bootloop issue, don't panic, hard reboot again and it will work.


    Screenshot:
    33
    Download:
    Flash zip file through magisk and then install LSPosed Manager app

    Update 1 March 2021
    V1.2.0

    V1.3.7 Updated 15.May.2021
    (Note: No Saparate App and Zip, App Will be Installed Automatically)


    For Newer Version Changelogs and Downloads:
    LsPosed Github




    Changelog

    • Fix manager white screen
      [*]Support split-apk modules (LSPosed will choose only one apk with xposed_init to load)
      [*]Fix manager crash when launching an uninstalled module from notification
      [*]Load modules with SharedMemory (it can speedup app cold launch) 2
      [*]New manager icon
      [*]Fix incorrect update notification in the first installation
      [*]Fix some apps not showing in the scope list in some rare cases
      [*]Show notification of module uninstallation
      [*]Prevent modules from hooking inner methods (methods from XposedBridge's classloader)



    Note:

    Previously LSPosed only recognize modules from the primary user. However, this strategy is not good and leads to some problems: some modules require getting installed app lists for configuration but they cannot do so across users; some require reading themselves from the hooked apps but they cannot do so from non-primary users; some users want to configure modules differently on different users which is not feasible previously. Thus LSPosed now requires every module to be installed to the user on which the apps they want to hook are installed. Some devices restrict modules from installing onto some users. In such a case, you can install them from the manager (but it's recommended).

    1: For some weird devices that prevent installing apps from the root user, please install the manager from /data/adb/lspd/manager.apk or manager.apk from the zip file manually.

    2: Some modules get modules' apk path using reflection of its classloader, it's not recommended and unstable since the apk path from classloader no longer exists when using SharedMemory to load modules. Please use the documented way (from IXposedHookZygoteInit.StartupParam.modulePath) instead.
    19
    Why it's safer than EdXposed?
    I didn't say it's safer than edxposed. I meant xposed alternatives like taichi etc.
    All banking apps works, no system slowdown, i got more free ram etc.
    In edxposed the hooked apps take time to open, no such issue with LSPosed.
    That's why i thought it's worth trying and safer.
    17
    I was considering that until I made an Automate flow to automatically add newly installed apps to select Xposed modules' scope.
    By popular request, this is my setup for automatically adding newly installed packages to some user-defined LSPosed scopes.

    [EDIT:] These instructions have been updated on February 1, 2022 and the zip file has been updated on November 14, 2021.

    Requirements:
    Caveats:
    • LSPosed won't pick up the changes until the device is rebooted.
    Instructions:
    1. Unzip the attached LSPosed-Auto-Add.zip
    2. Create the /sdcard/usr/bin directories.
    3. Move lsposed-scopes-add from step 1 file to /sdcard/usr/bin. The file full path must be /sdcard/usr/bin/lsposed-scopes-add
    4. Move xposed-modules-status from step 1 file to /sdcard/usr/bin. The file full path must be /sdcard/usr/bin/xposed-modules-status
    5. Launch Automate, go to settings and change the Superuser command from its default of
      Code:
      su
      to
      Code:
      su -mm
      .
    6. Import LSPosed Auto Add.flo in Automate.
    7. After the flow is imported, grant all needed permissions.
    8. In the imported flow, start Configure. You should see a list of active LSPosed modules like the one seen on the attached screenshot.
    9. Toggle the modules as needed. If shown with a check mark, any newly added package will be added to the module's scope.
    10. Press Cancel to exit from the module list.
    11. Make sure that Automate is set to start at boot (in Automate settings).
    There should be two automate fibers running in the flow. If it stops for whatever reason, just start the Init flow.
    You can add and remove modules at any time by launching the Configure flow.

    Changes:
    • 2021-11-01: Provide missing script.
    • 2021-11-08: Force running scripts in / in Automate flow.
    • 2021-11-14: Also support parasitic manager.
    • 2022-02-01: Add "su -mm" instructions for newer versions of Automate.
    Thanks to @Open.Orange, @spawnlives and @randomwordhere for testing.
    14
    I have it working on the Poco X3 NFC, running RR, loaded and runs without issue, I used the YAHFA option, has updated without issue.

    Thought I should add that I can't get SafetyNet on, but I've never been worried about that, I think I've only ever had it working once on one of my devices years ago. The one app that refused to play nice I just used MagiskHide on, and it's not a problem now.

    In saying that I only have one module loaded, I haven't had time to go looking for the below answers, to install any others.

    The only thing I haven't figured out yet is what apps need to be picked with what modules, sure some are obvious as they are named after the apps, but is there anything else that needs to be picked with them? For example, do I need to pick the framework app with everything, I'm sure I don't, but how do I know?
    I'm using YAHFA myself, even though I was using SandHook earlier with EdXposed. Also, I'm passing SafetyNet without an issue and Play Store shows certified as well, so that's nice.

    Coming to your question about "scope", basically for a module, you have to select the apps that are hooked by the module. This is pretty straightforward for modules that hook a specific app, for example, if you're using WATweaker, you have to select WhatsApp in its "scope". Similarly, another example, if you're using Instaprefs, you have to select Instagram in its "scope". However, for more systemwide module (like GravityBox, for example), multiple apps have to be selected in the "scope" as the module is more global in nature, so to speak.

    The only way to figure out which apps need to be added in scope for a module is to ask the module developer or by trial and error. Taking GravityBox as an example, you'll find the list of apps that need to be selected for its scope in the first post of its thread (under apps that need to be whitelisted; "whitelisted" term being used in context of EdXposed, since when the post was written, LSPosed wasn't a thing).

    Also, modules can auto-add recommended apps to their scope, but the responsibility of making that happen lies with the module developer. Once again, taking GravityBox as the example, if you install GravityBox in LSPosed, you don't have to select apps manually in its scope. They're auto-selected since the developer has added support for LSPosed and auto-selection of scope apps.

    I know the reply is long-ish, but I hope it helps you and the others who had similar questions. :)