yashsingh1/xdaforums huggingface dataset:
[Xposed General] ShahadS:
Guys help please. I installed this virtual xposed app and added some apps to it.But i had a problem.My app can't save data to ex sd card.Any solutions??
[Xposed General] leprince2007:
I installed kingroot but it didn`t root the device
[Xposed General] DragonFire1024:
I'll be the first to admit most of the time I've no clue what I'm doing. I've tested so many methods for so many things and have surprised myself more often then not. But don't let anyone say its not possible. Or you'll be like me. I came here with an impossible list and with more than a handful of people telling me what I've accomplished this far, wasn't possible. I can't say I know a lot about the android system but after almost two years, I've done more than some developers I've met in real life, and have done less in the 5+ years they've been doing stuff like me, or the OP. But I digress. I hope someone takes this work and learns from it. Maybe not xposed, bit it has potential for other things.
[Xposed General] akhilkedia94:
VirtualXposed seems fully legit, a brief review of how VirtualXposed seems to work

Xposed Module developer here.

Here's how VirtualXposed works -

All apps run inside VirtualApp (https://github.com/asLody/VirtualApp) - This is library wraps around some android system calls to allows to run apks as plugins inside the original app. The concept seems viable, and the source code seems fine to me. The project is also mostly open-source project, with over 4200 stars on Github. (Its not free for commercial use though, that requires the purchase of a license.)

It seems to use Epic (https://github.com/tiann/epic) to actually process xposed hooks - This is an open-source library, actually inspired from xposed itself, for developer to "hook" into their own apps. The concept is legit, source code seems fine, 600 stars on github.

VirtualXposed is essentially a launcher which wraps around the above two libraries, allowing you to install apps into the launcher which run under VirtualApp, and which are hooked using Epic. VirtualXposed itself has over 4000 stars on Github, has a very-logical looking commit history, and seems clean to me.

I'VE PERSONALLY TESTED THIS PROJECT, AND BASIC XPOSED MODULES WORK PERFECTLY. See attached screenshot of an Xposed module changing all text displayed in another app to "Boink".

More complicated modules, might need to be changed slightly to run here. The only unfortunate part is that the lead developer does not speak perfect English, and the current users are mostly all Chinese. This definitely deserves Much, much more attention, and has the potential to bring Xposed mods to the non-rooted world.

For developers, limitations of VirtualXposed so far that I know

Cannot hook apks outside of VirtualApp (and things such as SystemUI). CAN SUCCESSFULLY HOOK MOST ANDROID APIS HOWEVER.

Too unstable on Android 8.0 and above.

Unstable Hooking functions which are virtualized to native JNI calls

Edit - Devs check out more details of how VirtualXposed works in this thread here! - https://xdaforums.com/xposed/development/virtualxposed-analysis-module-t3800947
[Xposed General] koko115:
Where i find app for install ?
[Xposed General] sumitarora2:
https://github.com/android-hacker/VirtualXposed/releases
[Xposed General] koko115:
What module works for test on s9+

I try AllMy, xposed edge, blocksecure flag. And not work.
[Xposed General] manos78:
Hi, :good:

From my point of view, running Apps in a container with hooks (call it VirtualXposed, or any other similar project) is the future. At time, is quite risky and complex to run hooks system-wide. And as more and more users do not root their devices, that's the best option.

So the future is a rootless container environment with hooks!

Regards. :cool:
[Xposed General] CarteNoir:
If this runs apps in a sandbox, does it stop them from examining the filesystem outside the sandbox? For example, Pokemon Go looks in /data/data for evidence of root-related apps. If I chucked it in this (with no Xposed modules running in the sandbox) would it isolate it so it couldn't detect stuff I have installed on my phone like XposedInstaller or Titanium Backup?

Dude, chill out. You'd think someone claiming to be such an expert on the matter, with apparent evidence that this is a malicious project, would actually want to back up their claims with that evidence. All you've done is come into this thread and talk **** about this dev/their project without posting any reasonable evidence as to why this is such a bad thing. I see these devs contributing to the scene, and I see you running your mouth, and telling people off without backing up anything you're saying with actual proof.
[Xposed General] Adriano-A3:
LOL
[Xposed General] SyCoREAPER:
Now I have to remember what I used Xposed for...

Been without it so long. GravityBox would be top but read it doesn't work.

Am definitely putting this on the back burner until I review everything on Github. All those permissions seem very excessive and throw an instant red-flag to me.

Looks promising nevertheless
[Xposed General] Mcha01:
This is amazing!
[Xposed General] andrew2432:
Why did it take so long to find this? Why did XDA wait so long to show me?! This is amazing!!!

Now that you've hit the feed, get ready!!
[Xposed General] MoistPicklez:
Am I missing something? I can't find a download in the original post nor can I find a download on the GitHub link..
[Xposed General] Jolt151:
Wow, is crazy. Unfortunately, the one thing I would love to use it for is Pokemon Go, and without Play Services and SafetyNet, this isn't gonna work yet. Still, I can't wait to see where this project goes!

---------- Post added at 03:45 PM ---------- Previous post was at 03:45 PM ----------

Go to "releases" in the github
[Xposed General] andrew2432:
Genuinely interested, would you be willing to share the results of your probe? I would love to know the lines of code you found as well as a friendly examination and discussion of the closed source apps!

Is there anyway to "guess" the basic apps that work or will we need to get to testing?
[Xposed General] safwan ck:
https://github.com/android-hacker/VirtualXposed/releases
[Xposed General] Zerikwan:
Look again, an Xposed Module Developer already here and say it works. Also explain how things work...

you missed it, buddy.

Looks like it is you who don't deserve to be in this site.
[Xposed General] MoistPicklez:
Awesome work just tested it out but unfortunately the modules I used did not work, however I love the idea I think this is just great.

does anyone have an idea of which modules would work I try the status bar module and I tried home button battery percent module neither of which worked but would like to try and tinker more.

Thanks for this!
[Xposed General] chadhoard:
Sweet! Unfortunately, the app closes on opening on Android P DP2. :(
[Xposed General] nattycfc13:
would this work with samsung?
[Xposed General] bnwg:
I think the app specific module will work but personally all the modules I use as essential are for system wide like All Trans :fingers-crossed:
[Xposed General] MoistPicklez:
So basically any modules that alter the system ui won't really work without root? Yet app specific modules will? Huh, kinda neat actually. Just wish I knew of more Xposed modules that work properly with this, but all the modules I've ever used are to change status bar and navbar.
[Xposed General] bnwg:
Yes it is unfortunate this is what it is at the moment. I think it's good idea with great potential.

I know nothing about Android system or coding but I hope talent developers could find out more to perfect this up.
[Xposed General] SyCoREAPER:
Just because they explain that it works and how it works doesn't make it safe. Someone has to go through the sources and make sure everything is legit which (unless I've missed it) nobody has done
[Xposed General] inGen.AD:
How can i use Google play login? Just like parallel space?
[Xposed General] abdullahsabbir:
Xposed Installer doesn't open up.

Using Xiaomi Mi 5, Rom: AEX Mod, Android Version: 8.1
[Xposed General] Zerikwan:
I try it myself, it works...for some module.

Sorry but I don't mention anything about safety before.

And yes, you are right. Someone need to go through the source to make sure everything is legit.

Xinsta is work for me. Gonna try for some modules.
[Xposed General] Ketsuban:
I tried this with Pokémon GO and it doesn't let me login :( But overall pretty good, it works for the other apps I tried :)
[Xposed General] Dbj.Dhaval:
I want to use this but just looking at the permissions it needs.. Yikes.. Read mail read msg etc
[Xposed General] HighOnLinux:
If i get malware on my phone it doesn't matter, but for some reason it says xposed is installed but not active. I restarted the app, but still nothing. Anyone got a solution for it?

Edit: my device is SM-G950U on oreo running the lastest 3CRE2

Edit #2: i got it working now. Uninstalled and reinstalled. Great job Dev!
[Xposed General] jaimeletelierhay:
Will this work on the p20 Pro??
[Xposed General] nattycfc13:
guys please help, I want to try this but will it break samsung s7 edge oreo?? thanks in advance
[Xposed General] thefinancemaster:
Same

Me too. Instant crash when I open it...
[Xposed General] nattycfc13:
please can anybody let me know if this works on samsung s7 edge oreo? Will it brick my phone? thanks in advance
[Xposed General] buzdard:
No it wont brick it. Its only a virtual machine on Android.
[Xposed General] clarkcant:
Deleted
[Xposed General] andrew2432:
Hey try it! Make a twrp backup and go for it! As stated it's an app so it shouldn't brick your device!

To everybody: chill out on names and who doesn't belong, we all do. Give him the opportunity to publish said findings and just go on about our lives if he doesn't.

And the permissions are scary but I'm sure they are necessary. To modify something its going to need access to a few things. If you're too worried wait on source codes and monitoring data from the devs and contributors here. Its been given somewhat of an examination already and nothing nefarious sticks out. This doesn't mean its safe, just kinda stuck between yellow and green lights. XDA wouldn't likely point us to malware if they could help it! I think the rest starts to come under our responsibility now!

I believe this is the source of the discussion and it is interesting. The dev responded to it by saying he was looking into the issue for "malware" hits.

Clones apps inside the virtual machine so outside apps are not affected.

[MENTION=1107751]soulife[/MENTION]also posted an interesting bit

[MENTION=3878921]agraceful[/MENTION] would it be possible to publish this backdoor you mentioned? It could help out a bunch, maybe the dev will see this and respond as he has with other claims!
[Xposed General] nattycfc13:
thanks, do I just install the apk? there are three things on each version
[Xposed General] andrew2432:
https://github.com/android-hacker/VirtualXposed/releases

I personally havent installed, still reading and checking it out. I went there and see the normal apk at the top of the list of files/apks.

Just install the apk and boot it up, its a virtual machine and will also need to clone your apps(one possible reason for permissions).

Remember its mods are only app level, and I fdont believed google services has been successfully integrated YET.

Edit: oops
[Xposed General] Kusanagi Motoko:
This is HUGE. Thanks for making it happen!
[Xposed General] psychowood:
Tried in Samsung's Secure Folder (you know, permissions...) it crashes as soon as the virtual desktop is shown.
[Xposed General] nzzane:
Looks Promising,

Keep up the good work
[Xposed General] canezila:
Damn... This works! Great job DEV.
[Xposed General] BADDINOROX99:
what moduleles work?

update: tried a few modules gravity box,min guard,greenify,YouTube adaway

none of them work on my Samsung Galaxy Note 8 unrooted running Oreo

this looks very promising tho for Schmucks like me who are stuck on Verizon
[Xposed General] lover:
Xinsta didn't work for me. I did install Xinsta from VirtualXposed also Activated and rebooted but didn't work
[Xposed General] nattycfc13:
thanks so if I don't like it is it just a simple uninstall?
[Xposed General] ddaharu:
Anyone tried Android P-ify?
[Xposed General] YossiAxda:
Unlock the bootloader

Hello,

I have installed VirtualXposed on LG G5 H850 which has a locked bootloader.

By the title of the thread, I understand that I can unlock the bootloader with this app.

Any assistance on how exactly I do this with VX? Using a root app like kingroot? Or some module?

Thanks
[Xposed General] agraceful:
[MENTION=7785649]andrew2432[/MENTION], the code is on GitHub. Seems I'm the only actual person to dig into this "project" instead of jumping to conclusions like almost everyone else has. Seeing as how this uses a VM it can NEVER replace Xposed or run any module that requires it hook into the system. I bet 90% of users on here have no idea what that means and there lies the problem.

They see words mixed together and buy all the B's anyone says before actually looking things up. This isn't a big deal in the slightest. Every module that can be ran in this VM has a 3rd party app that can already do the same thing. As a side note, just because XDA published the shortest write-up on this means absolutely nothing. Nobody does any research before they publish anything as I've called them out in the past and they've been retracted. The kids are more than welcome to sling mud at me, I could care less. Oh, and the permissions asked, should be a red flag to anyone concerned with privacy. But, go for it.
[Xposed General] nattycfc13:
so guys I have installed virtualxposed and is running in the background, I went into the app but says no modules, and also do I need to install xposed installer aswell? no root s7 edge oreo
[Xposed General] chadhoard:
I must be missing something, is there an English app? Everything under "Recommend Models" is in Chinese.
[Xposed General] HighOnLinux:
A majority of the modules are also in chinese. But a translate app could help (somewhat).

---------- Post added at 11:36 PM ---------- Previous post was at 11:35 PM ----------

Xposed installer is already pre-installed on the app, so you don't need to reinstall it.
[Xposed General] Zerikwan:
Did you clone the instagram app inside VirtualXposed?
[Xposed General] nattycfc13:
anyway to hack instagram to get more followers with this app?
[Xposed General] lover:
Of course, sorry i did not explain enough, the Instagram App Crashes when i try to login. maybe because i have OPT in Instagram Beta, i see there is an option to install APK directly into VirtualXposed so i am going to download Stable version and try it out
[Xposed General] LastDarkWarlord:
take note that it says some modules because there are some xposed modules that require root perms out of the framework so some problems can be present maybe
[Xposed General] :
When scanning the latest version of the apk file virustotal found 1 detection in classes.dex it was android.banker.gen22855
[Xposed General] mrshmi:
That doesn't sound safe
[Xposed General] :
Its probably a false positive.
[Xposed General] mscion:
Was wondering. Does the xposed module Swipeback work using VirtualXposed? Thanks!
[Xposed General] hwangtaizia:
I have an issue: when I try install My Days Off app, it can't check my licensed. I purchased this app, but when add app to virtual xposed, it tell me that "You are not purchased". And when open it from app draw, it tell me that "Xposed is not enable...".How can I do now?
[Xposed General] SyCoREAPER:
I am leaning towards not safe solely on the ungodly number of permissions at install.

I highly recommend people curb their enthusiasm and wait for someone to look into it deeply

Translate into English for some interesting info https://www.maldun.com/analysis/YXNkZmRzZmFkc2YxNTYwMjRkc2Zhc2RmYXNkZg==/

Between the permissions being an issue there is also

CAT-QuickHeal	Android.Banker.GEN22855

K7GW	Adware ( 0052b8bf1 )

BAD

Now this is far from a proper breakdown but should give some insight as to be cautious.
[Xposed General] tech2update:
somebody help virtualxposed not working on my phone I installed some models but they wouldn't work. can someone give me full tutorial how to use.
[Xposed General] sumitarora2:
Not all modules work in virtual xposed, mainly those which change resources
[Xposed General] hellrokr:
This is huge! thanks a lot.
[Xposed General] AndroBuddy007:
Though there are warnings that this might be some kind of malware, I find it quite legit and useful.

A big step towards success and something which will help many who no longer need to root their devices as well as don't need to fear bricked devices.

Cheers:good:
[Xposed General] Nastrahl:
For only getting rid of system notifications it may be more efficient to use AutoNotification instead.
[Xposed General] bertschwert:
If I understand it right VirtualXposed can be used even if the bootloader is locked, but not to unlock the bootloader ;)
[Xposed General] SyCoREAPER:
If something like this is possible in a 100% safe build maybe [MENTION=4419114]rovo89[/MENTION] or [MENTION=4470081]topjohnwu[/MENTION] could do something like this as a bounty or something

Sorry to call you guys out directly but if someone can build a legit and stable version (off the top of my head) it's you guys.
[Xposed General] SyCoREAPER:
If something like this is possible in a 100% safe build maybe [MENTION=4419114]rovo89[/MENTION] or [MENTION=4470081]topjohnwu[/MENTION] could do something like this as a bounty or something

Sorry to call you guys out directly but if someone can build a legit/official and stable version (off the top of my head) it's you guys.

Not trying to put pressure on you either, clearly the enthusiasm for something like this is there though.
[Xposed General] mirhl:
Man, really - leave the troll alone.

It's crazy for somebody to write baseless walls of text.. just to complain (when asked about proofs) about his time being too precious to enlighten the other stupid users.

Let alone straight denying whatever positive experience might have been reported anywhere.

...

Said this as discussed in page 6 of this thread, dev wasn't happy with AV software either.

But you can totally read on github what was the ""malware"".

(also, your scanner magical whatever number seems just to be relying on virustotal)

Then the app is some 10-20% still closed source... but it's not like this was the first time XDA trespassed the Stallman Bible?

And once you get over that (it's bad, still not as bad as nothing on closed bootloader phones, for example) I don't see why all this scare.

Hundreds of people has likely tried already this app, thousands even probably. And realistically there is a point when absence of proof becomes proof of absence.
[Xposed General] akhilkedia94:
@ Developers - I have started a new thread discussing all the technical aspects of VirtualXposed here - https://xdaforums.com/xposed/development/virtualxposed-analysis-module-t3800947.

Maybe head over there to drop any insights you may have.
[Xposed General] gps3dx:
This project seems a wonderful idea - and I hope it will grow and prosper.

one note though on the 'malware' claims...

I found that article, publish by what it seems a legit software-security company.

they claim that VirtualApp a framework can be used by malwares - and as stated above part of the VirtualApp is close-source...

so...

How can we debunk/proof that VirtualXposed & its the framework which it is built upon - are safe ?
[Xposed General] akhilkedia94:
Just because something can be used to CREATE malware, doesn't mean something IS malware (For example - Any malware created using VirtualApp, was ultimately created using Android APIs - doesnt mean Android APIs are malware)
[Xposed General] SyCoREAPER:
Everyone is entitled to their opinion, I'll leave it at that.

I've voiced my word of caution and said what I have to say.

For those 100's/1000's I hope it legit, if not, well we know the outcome.

Best of luck to everyone in the thread.
[Xposed General] MoistPicklez:
While I agree, XDA needs to properly analyze their topic before simply posting and jumping the gun, like with this exact thread, I do see a ton of conspiracy mumbo jumbo. Hell, even an Xposed Module dev cam into this thread and gave their 2 cents! Regardless, this has project has potential, it certainly isn't my cup of tea, as any modules I'd use would need to hook into the system, but it is a cool idea that I hope evolves in the future.
[Xposed General] MishaalRahman:
Since we're being unfairly attacked, I thought I would respond.

No, we didn't just rush to post this. We learned of this literally the day it was first posted back in March. We talked to GermainZ (XDA Portal, XDA Forum Moderator, and prolific Xposed Module developer) to look into it. To him, the project seems legitimate, so we trusted his analysis but held off on it until it was vetted by the community.

Two months later, and hundreds of users later, everything seems fine. Now that we waited three months we're suddenly rushing to cover it? Sure we didn't post a detailed, in-depth analysis of this project, but that's because others have already done that in this thread.
[Xposed General] akhilkedia94:
Proof that it works

I have created a sample module which shows VirtualXposed works - https://github.com/akhilkedia/VirtualXposedSamplePOC

Feel free to install the module and the demo apks from https://github.com/akhilkedia/VirtualXposedSamplePOC/releases, or just build them yourself.

You can also get more detailed information about how VirtualXposed works here - https://xdaforums.com/xposed/development/virtualxposed-analysis-module-t3800947

Safety/Security Issues

The app requests a ton of permissions - This is necessary given that it has to emulate all of those APIs. Perhaps these can be changed to runtime permissions in the future?

The app and all its dependencies are FULLY OPEN SOURCE. I have confirmed this myself. So you can simply go through the code yourself to check that everything is fine. (And I did go through the code, and it all seems fine.)

I scanned for binary files in the code, and there is only 1, and that too can be easily generated.

I scanned for URLs in the code, and everything is clean. (ofcourse it is possible that some URL may be encoded in hex or base64 or some other form)

Virus Scan results - 1 virus detected by VirusTotal. See developer rant - https://github.com/android-hacker/VirtualXposed/issues/10#issuecomment-377295527. Given all of the above, I believe its a false positive
[Xposed General] HighOnLinux:
Given the feedback of this project, it could go one way or the other for people.

As though people are concerned for their device with so many permissions being used, i believe its just for the emulation to fully work. I mean i dont want to make a hefty comparison but look at bluestacks for windows for example. It needs several tweaks and resources to run properly to emulate an OS on another. This kind of runs towards my point of using emulation. Emulation requires numerous permissions to run properly, no matter what it's on. If it "contains" malware by any means, ofc moderators will remove the link to download such a thing. Has anyone reported something sketchy to their phone? No not yet and hopefully not. This project is the start of something new, so let's give it time to shine, shall we?
[Xposed General] Zerikwan:
ahh.. someone that have opinion about permission finally speaks out.

Yes, I'm thinking the same thing. This tons of permission are needed for emulate to work.

If you people have nothing secret on your phone or you don't care about privacy or you just wanna try the app, then you are free to use it.

If you are too afraid about those crazy list of permission request, then don't use it.

As simple as that.
[Xposed General] msohail_7:
I installed xinsta but the main instagram app doesn't get all those functions its only the app in that launcher.
[Xposed General] aneeskamuhammed:
xinsta on oreo with VirtualXposed

Hide download notification from xinsta settings, also disable if any notification features enabled. Download works fine for me( I didn't try any other features)

¯\_(ツ)_/¯