yashsingh1/xdaforums huggingface dataset:
[Xposed Framework Modules] devadvance:
using the NDK allows you to do native calls/standard library functions directly. For example, Web TV by Stofa use fopen and access to check for the existence of the su binary. Here's (more or less) the assembly code from the library:

MOV	R0, R10	; filename
MOVS	R1, R4	; modes
BLX	fopen
CMP	R0, #0
BEQ	loc_1234A
loc_1234A
LDR	R0, =(aSbinSu - 0x217AA)
MOVS	R1, #0	; type
ADD	R0, PC	; "/sbin/su"
BLX	access
CMP	R0, #0
BNE	loc_1235B

Edit: Another example is the Barclays Mobile Banking app. Unless there is a way to avoid using a File constructor to access the file system in Java, it is using a native library instead: Here is the sequence when watching using FileObserver:

OPEN:/system/xbin/su
ACCESS:/system/xbin/su
ACCESS:/system/xbin/su
[Xposed Framework Modules] SUer:
Yeah, gutted to report it doesn't work for me on the Barclay's app. Would have been a nice Xmas present if this was sorted.
[Xposed Framework Modules] Emp_M:
Hey, just letting you know that RootCloak successfully hides root from ParcelSend.
[Xposed Framework Modules] nt1001:
Good For Enterprise: Compliance Check Failed
[Xposed Framework Modules] jjc5891:
****! I had high hopes for this module as root is holding me back from getting my corporate email on my Nexus. Still need to carry around by wifi-only 3GS until this gets figured out.
[Xposed Framework Modules] c-dric:
Hello,

I have a bad news and a very good news...

I start with the bad: I'm totaly stupid. I did all my test about Worx with you're xposed module not activated... Yes I know....

And now the very good one, Citrix Worx see me un-rooted !!! Thanks Father Xmas ! You're my hero !

I hope you didn't work to hard on the case...

I'm realy sorry !

C-dric
[Xposed Framework Modules] devadvance:
Glad to hear it ended up working :D while i don't mind the challenge of a bunch of other apps not working, its nice having a few that do!
[Xposed Framework Modules] quadomatic:
I'm testing Airwatch MDM with the current version of RootCloak, and it doesn't appear to be working. My phone is encrypted as well. I could test more builds to see if any fixes solve this.
[Xposed Framework Modules] omondisingh:
Barclays Mobile Banking - Barclays - https://play.google.com/store/apps/details?id=com.barclays.android.barclaysmobilebanking

Root Detected.
[Xposed Framework Modules] Martinhdk:
Not working on HBO Nordic, yet :)
[Xposed Framework Modules] LeftyGR:
Successfully works with Flixster!

♢NoteIII♢
[Xposed Framework Modules] benson621:
i want to use my rooted zperia Z to play Puzzle & Dragons (https://play.google.com/store/apps/details?id=jp.gungho.padEN)

i followed the steps above and add "jp.gungho.padEN" into the list, and it still doesn't help

anyone can play P&D with this mod? thanks
[Xposed Framework Modules] hkcheater:
Same as me, hope future release can fix this.
[Xposed Framework Modules] mrbobo1:
+1 on airwatch mdm showing compromised status, I am incredibly excited to see you working on this though!
[Xposed Framework Modules] spetrie:
Does not work with Barclays app 1.7.3
[Xposed Framework Modules] orgl:
Pushtan APP from german Sparkasse also does not work.

Gesendet von meinem Nexus 5 mit Tapatalk
[Xposed Framework Modules] devadvance:
Is this the app you are talking about?

Sparkasse - Star Finanz GmbH - https://play.google.com/store/apps/details?id=com.starfinanz.smob.android.sfinanzstatus

If it is, did you add it to RootCloak using the Add/Remove Apps function? Also, if Sparkasse was already running, you need to either Force Close it, or reboot your phone.
[Xposed Framework Modules] orgl:
I am talking about

play.google.com/store/apps/details?id=com.starfinanz.mobile.android.pushtan

I added the app in Rootcloak and then started the app pushtan.

You can simply test the app start without an account.
[Xposed Framework Modules] zakkkkk:
Can anyone confirm this work with sky go?
[Xposed Framework Modules] devadvance:
Doesn't currently work with Sky Go (see first page for more info). Looking into ways around that now.
[Xposed Framework Modules] Athica:
RootCloak not working with DramaFever app

So I'm fairly new still to the rooting world. I have successfully rooted 3 devices so far: HTC EVO, Motorola Triumph, and currently my Galaxy Note 3. However, on my note 3, once superuser becomes active, DramaFever would play only ads then go back to my queue list. Netflix would not play videos. I used RootCloak and enabled it for those two apps. It worked for Netflix, but DramaFever still only plays ads before returning to my queue list. I double checked RootCloak for what apps root was hidden from, I cleared DramaFever's data, disabled then re-enabled RootCloak, rebooted my phone, but DramaFever was still only playing ads. I factory reset my phone and DramaFever started working. Then I checked root using the titanium backup, granted the SuperUser request, installed DramaFever, added it to RootCloak list, played it and it's back to playing only ads. I am not sure what I'm missing, or how to fix it. I have looked online for something similar but results are more aimed towards Netflix and Hulu users. I would greatly appreciate some enlightenment on how I can resolve this issue. Thanks!
[Xposed Framework Modules] nth0814:
They are checking is it have a Superuser.apk. just rename to supersu.apk is ok.

They also will check the kernel boot.img.

just modify to the following:

ro.secure=1

ro.debuggable=0

persist.service.adb.enable=0

and need to disable the root on supersu. :(
[Xposed Framework Modules] Chronei:
Anyone get working with final fantasy 6? No luck on my end
[Xposed Framework Modules] se1988:
Do you have gamecih or any other cheat engine app installed? Add it to the hidden list. Helped for avabel
[Xposed Framework Modules] buu1152:
I've been spamming on how come avabel doesn't work for me.. You got it to work? I do have a gamecih, so I'm gonna do that right now! Anything in particular besides adding that app to the hidden list to get avabel to work?

Latest °Purity & Franco°

---------- Post added at 07:55 PM ---------- Previous post was at 07:17 PM ----------

Hey I added game killer to my hidden list and it still detected root for avabel, I just uninstalled it though.. And now avabel works, for the first time!! (:

I'm curious as to how u had that cheating app still installed while u played avabel, I just added my app (game killer) to the hidden list, but still detected.

Thanks for your enlightening idea, you made my day, no my week for that matter!

Latest °Purity & Franco°
[Xposed Framework Modules] pankomputerek:
Would it be possible to patch it for mobile banking app?

https://play.google.com/store/apps/details?id=com.barclays.android.barclaysmobilebanking
[Xposed Framework Modules] se1988:
I added these to the Keywords list:

com.cih.game_cih

gameCIH

game_cih

Also, i added all the root-only apps and xposed modules to the list.

Works perfect for avabel. Some other apps wont work tho.

[MENTION=2804938]devadvance[/MENTION] : I tried rootcloak+ for Tv2 Sumo app, still no luck. Crashes on boot with rc+, still detects root with rc xposed...
[Xposed Framework Modules] mic4126:
puzzle and dragon seems to try to detect xposed installer and xposed modules

if convery xposed modules and install to system app ,it would start if it is hk and tw version

The JP version woluld still try to detect root.

the last point the jp ,hk,tw puzzle and dragon seem to check does the rom have secure ramdisk

i have install both jp and hk version of pad and hk version would start if the ramdisk is secure and xposed related stuff is converted into system app
[Xposed Framework Modules] fei0316:
So do you have any idea on ways to prevent Japan version of puzzle and Dragons from detecting root?
[Xposed Framework Modules] :
Ummm.... Can anyone explain the 2906 copies of FAKEJUNKFILE.apk created after installing root cloak? Uninstalled.
[Xposed Framework Modules] cadarn07:
Where did it install these? I've never seen them.
[Xposed Framework Modules] :
Well, there were THOUSANDS of copies. Absolutely everywhere. Every system folder.

I couldn't delete any of these files, as they seemed to be corrupted and when I looked at their details, it said "0.00 Bytes, Date Created 1\31\1969" or something like that. No matter how many times I tried, the file wouldn't delete.

Curious, I searched for the file name, "FAKEJUNKFILE.apk" and saw that they were literally everywhere in almost every folder. Total # of generated files: ≈2900. I couldn't figure out where these files were coming from, so installed some antivirus software, avast!, and it said there was nothing wrong. I scanned all of the internal storage, same results, "No problems found".

Clearly there was a problem, or I wouldn't have 3000 mystery files on my Nook!

So, I searched for the exact filename, "FAKEJUNKFILE.apk, and THE ONLY RESULT that came up, was this thread.

EDIT: Looked at the page again, saw it had something to do with Ingress.

HOWEVER, I've never installed Ingress on the ROM I'm running now, and when I deleted Root Cloak, every file disappeared
[Xposed Framework Modules] cadarn07:
Thanks for reporting your findings. For what it's worth, I have none of these on my phone. But that's crazy nonetheless.
[Xposed Framework Modules] lorikitty:
I reset Dream House Days, restarted a few times, and reinstalled. It finally let me load the game, but I had to restart :(
[Xposed Framework Modules] riz1234:
So recent update to Lloyds Bank app introduced the check.

Currently it RootCloak doesn't work on that.

Is it possible to take a stab at that?
[Xposed Framework Modules] soralz:
Thanks, now downloading Data. Tyvm :good:

And thanks to OP for such a great mod.
[Xposed Framework Modules] jemael972:
no possibility to add be in sports ??
[Xposed Framework Modules] ekx:
Superuser Elite Hide'n

Hello,

The bancontact app also seeks for the app superuser elite (paied version of superuser). If that is installed, the bancontact app will not run!

RootCloack plus will not help.

Is there a possibility to hide applications?
[Xposed Framework Modules] mrbobo1:
pretty sure you just add the file name of the app you want to hide to the list
[Xposed Framework Modules] footballrocks91:
The sky go app is also not supported by root cloak. I've seen other threads pointing towards installing different kernels, but is there a way for root cloak to hide root for sky go? Because this app doesn't allow you to live stream TV with root access. Any advice?
[Xposed Framework Modules] krasnoff:
Can you add support for this app?https://play.google.com/store/apps/details?id=com.megalabs.megafon.tv
[Xposed Framework Modules] ianjranson:
Lloyds Bank root checking

I've had the same issues with my rooted Nexus 7 (2013) but I've managed to get it working with Root Cloak by adding some extra information to the blocked commands/keywords (I'm not sure what exactly caused the success).

I extracted the apk and after doing a bit of digging I found a file called jbtest.java (src\com\dbotha\brapp) which contains the code for three root checking methods:

1. checking to see if the build tags includes the string "test-keys".

2. checking to see if the file "/system/app/Superuser.apk" exists.

3. I'm not sure, it is called check_su_binary, I assume it looks inside "/system/xbin/which" for the term "su".

I'll need to do a bit more research into which command/keyword prevents the app from detecting the root.

Seems I can't hyperlink to where I've put the jbtest.java file source code on Pastebin so here it is:

pastebin(dot)com/V3dw5w7Y

Hope this helps
[Xposed Framework Modules] plethorahil:
Z launcher

Needed this to test Z launcher and it works perfect ..Thanks
[Xposed Framework Modules] smardu:
It worked fine against the latest google device policy until today..
[Xposed Framework Modules] The_Sid21:
It doesn't work for me :( Still the same Error on on Z launcher... I don't understand...
[Xposed Framework Modules] mrbobo1:
make sure you add zlauncher in rootcloak using the plus sign, then reboot and profit. worked for me
[Xposed Framework Modules] xdagee:
Great Mod

This is great, I love it, got stacked at a point, but this app really helped me.

Thank you developers for such a great xposed app :laugh:

Needed this for z-launcher and it works perfectly, :laugh:

Before &&& After
[Xposed Framework Modules] erunantion:
Letting me play with zLauncher on my Nexus! Great work dev!!!!

Sent from my Nexus 5
[Xposed Framework Modules] Delta 32:
I can't get it to work with TV2 Play 2.4

Wonder if they have added other checks.
[Xposed Framework Modules] jemael972:
dont works with be in sports connect .... https://play.google.com/store/apps/details?id=ptv.bein.ui&hl=fr
[Xposed Framework Modules] dhampire:
report. don't work this also. regards.

https://play.google.com/store/apps/details?id=com.bbl.mobilebanking

Sent from my Lenovo S930
[Xposed Framework Modules] Phylum:
AirWatch Agent 5.0.0.1435 Detects Root

This is purely informational. Not asking for or demanding a fix or ETA. I'm an AirWatch admin so this means very little to me.

Near as I can tell, the AirWatch Agent version 5.0.0.1435 is able to detect root.

I'm doubtful AirWatch is going to share specifics with us on what it's looking for, but we had *so* much trouble with the recent implementation, I may be able to squeeze smething out from our TAM or sales guy.

As an aside, this is very interesting: http://www.apposcopy.com/report.html?com.airwatch.androidagent

Thanks for this mod OP as well as your time. Don't let us/this get in the way of life or family.
[Xposed Framework Modules] bimmerdriver:
What's the latest on Citrix XenMobile Worx? I'm running Worx Home 8.7.1 with WorxMail 1.5.9 and WorxWeb 1.3.3. I'm considering using towelroot and SuperSU. Does rootcloak allow Worx to work?
[Xposed Framework Modules] Phylum:
Update from AirWatch

Update #1 from AirWatch

"There is generally a Superuser application that is installed on the device when it is rooted. You can check for that in the applications. Also you may try to use some third party applications like root checker which can determine the presence of root permissions or superuser applications on the device. We do not however recommend any application as our algorithm is totally different and comprehensive. So even if a device shows as not rooted on these applications, it may be still rooted. However, if these third party applications detect it as rooted, it is definitely rooted. Please let me know if you have any further questions."

Update #2 from AirWatch

"I would like to make one additional comment here. Once the device is rooted and AirWatch detects the device as compromised, it remains in the AirWatch database. The only way to undo that is to enterprise wipe the device, delete the device record from the console and re-enroll it. You can check for if the device is rooted as I mentioned in my previous comment and then follow this process. Let me know the outcome."
[Xposed Framework Modules] damjang:
Just to confirm that InBank work ok :laugh:!

Thank you
[Xposed Framework Modules] m4dbra1n:
Hi everyone, I'm having problems with the timvision app, can the dev give a look? I've added the app in rootcloak, rebooted, but the app still see that my Optimus G E975 is rooted.

Thanks in advance ;)
[Xposed Framework Modules] ddlJunky:
Does not work for CrontoSign Swiss.

store/apps/details?id=com.cronto.crontosign.swiss (Cannot post links yet)
[Xposed Framework Modules] angelosath:
pls check :crying:
[Xposed Framework Modules] cantona72:
I use an older version of nova I haven't updated to the latest and I am rooted so I don't use this mod,sorry.
[Xposed Framework Modules] angelosath:
please explain further, so i can also watch with my rooted device :o
[Xposed Framework Modules] cantona72:
I just don't use the latest nova app from play store I don't update it,I have ver.1.0.So if you have a back up of your device ,use it without updating nova app to latest and check it.
[Xposed Framework Modules] angelosath:
Sorry to bother you, but could you please pm me a link to this version. I failed to save a backup...

I would be gratefull. thanks in advance

"Just found it, thanks a lot, problems solved"
[Xposed Framework Modules] lilfil3:
Hi, DirecTV GenieGo doesn't work.

https://play.google.com/store/apps/details?id=com.directv.application.android.go.production
[Xposed Framework Modules] faji20002000:
DSTV Drifta

the dstv drifta app still detects root. pls kindly look into this.

https://play.google.com/store/apps/details?id=com.dstvmobile.app.adrifta.product

:crying::crying:
[Xposed Framework Modules] jimmaestro:
Three InTouch

Works with new Three InTouch beta app.
[Xposed Framework Modules] CannibalAngel:
Any news on this module? What is it called? Where can I find it? Does it cloak root from Good? I need to use this app for work and this is the ONLY reason I have not rooted yet.

Thanks in advance for the reply!
[Xposed Framework Modules] TwinAdk:
It's called xposedgfesecuritypatcher. Yes, search for it :)
[Xposed Framework Modules] passlogin:
RootCloak 1.4 breaks compability with klb.android.lovelive and klb.android.lovelive_en while 1.3 don't. Please fix
[Xposed Framework Modules] CannibalAngel:
I found it. Thanks for the reply!
[Xposed Framework Modules] xGBHxPegasus:
Any luck on what extra commands to add? Just updated now and its still detecting root :(
[Xposed Framework Modules] Beaverman33:
I was looking for an update on the Lloyds Bank app fix too. Any tips would be greatly appreciated.
[Xposed Framework Modules] GeneralRam:
Cheers man! I added "test-keys" into the keywords for root cloak - on a fresh app install this is what stopped root being detected.
[Xposed Framework Modules] colthekid:
Lloyds Bank App

+1 for any news on this

This didn't work for me.
[Xposed Framework Modules] GeneralRam:
Steps I took were -

Install Xposed & Rootcloak.

Add 'test-keys' to the keyword list.

Downloaded Lloyds.

Rebooted.

Started Lloyds.

I could not get it to work at all before even after I removed root - I think once it detects root a flag may get set somewhere and it won't let you. You probably have to uninstall it.
[Xposed Framework Modules] simon_j:
Anyone got this to work with the new lloyds tsb app
[Xposed Framework Modules] colthekid:
No, Still no joy. :crying::confused: Although I note that my rom's (Viper) Build.prop says "release-keys" anyway, so not sure the "test-keys" block would work anyway

Get in the queue!!! Lol! :laugh:
[Xposed Framework Modules] pricey2009:
On the lloyds banking they also scan the kernel to see if it is custom so we need to find a way to block it from finding out what kernel is installed along without it finding root..
[Xposed Framework Modules] Beaverman33:
Unfortunately this didn't work for me either. Tried multiple uninstalls, reboots etc
[Xposed Framework Modules] runandhide05:
I've had my fair share of working with these types of apps.

Can one of you send me the Lloyd apk or link to it

sent from(:::§:::)
[Xposed Framework Modules] pricey2009:
Please see it attached.. if you could break the root check for us all I would be very impressed and grateful :good:
[Xposed Framework Modules] Beaverman33:
The latest version on the Play Store is 3.2 . . .

https://play.google.com/store/apps/details?id=com.grppl.android.shell.CMBlloydsTSB73&hl=en
[Xposed Framework Modules] atrix4nag:
ATT Isis on Galaxy S4, not recognizing the root, but ISIS is not working. the ISIS app says ""Isis does not currently support your phone. Learn more about supported phones".

It worked before on my HTC one. I dont know, what is the wrong i am doing, or ATT fixed this, not sure..
[Xposed Framework Modules] GeneralRam:
The app has been updated and now locks you out. It infact locked me out but I managed to get back in -

Make sure test-keys and release-keys are added to the keyword list.

uninstall Lloyds.

Turn off root - There is a checkbox in superuser.

Log into the Lloyds app.

Re-enable root.

It looked me out first which is why the superuser was disabled before I logged in. After you've managed to log in it will no longer do any checks for root.

Also make sure you deny any root requests it may ask too!
[Xposed Framework Modules] pricey2009:
BOOM!

Thanks matey!! Working fine now lol

I actually unrooted completely using supersu, then installed Lloyds, rebooted then logged in/registered the app, then went into recovery and flashed supersu v2.01 zip and rebooted again and all is well.
[Xposed Framework Modules] GeneralRam:
Got another update for you mate - it's locked me out again for some reason but don't know why. Can you try logging in again and see if it does the same to you?
[Xposed Framework Modules] pricey2009:
Ahh yes it has deregistered me now.. Maybe it didn't work after all then :banghead:

---------- Post added at 10:55 PM ---------- Previous post was at 10:42 PM ----------

It seems the Lloyd's app requests root randomly during use.. This in turn when either granted or denied tells it that root access is available..
[Xposed Framework Modules] Beaverman33:
I get the same response too. It works when you initially follow the process described but you loose access each time you have to log in :crying:
[Xposed Framework Modules] GeneralRam:
Think I've fixed it - Add the app to the Rootcloak deny list (I think it has a different name to the old one) and make sure Superuser has it on auto deny. I've forced closed it a couple of times and relogged in. Doesn't seem to have frozen me out.
[Xposed Framework Modules] Adge40:
I got around it plainly by disabling SuperSU in settings then registering into Lloyd's,getting the app up and running then enabling supersu,I've not had any problems since,I have Acer e380 on mediatek 6589
[Xposed Framework Modules] colthekid:
Still no for me. First thing I did was add it to the rootcloak deny list (and no the app name hasn't changed otherwise android would see it as a completely different app). In SuperSU's deny list as well.

Again doesn't work for me (& I think it'll stop working for you in due course). The separate app "Hide My Root" did work initially, but now appears not too & its a pain in the A** to keep hiding & restoring root just to use this app!

I suppose we need to know what checks for root it makes before a solution can be found :confused:
[Xposed Framework Modules] TheInVisibleGoD:
Same here, can't login with the new version of Lloyds TSB app...

Looks like the app checks for other things root related.
[Xposed Framework Modules] fatjoez:
Works for GlobalCall

http://www.uglobalcall.com/wb/cmmn/UGLmain.uglobal

thanks
[Xposed Framework Modules] spadaboyz:
hello everyone

in the first page i saw that we can use RootCloak to play Love Live! School Idol Festival (JP ver)

but, i can't use RootCloak to play the game in EN version (https://play.google.com/store/apps/details?id=klb.android.lovelive_en)

it stuck at orange screen :(

anyone can help?
[Xposed Framework Modules] fei0316:
I play Japan version only and in my knowledge of Japan version yellow screen does NOT means your phone is rooted. If the game detected root, it will send you back to home screen and popup a message said you're rooted. If you see a yellow screen it means something else. For me I think it's chance for you to change to Japan version as updates on songs or activities are always the fastest[emoji1]

Sent from my Nexus 5
[Xposed Framework Modules] jjwatmyself:
Any updates on tweaks needed for AirWatch since they updated their root detect logic a couple months ago? I've been purposely avoiding the update.
[Xposed Framework Modules] voorish:
I had the same problem until I downgraded RootCloak to version 1.3, as passlogin mentions in post #429. And be sure to add klb.android.lovelive_en to the list of apps in RootCloak's settings.
[Xposed Framework Modules] Beaverman33:
Same here - I already had it included in the deny lists for rootcloak and SuperSU. Might have to revert back to an older version of the app that I have tucked away in an old Titanium archive
[Xposed Framework Modules] mrbobo1:
best bet is to avoid the update since the dev is no longer around, I don't know enough to figure out what it started looking for myself but the old version works.