MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0

[Atharkhan101]

4) If using Shamiko then must not be Enforce DenyList.
If not using Shamiko then must be Enforced.
That was many times debated in this thread and so.
Most of ppl use Shamiko, hence they have disabled Enforce

I know that and thank you as you informed. I read that Shamiko, HMA thing. I disabled DenyList of Magisk, Shamiko failed. I also tried Lsposed and enabled HMA (disabled DenyList of Magisk) that too failed. Just wanted to update you that out of 5 root detect apps including 2 banking apps, 4 apps worked and with Shamiko, HMA, Lsposed only one app could work, not the other 4. I think just for one banking app I should not screw all the 4 working apps.

Apps are:
HDFC Bank- Did not work
Axis bank - Works
RTO - Works
Medibuddy - Works
Rapido Captain - Works

I'm confident that if I use Shamiko, HMA, Lsposed I may get HDFC work but other 4 apps will not work. Just for one HDFC app I don't want to go installing other apps like Lsposed, Shamiko and their too many settings.

 

[Atharkhan101]

4) If using Shamiko then must not be Enforce DenyList.
If not using Shamiko then must be Enforced.
That was many times debated in this thread and so.
Most of ppl use Shamiko, hence they have disabled Enforce

I want to follow Shamiko properly so I need your help please. I'm sorry I read shamiko thing and I did not understood.

My condition now: I have magisk (hide mode) with Enforce denylist enabled and those 5 root apps selected already. Only the HDFC is not working and still detecting root.

So do I need to do below steps? Please correct the steps if you feel they are wrong:
-I have to disable the enforce denylist in magisk
-Flash shamiko.zip
-Then open magisk and enforce denylist and select root detect apps right?

 

[zgfg]

I know that and thank you as you informed.

HMA is not substitute for DenyList.
Nobody ever said to disable DenyList when using HMA

Putting a 'banking' app in DenyList is the FIRST thing every user must do, before asking here for help.
Otherwise we really waste time of our lives repeating the same BASIC FACTS

There are many other posts in this and other threads and there are threads here on XDA with guides in the OP posts about Zygisk, DenyList, Shamiko, USNF, HMA and the techniques of hiding

There are eg good guides in the OP posts in the following threads:

[Discussion] Magisk - The Age of Zygisk.

This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...

forum.xda-developers.com

Hide My Applist - A Brief Guide

Hide My Applist Guide As i'm no longer active on XDA, to make the guide more easily maintainable (multiple editor access etc) going forward, i have moved it offsite to github at the following address...

forum.xda-developers.com

I specially like Standard 73Sydney Disclaimer (about asking things instead of taking own time to search and read) - hence I will no more continue this debate

 

[73sydney]

@zgfg

73sydney​

I found a work around (no Lsposed, HMA, shamiko needed, they did not work too).

So,
1. I have cleared data and uninstalled the RTO, Medibuddy app which were detecting root and were not working.
2. Uninstalled Magisk
3. Reboot phone
4. Installed Magisk latest 25.2 > Settings > Enabled 'Zygisk' and Checked 'Enforce DenyList'
5. Hide Magisk (need to do this before installing those root detect apps from PlayStore)
6. Reboot
7. Installed RTO and other root detect apps from PlayStore (did not open them yet).
8. Magisk > Settings > Cofigure DenyList > Checked RTO and other root detecting apps.
9. Went back back to my phone's home screen.
10. Reboot.
11. Launched those RTO and other root detect apps and they worked!

I would say most root detecting apps would work with the above method however for me out of 5 Root detecting apps, 4 worked except HDFC bank app. It was working fine on Magisk Manager v23.0 with Magisk.zip v22.1.

Similar to this episode yesterday, where the root detection was ultimately being caused by the users TWRP folder (always check, and umm, recheck the basics folks) where i disabled Shamiko to prove, along with @zgfg that it must be something the user overlooked as we were doing the least amount of work to get his problem appto hide...i dont disable Shamiko for most examples, but it was warranted in this case...because nothing was adding up, and it needed to be shown that he must be overlooking something

We dont ALWAYS suggest HMA and Shamiko etc, i usually point out that Shamiko is always enabled on my device when im replying to a post and testing stuff for people though. We all like to use the least amount of gear where possible

 

[73sydney]

I want to follow Shamiko properly so I need your help please. I'm sorry I read shamiko thing and I did not understood.

My condition now: I have magisk (hide mode) with Enforce denylist enabled and those 5 root apps selected already. Only the HDFC is not working and still detecting root.

So do I need to do below steps? Please correct the steps if you feel they are wrong:
-I have to disable the enforce denylist in magisk
-Flash shamiko.zip
-Then open magisk and enforce denylist and select root detect apps right?

When using shamiko = DISABLE "Enforce Deny List"
When NOT using shamiko = ENABLE "Enforce Deny List"

 

[73sydney]

HMA is not substitute for DenyList.
Nobody ever said to disable DenyList when using HMA

Putting a 'banking' app in DenyList is the FIRST thing every user must do, before asking here for help.
Otherwise we really waste time of our lives repeating the same BASIC FACTS

There are many other posts in this and other threads and there are threads here on XDA with guides in the OP posts about Zygisk, DenyList, Shamiko, USNF, HMA and the techniques of hiding

There are eg good guides in the OP posts in the following threads:

[Discussion] Magisk - The Age of Zygisk.

This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...

forum.xda-developers.com

Hide My Applist - A Brief Guide

Hide My Applist Guide As i'm no longer active on XDA, to make the guide more easily maintainable (multiple editor access etc) going forward, i have moved it offsite to github at the following address...

forum.xda-developers.com

I specially like Standard 73Sydney Disclaimer (about asking things instead of taking own time to search and read) - hence I will no more continue this debate

We really have to stop meeting up and tag teaming the same old points from people at 4am-5:00am my time (not sure what time it is where you are This is getting a bit much

Rehashing stuff where a search or even as im always saying "read the last 6-12 pages of a thread people, usually already answered" is getting exhausting....

 

[Atharkhan101]

When using shamiko = DISABLE "Enforce Deny List"
When NOT using shamiko = ENABLE "Enforce Deny List"

Thank you very much. I can confirm that both did not make my HDFC bank app work. I literally invested hours on this and I think I have to live with it. All other 4 root detect apps working fine. Thank you and thank you @zgfg I cant imagine having phone without root though haha

 

[73sydney]

Thank you very much. I can confirm that both did not make my HDFC bank app work. I literally invested hours on this and I think I have to live with it. All other 4 root detect apps working fine. Thank you and thank you @zgfg I cant imagine having phone without root though haha

Im going to say this just like i did yesterday at 4am...only its now 6:38 Aussie time

at any point after changing anything in trying to defeat root detection and before opening the apps again, did you clear the data for the affected apps..

any time youre messing with root detected apps and you make a change in trying to defeat the app detecting root, you should clear the apps data

theres an outside chance if you didnt do this you may find it works

also like yesterday, did you try running a detection app like Ruru to see if your were failing anywhere?

Releases · byxiaorun/Ruru

An android sample app of detecting suspicious apps like magisk manager - byxiaorun/Ruru

github.com

and now i have to sleep


update:

Just before i headed to bed, i realised that that banking app rang a bell, becuase i only tested it weeks ago....we (a fe wof us) tested a few of them in a row, that was one of them, and it does work, using Hide My Applist....in fact when i just started up my Hide My Applist app, there it was still in the Effective App list...i installed it again from the play store just now, added it to the Deny List, and ran it....opened first go

[Discussion] Magisk - The Age of Zygisk.

This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...

forum.xda-developers.com

 

[pndwal]

...
Just before i headed to bed, i realised that that banking app rang a bell, becuase i only tested it weeks ago....we (a fe wof us) tested a few of them in a row, that was one of them, and it does work, using Hide My Applist....in fact when i just started up my Hide My Applist app, there it was still in the Effective App list...i installed it again from the play store just now, added it to the Deny List, and ran it....opened first go

https://forum.xda-developers.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87714843

Wasn't able to pass on my MIUI device (RN8T, A10) however... Remember this:
https://forum.xda-developers.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87715143

... Think we're taking Redmi Note 9 Pro Max here(?)... Anyone had success on MIUI?... I'd love to know what extra leaks need hiding and how... PW

 

[Atharkhan101]

at any point after changing anything in trying to defeat root detection and before opening the apps again, did you clear the data for the affected apps..

Yes I did clear cache and data.

also like yesterday, did you try running a detection app like Ruru to see if your were failing anywhere?

Installed Ruru, not sure what to check there. Its too much of geek for me. I like what you said earlier like everybody likes to have few gears

Just before i headed to bed, i realised that that banking app rang a bell, becuase i only tested it weeks ago....we (a fe wof us) tested a few of them in a row, that was one of them, and it does work, using Hide My Applist....in fact when i just started up my Hide My Applist app, there it was still in the Effective App list...i installed it again from the play store just now, added it to the Deny List, and ran it....opened first go

That HDFC Banking app appears to work but not actually. When you in real, enter the Customer ID and Password, it crashes and takes you browser picker. When I select Chrome, nothing happens. I have Titanium Backup and also checked with the previous version of HDFC app Still no success will use the website instead of app. Just don't want to install other apps Lsposed, HMA and configure so many settings just to make this ONE app work and can fail the OTHER 4. I'm good with Magisk Enforce denylist. Refer the attached screen record

https://drive.google.com/file/d/1IDDmPlHPgl59MeeksxzkI0vflO7Qj8zl/view?usp=drivesdk

If some dev take over Magisk/Zygisk then the enforce deny list/deny list can be improved.

 

[pndwal]

If some dev take over Magisk/Zygisk then the enforce deny list/deny list can be improved.

There are already Devs/forks that do just that, allowing use of either hidelist or denylist as well as special tweaks (many experimental) for better Zygisk hiding etc etc...

Don't expect this happen in official Magisk however...

John has been following his own roadmap for Magisk and has said he has not plans to abandon it. In 2020 he said:

I don’t see myself stepping down from Magisk in the near future. Magisk is too important for me to abandon it.

https://topjohnwu.medium.com/state-of-magisk-2020-21de32721d65
And in 2021:

I will do my best to continue contribute to the Android modding community!

https://topjohnwu.medium.com/state-of-magisk-2021-fe29fdaee458

Also, while he won't now state it plainly, code injection (Zygisk project) was always about providing a better framework for 'proper ways to "hide" root and Magisk Manager/App'... See these comments back in 2020:
https://forum.xda-developers.com/t/magisk-general-support-discussion.3432382/post-84104161

He's said it's up to other Devs to 'step up' and 'start doing their job', ie making zygisk based hiding modules if they're passionate about that... He's also said he wishes people wouldn't fork Magisk for restoring MagiskHide however...

So the future of root hiding is very much in the hands of 3rd party Devs (John has stated as much for a while now too), and it must be said that this makes the whole exercise, including choosing individual hiding solutions, necessarily more complex and challenging than it used to be... but there are also many more options and more effective methods... Such is the modern cat and mouse game of root hiding... PW

 

[73sydney]

Wasn't able to pass on my MIUI device (RN8T, A10) however... Remember this:
https://forum.xda-developers.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87715143

... Think we're taking Redmi Note 9 Pro Max here(?)... Anyone had success on MIUI?... I'd love to know what extra leaks need hiding and how... PW

I notice youre never around for the 4-5am shift, you terrible pedant ....

 

[digger16309]

@Atharkhan101 Are you running an ad-blocker at any level? For example, I've found that some of these "detect root" scenarios are actually AdAway blocking the sign-in domain as unsafe.

 

[pndwal]

FYI: Looks like we may finally be getting official Universal PI deviceIntegrity Fix in USNF!

It'll be nice to have a working fix linked from OP here again too...

... So seems @kdrag0n has found proper hooks to set and revert the fingerprint used for mismatch trigger for PI hardware based verdict enforcement bypass making this proposition less of a stop-gap fix with far less likelihood of breaking print prop related stuff... He'll also implement the additional @anirudhgupta109 shipping API level prop mismatch needed for Pixel 7 and other A13 LV devices (already adopted by @Displax in his forked USNF mods)... See here:
https://github.com/kdrag0n/safetynet-fix/pull/207#issuecomment-1340460803

Watch this space! ... And thanks for efforts @kdrag0n.

PW

 

[Atharkhan101]

Does anyone know why it doesn't select all items in oo

@Atharkhan101 Are you running an ad-blocker at any level? For example, I've found that some of these "detect root" scenarios are actually AdAway blocking the sign-in domain as unsafe.

Yes I use Adaway and I'm confident that it is not cause any issue because I tried to freeze it in Titanium backup and additionally it used to work in 22.1 Version of magisk WITH Adaway ON.

 

[zgfg]

Does anyone know why it doesn't select all items in oo

Yes I use Adaway and I'm confident that it is not cause any issue because I tried to freeze it in Titanium backup and additionally it used to work in 22.1 Version of magisk WITH Adaway ON.

If you have Systemless hosts enabled and you freeze AdAway, /data/adb/modules/hosts/system/etc/hosts file will remain, and Magisk will still mount it (even upon reboot) to the /system/etc/hosts, ie blocking will be still in place

Only if you use AdAway in the non-root/VPN mode, then freezing will really stop blocking

Nevertheless, I don't understand why complicating
AdAway has Pause/Resume button. Just Pause, reboot and then you're sure that AdAway is no more blocking until you Resume and reboot again (reboots not needed if using AdAway in the VPN mode)

 

[Atharkhan101]

If you have Systemless hosts enabled and you freeze AdAway, /data/adb/modules/hosts/system/etc/hosts file will remain, and Magisk will still mount it (even upon reboot) to the /system/etc/hosts, ie blocking will be still in place

Only if you use AdAway in the non-root/VPN mode, then freezing will really stop blocking

Nevertheless, I don't understand why complicating
AdAway has Pause/Resume button. Just Pause, reboot and then you're sure that AdAway is no more blocking until you Resume and reboot again (reboots not needed if using AdAway in the VPN mode)

Already done all you said. Still nope!

 

[m0han]

... Putting a 'banking' app in DenyList is the FIRST thing every user must do, before...

... even running it for the first time, may I add?

... at any point after changing anything in trying to defeat root detection and before opening the apps again, did you clear the data for the affected apps....

I thought I read somewhere: Turn ON airplane mode, Clear cache and data of the apps, Reboot and Turn OFF airplane mode before running the apps again.

I want to follow Shamiko properly so I need your help please. I'm sorry I read shamiko thing and I did not understood....

If the latest official Shamiko-v0.6-126-release.zip here does not work, you might like to try Shamiko-v0.6-130 (see screenshot). For more, see/use the Telegram channel.

 

[bombadier]

If the latest official Shamiko-v0.6-126-release.zip here does not work, you might like to try Shamiko-v0.6-130 (see screenshot). For more, see/use the Telegram channel.

Which telegram channel?

 

[kamilchno]

Which telegram channel?

|ZH/EN|\|SFW| LSPosed Discussion

Channel: @LSPosed ZH/EN 禁止阴阳怪气/No sarcasm； 严禁涉政、机场、广告/ No ads or politics； 不得私聊管理/ NO pm admins； 提问前请先看所有置顶/ Read all pins first； 反馈问题请带日志 / Must report with log； 严禁社工 / No dox； 严禁开挂 / No Cheat； 提问时自称小白会被警告； 不要讨论某框架管理器开发者。

t.me