yashsingh1/xdaforums huggingface dataset:
[Xposed Framework Modules] dkoon1987:
Hello devadvance, I should have reported this to you sooner, but two of my coworkers and I were running Good for Enterprise with your RootCloak app through the Xposed Framework from about Jan 28 - February 27. On February 27th, Good detected Root on all of our devices. We also tried your RootCloak Plus app which did not work either. I have a Nexus 7 (2013 WiFi) with 4.4.2 and a VZW Developer Edition Moto X 4.4.2 (was running 4.4 at time of detection). Both devices are just unlocked running stock android with root. One of my coworkers has an HTC One with an unlocked bootloader also running 4.4.2, and tried multiple ROMS as well as the stock HTC. Another coworker is running an Galaxy S4 with 4.3 (at the time of detection) with root.

I just wanted to report this to you, and I would be willing to test anything (especially on my Nexus 7) if you wish for me to. Please let me know how I could be of assistance. Thank you for your time and efforts!
[Xposed Framework Modules] briankfree:
This also happened to me. HTC One running 4.4.2 Google Play Edition. Any thoughts?
[Xposed Framework Modules] xfullmetal17:
Coming back with update(s):

English PAD will work, *if* Xposed and its modules are installed as system apps. (If a module updates, you NEED to push it to /system/app, and NOT install it through the Xposed installer, as this will put the updated module back in /data/app)

Still unsure on the Japanese version though.
[Xposed Framework Modules] planetf1:
I just tried RootCloak and noticed the same - added com.barclays.bca , but the app straight away reports root.

Simple answer for me - use my capital one card instead of barclays (C1 app works fine ..).

---------- Post added at 05:06 PM ---------- Previous post was at 05:04 PM ----------

The amusing thing here is the website the app sends me to (barclaycard.mobi) is reported as having an untrusted certificate..., not sure what root certs I'm missing, but it's an official samsung rom base....

duh.
[Xposed Framework Modules] Alb-Spirit:
Hello any luck with Virgin TV Anywhere - Virgin Media?
[Xposed Framework Modules] sirdigitalpython:
Check this thread.... My last post is a patched version app that works on rooted devices... You Just need to sideload it as I couldn't sign it properly...

http://xdaforums.com/showthread.php?t=2547389

Virgin TV Anywhere
[Xposed Framework Modules] geevh:
Can you add be.belgacom.mobile.tveverywhere to the list? It works.

It is for Belgacom TV overal / Belgacom TV partout (TV everywhere in English)

https://play.google.com/store/apps/details?id=be.belgacom.mobile.tveverywhere
[Xposed Framework Modules] mjs2011:
Sorry if this sounds like an eta post, but do you foresee a possibility of fixing the issue with the Good app in the future? I really want to root my device but I absolutely have to use this app for work.

Also, has anyone found any other workarounds for the Good app?
[Xposed Framework Modules] dkoon1987:
I'm in the same boat as you... I don't understand what changed because Good was not updated in the play store either...
[Xposed Framework Modules] mensrea78:
Maxdome not working

I wanted to use the maxdome.de app on my stock rooted HTC One. Unfortunately even RootCloak prevents me from using it. Did anybody have success?
[Xposed Framework Modules] Lesicnik1:
Can't seem to get D3 Go to work with RootCloak, just says that it won't work on rooted devices.

I'm running a Nexus 4 with the SlimKat ROM (4.4.2)
[Xposed Framework Modules] libbycm:
Can't seem to get it working with MobileIron app either.. MI just hangs during provisioning... no errors, but won't enroll either.
[Xposed Framework Modules] ger Andi:
I have the same problem on my rooted Galaxy Note 3.

Gesendet von meinem SM-N9005 mit Tapatalk
[Xposed Framework Modules] andPS2:
how do you install xposed and modules as system apps? couldnt find anything how to do that

thx for any help
[Xposed Framework Modules] xfullmetal17:
Push them to /system/app (do NOT install them first, just put the .apk file in /system/app.) I'll add more detailed instructions if you need. Also remember that you'll either need a backup script or re-add them each time you update your ROM.

Again, I'll post the script I found along with one you can use to keep all your modules intact.

To be clear: every time there's a module update you'll need to replace the file in /system/app with the updated .apk, as any Xposed modules in /data/app cause the game to instantly close. Not entirely sure on why, I've been meaning to take APKtool to it if it's possible to see what could be causing it.
[Xposed Framework Modules] andPS2:
i uninstalled xposed and all modules then pushed the apk's to /system/app with root explorer

after rebooting i dont see any link to the xposed installer (thats the only apk i found)

how can i enable xposed then and the modules?
[Xposed Framework Modules] xfullmetal17:
Make sure permissions are set correctly. Should be --rw-r-r I believe. If you're using a terminal it's chmod 644 on each apk
[Xposed Framework Modules] andPS2:
spot on! thanks for you help

xposed installer shows up and can be installed via standard install method to /system

after reboot and enabling modules and another reboot

wanam kit and appopps work for me again

and so does puzzle and dragons english

maybe something for the op?
[Xposed Framework Modules] xfullmetal17:
Better for the Xposed general thread if anything. Because it's across all modules, not necessarily RootCloak.
[Xposed Framework Modules] SilentException:
I would like to report that Ingress v1.48 force closes on start if package com.nianticproject.ingress is added to cloak list.
[Xposed Framework Modules] subzero2000:
Ingress 1.48.0

I have observed the same thing as well. RootCloak Plus does not cause it to force close, but I don't know how much faith I have in it. Whereas RootCloak allows ISIS Mobile Wallet to work, RootCloak Plus does not, and if I add Root Checker to RootCloak Plus list of apps, it eventually force closes, but does seem to indicate that it cannot detect root.

As for Ingress 1.48.0, the following was logged when attempting to start it up:

E/AndroidRuntime(13026): FATAL EXCEPTION: pool-5-thread-2
E/AndroidRuntime(13026): com.nianticproject.ingress.common.assets.b: Asset not found: path=FAKEJUNKFILE.apk density=MEDIUM
E/AndroidRuntime(13026): at com.nianticproject.ingress.common.assets.q.a(SourceFile:96)
E/AndroidRuntime(13026): at com.nianticproject.ingress.common.assets.c.d(SourceFile:399)
E/AndroidRuntime(13026): at com.nianticproject.ingress.common.gfx.a.a(SourceFile:139)
E/AndroidRuntime(13026): at com.nianticproject.ingress.common.assets.c.e(SourceFile:565)
E/AndroidRuntime(13026): at com.nianticproject.ingress.common.assets.c.a(SourceFile:674)
E/AndroidRuntime(13026): at com.nianticproject.ingress.common.scanner.ax.a(SourceFile:1210)
E/AndroidRuntime(13026): at com.nianticproject.ingress.common.scanner.t.e(SourceFile:1899)
E/AndroidRuntime(13026): at com.nianticproject.ingress.common.scanner.av.run(SourceFile:1930)
E/AndroidRuntime(13026): at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1080)
E/AndroidRuntime(13026): at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:573)
E/AndroidRuntime(13026): at java.lang.Thread.run(Thread.java:841)

This behavior was not observed in versions of Ingress prior to 1.48.0
[Xposed Framework Modules] FeatherKing:
Looks like the AirWatch MDM Agent update today is detecting root through rootcloak. This is on a Galaxy S4 4.2.2. Rolling back to the previous airwatch agent works.
[Xposed Framework Modules] mrbobo1:
+1 on latest airwatch agent detecting root again.
[Xposed Framework Modules] manbat:
===========

New Airwatch update sees root on mine also...restored back to previous version.
[Xposed Framework Modules] jjwatmyself:
I didn't have a backup. Grrr!

I don't see any new apk from the update so it is possible that it's a gap in the keyword list.
[Xposed Framework Modules] mrbobo1:
https://www.dropbox.com/s/a2goxtluqk8vm8y/com.airwatch.androidagent-1.apk.zip
[Xposed Framework Modules] padhu1989:
Classic!!!! Working for me..
[Xposed Framework Modules] diehardbattery:
Samsung Hub and Video do not work. However, I can't find a clear answer if these 2 apps check for root in the first place? I'm on a T-Mobile Note 3 SM-N900T
[Xposed Framework Modules] HDFLucky:
I had to use those apps in the process of setting up an S4 after a factory data reset. Root was maintained through the reset and both apps worked fine (before I removed them). I did not have Xposed or the RootCloak module installed at the time (and I doubt they have device-specific app versions), so I think the cause of your problem lies elsewhere.
[Xposed Framework Modules] fei0316:
As far as i know, Puzzle and Dragons will check the following:

system/xbin/su

system/bin/su

system/apps/SuperSU.apk

system/apps/Superuser.apk

ro.secure=0 in default.prop

ro.debuggable=1 in default.prop

Any apps using su permission

Xposed framework(not very sure about this)

Hope it can help, loved this game!!
[Xposed Framework Modules] joeliotta:
Any way we could get cloak on Optimum App from Cablevision? We get no live TV or DVR control when rooted.
[Xposed Framework Modules] krweby:
Has anybody got this to work with Starz and the encore apps?
[Xposed Framework Modules] peja130:
excuse me, can you tell me more detail how to solve this problem? :crying:

I haved add P&D in the list, but it still flash back.....:(
[Xposed Framework Modules] TwinAdk:
App: Good for Enterprise - Good Technology - https://play.google.com/store/apps/d...od.android.gfe

Reason: It doesn't seem to check for root using the NDK, but I cannot be sure. The updates that I have made to RootCloak may handle GFE, but I have no way of testing.

There is a module for xposed, specifically for the good software. Will be able to test it soon, my company is in the process of pushing it to the employees, I'm in the it department.

Just FYI :)

Kind Regards

TwinAdk
[Xposed Framework Modules] fei0316:
I don't know how to solve it, maybe we should wait for the author of rootcloak to solve that, I'm just trying to give them some help[emoji31]
[Xposed Framework Modules] buu1152:
Delete

Deleted post
[Xposed Framework Modules] gpolak:
question

So could you give me an information how did you force worx to work ? How did you setup xposed modules and which ? I suppouse that my problem is that my phone Xiaomi Hongmi (Red RICE) works on MIUI and this coud be a problem ? Could you help me with that ?

Regards,

Grzegorz Polak (Poland)
[Xposed Framework Modules] buu1152:
I added the custom package name for a game called Avabel from playstore, it's an online rpg, and it comes up fine in the list when I custom add it so I add it to list and it shows up fine in the list of things being hidden. But when everythings rebooted and ready the app still detects root and closes.

Furthermore I have this running and I disabled my root in supersu and rebooted with rootcloak still hiding the app and supersu disabled and hidden through itself and it still detects the root and closes..

Any ideas? Can anyone help?

Idk what that means if it can detect it even if it's disabled and hidden with supersu.

Here's game link: https://play.google.com/store/apps/details?id=com.asobimo.avabel_gp_b3

Latest °Purity & Franco°
[Xposed Framework Modules] dev247:
Entrust & RootCloak

Mine actually stopped working on my T-Mobile Galaxy Note 3 after I upgraded to 4.4.2, it was working previously on 4.3. Still isn't working on the current module version under the Xposed downloads.
[Xposed Framework Modules] lumix4321:
any luck getting it to work for Sky Go OP?
[Xposed Framework Modules] SeraphChaos:
I have a question regarding the Love Live app. On the front page, it says RootCloak works on the app (**ラブライブ！スクールアイドルフェスティバル - KLab - https://play.google.com/store/apps/d...droid.lovelive) but when I try to run it, it still seems to detect my cloak. I tried adding the app (klb.android.lovelive) to the list as well as disabling Superuser from SuperSU and still I can't run the app.

Any tips to getting this to work?
[Xposed Framework Modules] lyamotia:
Also started to have the same.issue as user above. However it doesnt provide the standard root warning message but game partially loads before crashing to orange screen.
[Xposed Framework Modules] acme64:
i'm rooted and this game works perfectly fine. nothing fancy was done. Are you having issues?
[Xposed Framework Modules] Dreiundachzig:
After an update (it's quite long ago) my banking app detects my phone is rooted. Before that update all worked just fine. I can still use the app but there is a notice that it may be dangerous to use the app with a rooted phone.
[Xposed Framework Modules] P_M_G:
How are you getting this to work with Flixster?

I just installed Xposed and this app, multiple reboots between - and then installed flixster and I still get an error trying to stream. I was able to download, but got the same "unable to play - logging this error" message when trying that route.

what am I missing?
[Xposed Framework Modules] fei0316:
That's because you're playing English(US) version of the game which is different than the Japanese version!
[Xposed Framework Modules] SeraphChaos:
Actually, I have the US version installed and I still can't run it. Guess he's just lucky.
[Xposed Framework Modules] fei0316:
This game was very strange, thr worst part is that we don't know what's happening! I'm going to get a Nexus 5 very soon than I could check it.
[Xposed Framework Modules] mrbobo1:
[MENTION=2804938]devadvance[/MENTION] would you be willing to look at the new airwatch to see what's they changed and if we can hide root from that app? is there anything I can do to help? There were a bunch of us who confirmed the last airwatch update does now detect root again, but I haven't seen you on the thread in a while... please also know this is not an ETA or demand, just curious if you are still here and willing to take a look, this MOD saved me from needing to be stock for work email.

EDIT: read your posts on rootcloak plus, sorry to bug you sounds like normal "life" is taking priority and I respect that. So that's the answer I was looking for... also thanks for open sourcing this so hopefully someone else can step up to help all of us, I really appreciate your work and my workaround for now is to use an older version of airwatch.
[Xposed Framework Modules] Cmbln:
App "MobileTV - Deutsche Telekom" works! :good:
[Xposed Framework Modules] vsTerminus:
Entrust OTP isn't working for me either.

Nexus 5

Android 4.4.2 (CyanogenmMod-11-20140504-Nightly)

Xposed Framework v50 + Xposed Bridge v47 + RootCloak 1.4 Module

SELinux is set to Permissive.

Anyone have any ideas for keywords or commands? Is there a way to determine what Entrust OTP is looking for, aside from decompiling the apk?
[Xposed Framework Modules] dev247:
Working after kernel switch

I've been running the Hyperdrive ROM, I switched to the newest LeanKernel and now RootCloak is working for everything I've tried. So I'm assuming that the stock and tweaked versions of the Samsung released Linux kernel for Android 4.4.2 aren't working with RootCloak (at least on the Note 3).

Recommendations: Make a nandroid backup and try a different kernel.
[Xposed Framework Modules] vsTerminus:
So I took your advice and installed Chaos Kernel and Entrust is now working as expected :D

Thanks!!
[Xposed Framework Modules] buu1152:
Avabel the game still detects root. Is there anything that can be done or is this a lost cause.. I'll be patient I guess

Latest °Purity & Franco°
[Xposed Framework Modules] defim:
[MENTION=2804938]devadvance[/MENTION]: a small idea. If I would detect Xposed, I would throw an exception. Catch it and inspect stack trace. There are traces of Xposed...

Maybe you could hook somewhere to clean the strack trace
[Xposed Framework Modules] montymintypie:
App currently broken for Love Live. Fix: In keywords, add "Superuser.apk".

Would love if you could add that to defaults.

Decompiled check source code:

private boolean isSuBinaryPresent() {
int n = 1;
final String[] array = new String[9];
array[0] = "/data/local";
array[n] = "/data/local/bin";
array[2] = "/data/local/xbin";
array[3] = "/sbin";
array[4] = "/system/bin";
array[5] = "/system/sd/xbin";
array[6] = "/system/xbin";
array[7] = "/system/bin/failsafe";
array[8] = "/vendor/bin";
final int length = array.length;
int n2 = 0;
while (true) {
if (n2 >= length) {
try {
if (!new File("/system/app/Superuser.apk").exists()) {
n = 0;
return n != 0;
}
return n != 0;
}
catch (Exception ex) {
return false;
}
}
final String string = array[n2] + "/su";
try {
if (new File(string).exists()) {
return n != 0;
}
}
catch (Exception ex2) {}
++n2;
}
}
[Xposed Framework Modules] fei0316:
That's cool! So the only thing I have to wait is puzzle&dragons. Maybe you can help me decompile also??
[Xposed Framework Modules] kurbstar:
Are you able to get in-game? I seem to be able to get by the initial root check with RootCloak, but it freezes with a mustard yellow screen.

Not sure if it's related to RootCloak, or maybe something wrong with my Omnirom installation
[Xposed Framework Modules] Ashley568:
Hi anyone been able to get Barclays pingit working
[Xposed Framework Modules] montymintypie:
Indeed, I have this issue too, but I don't think it's related to root. I will have to test more.
[Xposed Framework Modules] kurbstar:
cool. Let me know if you need me to check anything. I'm on Omnirom 4.4 w/ a Nexus 5
[Xposed Framework Modules] kurbstar:
Looks like I found the problem, or at least what's causing it

It is indeed RootCloaker. I downgraded to 1.3, and I can actually play the game now.

Now you know where to start debugging :P
[Xposed Framework Modules] montymintypie:
I don't 100% understand how root cloaker works, but there's a folder with subs inside it - matches "su" keyword so maybe blocked?

How big a demand do you think there is for this? I can make my own Xposed module to bypass the check, it would be trivial.
[Xposed Framework Modules] kurbstar:
I decided to play around with it a little more. I upgraded from RootCloak 1.3 to 1.4...it works

So I decided to fully uninstall love live and reinstall. The yellow screen came back.

You mentioned that the 'su' keyword relates to one of the game's directories, I removed the keyword from RootCloak. It works again

I re-added the 'su' keyword to the detection list....the game still works

So in conclusion, it looks like the 'su' keywords blocks something from running correctly on the game's first launch. Once the game starts up and download its data, you can put the 'su' keyword back in the detection list
[Xposed Framework Modules] flyingbuffalo:
I tried the brand new Belgian app "Bancontact", but it doesn't work, it keeps seeing root...please help
[Xposed Framework Modules] buu1152:
Can anyone please help figure out why Avabel the game doesn't work for rootcloak?

Latest °Purity & Franco°
[Xposed Framework Modules] GXGOW:
Same problem here. I'll check the logs when I get home.

Sent from Tapatalk on my GT-I8190 running Novafusion's Carbon 4.4.2
[Xposed Framework Modules] buu1152:
I got this source coding from avabel, and I don't see anything about a root check, is this the right code/is there something I don't see that someone could help me get rootcloak to work for this app.

Anyone, please?

p.s I am noob

Latest °Purity & Franco°
[Xposed Framework Modules] montymintypie:
Use code tags next time, that post looks disgusting.

That's XML detailing app permissions and is not source code.
[Xposed Framework Modules] Bunecarera:
Also have the same problem with this app...
[Xposed Framework Modules] DieterHolvoet:
You can turn off root with the Voodoo OTA RootKeeper app, and you have to disable developer options like ADB for the app to work. :)

Source: http://www.bancontact.com/nl/veelge...ntroleren-wat-kan-ik-doen-om-dit-op-te-lossen
[Xposed Framework Modules] TigerHix:
I decompiled Puzzle & Dragons and found two methods below.

public int checkRoot()
{
int i = 0;
String[] arrayOfString = new String[2];
arrayOfString[i] = "com.noshufou.android.su";
arrayOfString[1] = "eu.chainfire.supersu";
int j;
try
{
Runtime.getRuntime().exec("su").destroy();
i = 2;
return i;
}
catch (IOException localIOException)
{
j = 0;
}
for (;;)
{
if (j >= arrayOfString.length) {}
for (;;)
{
localIOException.printStackTrace();
break;
try
{
getPackageManager().getApplicationInfo(arrayOfString[j], 0);
i = 1;
}
catch (Exception localException)
{
localException.printStackTrace();
j++;
}
}
}
}

boolean checkTool()
{
boolean bool1 = true;
String[] arrayOfString = new String[4];
arrayOfString[0] = "com.forrep.puzzdra.navigation";
arrayOfString[bool1] = "com.forrep.pad.combo2";
arrayOfString[2] = "jp.hiehie.pazdof";
arrayOfString[3] = "jp.hiehie.pazdof2";
if (this.isAlartDialog) {
return bool1;
}
List localList = ((ActivityManager)getSystemService("activity")).getRunningAppProcesses();
Iterator localIterator;
boolean bool2;
if (localList != null)
{
localIterator = localList.iterator();
bool2 = false;
label69:
if (localIterator.hasNext()) {}
}
for (;;)
{
bool1 = bool2;
break;
ActivityManager.RunningAppProcessInfo localRunningAppProcessInfo = (ActivityManager.RunningAppProcessInfo)localIterator.next();
if (!bool2)
{
for (int i = 0;; i++) {
for (;;)
{
boolean bool3;
Object localObject;
try
{
if (i >= arrayOfString.length) {
break;
}
if (localRunningAppProcessInfo.processName.equals(arrayOfString[i])) {
openAlertDialog(getString(2131165226), getString(2131165227), 0);
}
}
catch (Exception localException1)
{
bool3 = bool2;
localObject = localException1;
}
try
{
this.isAlartDialog = true;
bool2 = bool1;
}
catch (Exception localException2)
{
for (;;)
{
localObject = localException2;
bool3 = bool1;
}
}
}
}
((Exception)localObject).printStackTrace();
bool2 = bool3;
break label69;
bool2 = false;
}
}
}

First method is checkRoot(), which tried to execute su, if success then return 2 (rooted), if failed, it checks if SuperUser and SuperSU installed, if installed return 1 (maybe not rooted but with superuser managing apps installed).

Second method is checkTool(), which checks if assisting tools like PuzzCombo exists. But I think that's not kinda related to root.

So that means Puzzle & Dragons only check two things: 1. su installed, 2. SuperUser or SuperSU installed. Though, I have tried removing system/xbin folder, uninstalling SuperUser and/or SuperSU, the game still won't open. Any reasons?
[Xposed Framework Modules] buu1152:
Thanks, I'll repost the source coding once I figure out how to get it, and code tags.. Thanks again.

Latest °Purity & Franco°
[Xposed Framework Modules] lorikitty:
I haven't been able to play any of the Kairosoft games that do root checks, including Dream House Days. It's super frustrating, since it used to work. What level logs do I need to grab to help find out how it's checking for root? I've also tried Plus, and it can't hide root.
[Xposed Framework Modules] licensetokill:
Voodood OTA doesnt work on android 4.3.

Any other sollution to get Bancontact app think your phone is not rooted?
[Xposed Framework Modules] DieterHolvoet:
RootCloak works perfectly for me, just add Bancontact to the app list in RootCloak.
[Xposed Framework Modules] fei0316:
Yesss! Thank you a lot! As i know, Puzzle&Dragons will also check for currently running apps that is using su so uninstall su than reboot could help. It would also check for default.prop. Maybe there are some checking code hidden somewhere? Also, another method that check for navigation tool in not related. But anyways thank you for decompile it, I would study the code.
[Xposed Framework Modules] MontAlbert:
Doesn't seem to work with Foxtel Go. What type of logs do you need to get it to work?
[Xposed Framework Modules] licensetokill:
Thanks, now it works :victory:
[Xposed Framework Modules] borgsta:
Yeah came to post the same! I've decompiled it but no idea what to do from there.
[Xposed Framework Modules] borgsta:
The only thing I can seem to find for Foxtel Go is the following line (and similar)

ROOT_DETECTED = new ActiveCloakEventType("ROOT_DETECTED", 36, 36, "Rooting detected");

however there is no further information about how it detected it.