yashsingh1/xdaforums huggingface dataset:
[Xposed Framework Modules] tsynik:
Hi, guys. I [almost] have success with RootCloak 2.1.1 with some of my apps. It successfully hide root for them, but they still complaining about USB debugging, even if I disable it in Developer Settings. I saw there was an option to hide USB debugging in earlier RootCloak releases, but is it still in 2.1.1 Release for 5.x 6.x ROMs? Can't find an option how to configure it with RootCloak 2.1.1.
[Xposed Framework Modules] ChefChaudart:
Hi,

New app from my Bank still detect Root ;

https://play.google.com/store/apps/details?id=com.db.pbc.mybankbelgium

Cheers
[Xposed Framework Modules] novren:
Hi,

I use this module, its latest stable release, on my OP3 running oxygen 3.2.4 with elementalX kernel. I have it rooted and with divine beats for audio enhancements, and I have a couple more modules installed. My banking app, which includes NFC payments, works perfectly without having had to tweak any setting. It also works on freedom OS (which is a mod of oxygen os with an aroma installer to choose which gapps and system apps to install, as well as the kernel and other mods), again without going through any hoops.

I wanted to try Sultan's cm13 build, of which I was a fan on my OPO, even though I would have had to sacrifice some camera quality. So I clean wiped, flashed Sultan's build, opengapps, supersu, divine beats and xposed, and set up the modules including yours. Then I installed the banking app and I could not activate NFC payments because, according to the app, my phone was either rooted or simply did not comply with security measures taken by the app creators. Tried with beta builds and nothing.

What I did not try, because I expected titanium backup to be able to extract individual app data from a nandroid backup (could not find the option but I'm damn sure it used to be there), was to try and restore the data from oxygen os onto cm13 just for that app. But I doubt it would have made a difference, since I imagine these apps check for root or these "vulnerabilities" on boot, or at least every time you run them.

I don't know of any way through which provide logs. Can you point me in the right direction?

The banking app is imaginbank, https://play.google.com/store/apps/details?id=com.imaginbank.app

Forgot to add, thank you for your patience and support! Yours is a great app.
[Xposed Framework Modules] de.er:
The latest versions of Lloyds https://play.google.com/store/apps/details?id=com.grppl.android.shell.CMBlloydsTSB73 and Halifax https://play.google.com/store/apps/details?id=com.grppl.android.shell.halifax banking apps no longer work with the current version of RootCloak. Would be great if someone could look into this, thanks!
[Xposed Framework Modules] piotrenx:
Still not working with Barclays mobile Banking?

https://play.google.com/store/apps/details?id=com.barclays.android.barclaysmobilebanking

Wysłane z RR M 5.7.3 SM-G900F (S5)
[Xposed Framework Modules] zinqzinq:
Hi any chance to run samsung smart home ?
[Xposed Framework Modules] jacobs0n:
has anyone tried using this with the latest Google Device Policy?
[Xposed Framework Modules] riahc3:
My banking app doesnt say any error at all but just in case i am going to install this and apply it because i cannot make nfc payments.
[Xposed Framework Modules] kurtph1969:
Halifax (UK) used to work up until the latest very recent update. I've tried adding it to Rootcloak, using different keywords, disabling SU, but had no luck. I would love a fix for this too please.
[Xposed Framework Modules] ianmacd:
Horizon Go has been mentioned in this thread a few times now as an app that RootCloak doesn't manage to enable.

What information could I provide, that has not already been provided by others, that would enable the developer of this app to figure out how root or Xposed is being detected by Horizon Go?
[Xposed Framework Modules] bqw371:
Doubt this will work today since all of my root configs are detected properly by MobileIron. I'm curious if systemless root would escape detection....

With that said, even an installed root app such as titanium backup on the device will get it flagged as compromised. Not sure if the bootloader unlock alone would trip root detection on the M@W client but as soon as su is in system it will flag at the next device check-in.
[Xposed Framework Modules] Wetzel402:
Agreed. After my post I also realized that MobileIron uses Knox on Samsung phones. I'm assuming that if I were to unlock the bootloader, that alone, would trip Knox and cause MobileIron to report my device as compromised...

I think the only hope on a Samsung device would be to use systemless as you suggest, on a Knoxless ROM. Even then MobileIron might be able to tell though because it also uses Safety Net and no one has found a work around for that yet.
[Xposed Framework Modules] de.er:
Have you (or anyone else) tried Chainfire's suhide yet?
[Xposed Framework Modules] anshumandash:
Any link to suhide?
[Xposed Framework Modules] bc1977:
Hi,

Anyway this app still detects root and won't launch:

https://play.google.com/store/apps/details?id=com.orange.fr.ocs&hl=fr

Can you have a look at it?

Thanks.

Great module btw!
[Xposed Framework Modules] devadvance:
If we move the su binary to another location (e.g. "/system/hiddenSU"), we have limited options in terms of redirecting applications to it. Usually, the way that you gain su privilege is by simply running (see: exec in C or Java) the su binary. So if you move/rename the su file, any app that tries to do that will simply fail. So you have to redirect with a file system link. But that symlink needs to be in one of the path locations (system/bin, user/bin, system/xbin, etc), so if the following code is used, the link will be traversed and the su binary found:

FILE * suFile;
suFile = fopen("/system/xbin/su", "r");
if (suFile != NULL) {
// The su binary exists
}

Theoretically, you could avoid using a file system link, but then you have to do the redirection with Xposed. Instead of a blacklist, you'd have a whitelist. This works in principle, but ONLY for Java-based (SDK) apps, since Xposed still can't hook native calls.

In addition, even if you accept all of the potential downsides, using native code an app can STILL detect the Xposed Framework, any modules, the Superuser.apk, any Chainfire apps, etc.
[Xposed Framework Modules] Azerty971:
Good For Entreprise

Hi,

I tried your app with Good For Entreprise and it doesn't work.

My device was flagged as "rooted" after a few hours.

Do you need something to help you fixed this issue with GFE ?

Just tell me what and I'll see if I can provide it with my phone.

Regards,
[Xposed Framework Modules] smar:
Thanks for the explanation and yes, that makes sense. Oh well, back to the drawing board.
[Xposed Framework Modules] redhonker:
Would it be possible to replace fopen with a routine that a) check is the file target is any su b) if so, return -1 if app is in the black list? c) if not, forward call to the real fopen?
[Xposed Framework Modules] devadvance:
In theory, yes. With something like function interposition/LD_PRELOAD. However, with the Xposed Framework, no. Xposed doesn't/can't touch native code.
[Xposed Framework Modules] corncobman:
I'm not sure if you guys are aware of there's a thread on the Puzzle and Dragons forums regarding root.

Particularly this:

This might help with getting RootCloak working for PAD
[Xposed Framework Modules] anoraknophobia:
Addition for Good for Enterprise.

App is working with RootCloak but will detect root when you flash a new kernel.

Was working 1 week perfectly. Good got whiped because it detected root. Deleted Good and reinstalled it and now its working again.

Seems the check of all apps when flashing a new kernel allowed good to detect root.
[Xposed Framework Modules] nckeong88:
Can I know what phone and Rom are you using?
[Xposed Framework Modules] anoraknophobia:
See my Singature :)

HTC One, InstertCoin Rom, ElementalX Kernel.
[Xposed Framework Modules] kalvin807:
Nope . Pad not only check root , but also check changes on system. I found that even you disabled root , pad still fc when you enable any xposed modules even Rootcloak, which mean there is more checking that we dont know .

Hope rootcloak would support pad , it definitely helped a lot of people who want to play pad :P
[Xposed Framework Modules] deklica:
D3 Go app (com.zappware.twintv.d3) not working (detect root), although in OP it says it works...

Checked on Nexus5, KK 4.4.2, with v1.3.
[Xposed Framework Modules] devadvance:
Thanks for the info, I'll take a look at it. However, in looking at PAD is seems that it might use the native calls to check for root, in which case Xposed (and therefore RootCloak) can't help.

I'll make a note of it in the first post while I take a look, thanks!
[Xposed Framework Modules] corncobman:
That would be terrible if it were the case. I wanted to play PAD but having to choose between it and having root, I choose having root.
[Xposed Framework Modules] nyxzryu:
Apps Work info

hello,

it works like charm in World Chess Championship games in play store

not works on Online RPG Avabel, root is still detected.

devices : SIII mini

OS : JB 4.1.x Stock Rom
[Xposed Framework Modules] Damir1:
Cheers,

Great app but not working on Amis MobiaTV app. Appreciate if it can be fixed sometime.
[Xposed Framework Modules] RoxAbout:
Didnt see this posted after a search "error 1001" unable to d/l unknown file "com"

Seems theres a bad link inside the xposed app to d/l this file's latest update.

I had to use my pc and grab from the link "save as" to get latest ver. now to move it over to the phone...

Edit : After a manual sideload and instal its working. It no longer is telling me theres an update any ways...

Attached is a picture of the app's download page for v1.3 with error code.

Hope it helps
[Xposed Framework Modules] Revenghost:
Thank you! I can use ISIS rooted now - rootcloak worked perfectly
[Xposed Framework Modules] sinndissension:
Will this work for glu mobile, or gamevil games?
[Xposed Framework Modules] nikagl:
+1 not sure why, but RootCloak seems to not detect the Ziggo app checking for root somehow. The logcat doesn't really show what the Ziggo app does to detect root. I see the following, is that related?

01-11 00:04:10.970 E/WindowManager(32239): android.view.WindowLeaked: Activity nl.ziggo.android.tv.player.PlayMovieFullScreenActivity has leaked window com.android.internal.policy.impl.PhoneWindow$DecorView{439cb298 V.E..... R.....ID 0,0-488,511} that was originally added here
01-11 00:04:10.970 E/WindowManager(32239):	at android.view.ViewRootImpl.<init>(ViewRootImpl.java:409)
01-11 00:04:10.970 E/WindowManager(32239):	at android.view.WindowManagerGlobal.addView(WindowManagerGlobal.java:218)
01-11 00:04:10.970 E/WindowManager(32239):	at android.view.WindowManagerImpl.addView(WindowManagerImpl.java:69)
01-11 00:04:10.970 E/WindowManager(32239):	at android.app.Dialog.show(Dialog.java:281)
01-11 00:04:10.970 E/WindowManager(32239):	at nl.ziggo.android.tv.player.PlayMovieFragment.e(PlayMovieFragment.java:348)
01-11 00:04:10.970 E/WindowManager(32239):	at nl.ziggo.android.tv.player.PlayMovieFragment.q(PlayMovieFragment.java:338)
01-11 00:04:10.970 E/WindowManager(32239):	at nl.ziggo.android.tv.player.PlayMovieFragment$a.onPostExecute(PlayMovieFragment.java:1)
01-11 00:04:10.970 E/WindowManager(32239):	at android.os.AsyncTask.finish(AsyncTask.java:631)
01-11 00:04:10.970 E/WindowManager(32239):	at android.os.AsyncTask.access$600(AsyncTask.java:177)
01-11 00:04:10.970 E/WindowManager(32239):	at android.os.AsyncTask$InternalHandler.handleMessage(AsyncTask.java:644)
01-11 00:04:10.970 E/WindowManager(32239):	at android.os.Handler.dispatchMessage(Handler.java:99)
01-11 00:04:10.970 E/WindowManager(32239):	at android.os.Looper.loop(Looper.java:153)
01-11 00:04:10.970 E/WindowManager(32239):	at android.app.ActivityThread.main(ActivityThread.java:5297)
01-11 00:04:10.970 E/WindowManager(32239):	at java.lang.reflect.Method.invokeNative(Native Method)
01-11 00:04:10.970 E/WindowManager(32239):	at java.lang.reflect.Method.invoke(Method.java:511)
01-11 00:04:10.970 E/WindowManager(32239):	at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:833)
01-11 00:04:10.970 E/WindowManager(32239):	at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:600)
01-11 00:04:10.970 E/WindowManager(32239):	at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:126)
01-11 00:04:10.970 E/WindowManager(32239):	at dalvik.system.NativeStart.main(Native Method)

Regards,

Nika.
[Xposed Framework Modules] de.er:
http://xdaforums.com/apps/supersu/suhide-t3450396
[Xposed Framework Modules] kurtph1969:
No. I'll check that out!
[Xposed Framework Modules] de.er:
Seems to be very early development stage at the moment, no gui, etc, think I'll wait for next versions myself.

Something else I did in the meantime, is I got the latest versions of the banking .apks that worked with RootCloak (for both Lloyds and Halifax it's versions 13.0), and if you get it resigned, any updates to those apps won't come up in the PlayStore.
[Xposed Framework Modules] kurtph1969:
Fortunately, I have a backup of the last Halifax that worked with Rootcloak, so I can use that. If you could let my have the signed version that would be fantastic so I don't get the constant nagging messages to update!
[Xposed Framework Modules] de.er:
Sure, no problem, check your DMs.
[Xposed Framework Modules] kurtph1969:
Well I tried the SUHIDE but it didn't work for the latest Halifax app. Tried with Rootcloak on. Then removed Rootcloak and all manually disabled super user, but as you said, without a UI it's difficult to assess what's going on. So I'll uninstall it for now.

Edit: looks like you have to do a bit more than install to hide a specific app. Need the app I'd or something..
[Xposed Framework Modules] HamsterHam:
Can I have a copy of the resigned Halifax app as well please. Nice one!
[Xposed Framework Modules] de.er:
Check your DMs.
[Xposed Framework Modules] Romeohotel:
Just DMd you - any chance I could get the Lloyds apk off you? I foolishly updated...
[Xposed Framework Modules] AndroidHtc101:
What does re signed mean? I have a older version of the Halifax app could I do it myself? Thanks
[Xposed Framework Modules] projectyuni5:
Hey guys can someone help? I've had the Lloyds Banking App for ages now and for some reason it's suddenly been able to detect that I have root. It's always been in my rootcloak list since I've had it and I've checked several times to make sure it's there but it wont let me register my device to it anymore. Any way of getting through this?
[Xposed Framework Modules] de.er:
Latest version of the app doesn't work with RootCloak at the moment, you need to roll back to version 13.0 of the Lloyds app.
[Xposed Framework Modules] HamsterHam:
Latest suhide version works with latest Halifax app v14. Make sure you have systemless supersu and no xposed. I also have added a bank card to android pay. Will try buy something later.
[Xposed Framework Modules] sulasno:
Off topic

Just to note that the mod is working on my marshmallow on one bank app

I can use wifi to connect which doesn't detect root or Data which will. Noticed a lag when using data
[Xposed Framework Modules] xxawesomexx:
Unable to run the bank app > https://play.google.com/store/apps/details?id=com.konylabs.HongLeongConnect

Can help on this? Or can someone teach me how to debug
[Xposed Framework Modules] trueruer:
--- found a soulution to my problem.
[Xposed Framework Modules] devel13:
debug

Hello,

I'm trying to access the debug file to see which app calls are intercepted by rootcloak, but I cannot find any info about the debug file.

How can I access these debug infos ?

Thanks !
[Xposed Framework Modules] devel13:
debug

OK,

solved myself.

I upgraded rootcloak module with version 3.0-beta_20160731_2 and now I can see the debug log in xposed.

...found what I'm looking for !

Thanks
[Xposed Framework Modules] chwiejak:
Could I get it also?
[Xposed Framework Modules] yaesudx:
Hey does any one get the Entertainment TV Mobile App to work? I am talking about the German Telekom Streaming App. I tried rootcloak and xtouchwiz to set status on official.

But nothing helps the streams won't start. Running s7 edge 6.01 with Superman Rom
[Xposed Framework Modules] borzowsky:
Could someone check how to make this work with the latest version of PokémonGO 0.37?
[Xposed Framework Modules] Conan179:
i think, your problem is not su. i have it installed on my note 10.1 2014 with super su and pokemon go running without su hidding tricks. Login over pokemon.com is temporaly not working, site error.
[Xposed Framework Modules] mcangeli:
You have the latest pokemon go apk installed? (0.37 hit apkmirror 30 minutes ago)

.37 doesn't seem to work on any rooted phone even withe rootcloak running.
[Xposed Framework Modules] Conan179:
playstore version 0.35.0 innstalled a roud 30min.
[Xposed Framework Modules] mcangeli:
Yea, they've released .37 and it's slowly getting out.

.35 works. .37 doesn't not log in if rooted.

(I tested on an s7 and s5, both rooted)
[Xposed Framework Modules] morfis2:
@up

Have u tried with this module?
[Xposed Framework Modules] sifaaaa:
transferred to Google translator

A new version of Pokémon 0.37.0 does not work on the root device

https://github.com/devadvance/rootcloak/wiki/Working-and-Nonworking-Apps

it says here that the support

someone has made work on pokemon Root phone?
[Xposed Framework Modules] bebawa@polyfaust.com:
Use magisk bro
[Xposed Framework Modules] AxelCM1:
it works for you?
[Xposed Framework Modules] bebawa@polyfaust.com:
Of Course bro can't say if it will be patched in later updates but for now it works :good:
[Xposed Framework Modules] sifaaaa:
transferred to Google translator

whether there is a likelihood that in the future will work with Pokemon RootCloak?

or is it impossible to RootCloak can not count?
[Xposed Framework Modules] mcangeli:
That was as of July 25th though, we're 3 or more releases ahead. Apparently Niantic disallowed rooted devices to combat the GPS spoofing and bots.
[Xposed Framework Modules] Conan179:
[MENTION=6156893]sifaaaa[/MENTION] 12h later, on to devices i becom only the 0.35.0 version over the playstore.
[Xposed Framework Modules] Nexus11:
They are doing slow rollouts like they have before
[Xposed Framework Modules] Mirk0:
Pokémon GO 0.37 version prevents rooted phones from playing the game. A senseless decision from Niantic, since all rooted are not cheaters, since not all unrooted are playing fair and since there are workarounds (if I'm rooted with unlocked bootloader I'll be able to play, trust me).

I tried to solve the problem with RootCloak, but it didn't work. :(

I tried then with Magisk and it works. It's like rooting/unrooting your phone on-the-go without rebooting. I simply unrooted my phone (OnePlus 2 with Resurrection Remix) and then re-rooted it with Magisk following the provided instructions.

I wish RootCloak will work with Pokémon GO too in the future.
[Xposed Framework Modules] ianmacd:
It's not senseless. I can follow their probable reasoning:

Relatively few PG players have root, but a disproportionate number of those who do are using it to cheat. Therefore, if you disallow rooted users, you harvest a lot of low-hanging fruit at the expense of a small number of honest players. Conclusion: Acceptable collateral damage in the fight against cheating.

So, no, it's not a watertight solution by any means, but it's not senseless either. I can totally understand why they felt this was worth doing.
[Xposed Framework Modules] Mirk0:
I guess instead that there is a large number of players playing fair with root. In this way they cut off a large number of player because someone was cheating. This action will not prevent cheaters from cheating, because there are various workarounds. I think bots are a bigger problem here.

Anyway, I didn't want to go off topic. A lot of people is disappointed. Root is freedom.
[Xposed Framework Modules] shirsch:
I was just able to load Pokemon go with rootcloak.

Nevermind. False alarm. I'm still on .35

No idea why I was getting locked out of the game beforehand though.
[Xposed Framework Modules] AbhishekS:
Tried it with Pokémon Go. Didn't work. :(
[Xposed Framework Modules] bebawa@polyfaust.com:
you can disable root via magisk manager :rolleyes:
[Xposed Framework Modules] hikaritenchi:
To set the record straight, Pokemon GO now uses SafetyNet, which RootCloak cannot bypass. However, as others have noted, you can try Magisk.
[Xposed Framework Modules] ianmacd:
Or apply the much more trivial work-around of sticking with Pokémon Go 0.35.0 until such time that it no longer works.
[Xposed Framework Modules] Fritly:
I've never installed PG but it is interesting that they haven't done the same thing with Ingress
[Xposed Framework Modules] mcangeli:
Yea, I got that. I didn't want to have to flash my phone back to stock (losing root and xposed and all of my settings and have to redo the entire phone) in order to install magisk.
[Xposed Framework Modules] Eighthourblink:
My theory is PokemonGo is aimed at younger kids who dont understand the whole rooting process, while Ingress is aimed at a more mature audience ( 25+) who understand rooting. So they can take the hit with PokemonGo but not so much with Ingress.
[Xposed Framework Modules] cire27rn:
Im thinking of a full unroot, flash magisk and reroot.
[Xposed Framework Modules] ianmacd:
I don't think there's any truth in the notion that "younger kids ... don't understand the whole rooting process". You underestimate today's youth, and conversely perhaps overestimate many 25-plussers.

I suspect that cheating is probably just a bigger issue with Pokémon Go than it ever was with Ingress. Pokémon is a hot commercial property that Niantic have a strong, vested interest in protecting. The same can't be said of Ingress, whose monetisation attempts were little more than a very tardy afterthought, and whose audience is tiny by comparison. Ingress's time has passed. No-one is talking about it any more and locking rooted players out of the game at this late stage would yield nothing beneficial.

In short, I think it's more about audience size than its average age.
[Xposed Framework Modules] trivi88:
I think it could be because version 0.37 support the expensive Pokemon Go Plus and they want to avoid that the root users emulate their device.

Bots don't need root, so it has not sense.
[Xposed Framework Modules] smoff:
DKB Card Secure

Tried it with Card Secure from DKB (com.entersekt.authapp.dkb). It seems it successfully hides root but it's not possible to register a credit card.
[Xposed Framework Modules] lklaus:
I could register a card... Though i couldn't test it up to now, but registration went fine
[Xposed Framework Modules] pritm:
Hi, was just wondering if there will be support for Standard Character Breeze India.
[Xposed Framework Modules] xDantehh:
Thanks for creating this app, my banking app and Pokemon Go work fine now!
[Xposed Framework Modules] beatschubser:
Worked for me today. The first couple of hours after installing "Card-Secure" it insisted that I had no Internet connection, but eventually it changed its mind and let me register the card.
[Xposed Framework Modules] Ninoh-FOX:
Pokemon go 0.37.0 work to you? How?!! I have rootcloak 3.0 beta but pkmn not work for me

Enviado desde mi E5603 mediante Tapatalk
[Xposed Framework Modules] xDantehh:
I installed Rootclock, added PGO in the app menu, installed Native Root Detection library, and then after rebooting it worked
[Xposed Framework Modules] HairyMilkshakes:
Not working for me - rather than showing the "device not compatible" screen, I am hanging on the login screen.
[Xposed Framework Modules] Ninoh-FOX:
To my said "fail autetication"

Enviado desde mi E5603 mediante Tapatalk
[Xposed Framework Modules] nechvi812:
where can I find Native Root Detection library, thanks
[Xposed Framework Modules] Ninoh-FOX:
In Rootcloak 3.0 beta from releases section in github web site.

Enviado desde mi E5603 mediante Tapatalk
[Xposed Framework Modules] villo88:
Same
[Xposed Framework Modules] HairyMilkshakes:
What version of the app do you have? 0.37? I am now getting authentication errors on top of the login hanging.