yashsingh1/xdaforums huggingface dataset:
[Android Apps and Games] VD171:
Thanks a lot. You seems to be knowledgeable. I don't understand why Marcel isn't nicer to you on the forum:)

Thank you very much, my friend. I don't think he likes jokes. :p But I love him, anyway.

oh thanks, i forgot about the plugins. Wow, wish that Oneplus plugin worked - app killing is rampant. What happens this ID gets deleted to zeros, but not for all apps (VDInfo). Now this new one is randomizing, but again not for VDInfo.

You need to disable the default hook. Otherwise, both hooks will attempt to spoof the ads ID. Read the hook instructions for Fif_: "1. Disable the stock AdvertisingIdClient$Info.getId hook."

how?

Unfortunately, I don't know of any app that hides build props at the moment.

But, there will be no issues if both are hidden.

The new (Device ID Masker), the old (Mobile Faker) and the old (Device Faker) hides the fingerprint:

https://bytesreverserapps.com/device-id-masker/

https://apkpure.com/br/mobile-faker/com.unique.mobilefaker

https://apkpure.com/br/device-faker-xposed/com.devicefaker.free

Yeah, but i need them. I need to deal with the load of vendor apps that has to stay there (unless it's AOSP)

You are right. XPrivacyLua works perfectly for system apps too. Even if UID is 1000 (UID for system).

This was maybe confusing to read. I ment this: XPrivacy masked device ID like IMEI, SIM card ID even if this should not be readable in Android 11. It further shown the real ID as old value and zeroes as new value. This implies that Android 11 doesn't hide those IDs but i speculate it's simply XPrivacy as root app know these values and just hooks up to the ID fetching process even when filtering not needed. If not, that'd be scary as quite many apps had these IDs filtered, showing real values as old value...

Methods for reading, remain accessible. But the system changes the ID to "unknown". If something can override the system, like xposed, it can change the ID for anyone you want. You keep safe, it's not an issue. You just never have to set your original ID to be fed.
[Android Apps and Games] VD171:
Here is the proof of XPrivacyLua can spoof even the system apps (UID 1000).

Before:

After:

XPrivacyLua logs:
[Android Apps and Games] tyler19820201:
Great job bro!

I can confirm it works on my OP3T phone on both Android 10 and 11 as well.
[Android Apps and Games] VD171:
You are welcome, my friend.

Thank you very much for confirmation.

Enjoy :cool:
[Android Apps and Games] braschlosan:
Does a FAQ exist somewhere that would help users understand what actions to take based on specific results? Someone asked me to help get their banking application working and I was hoping to send them the link so they might be able to solve the problem themselves
[Android Apps and Games] VD171:
No, at the moment.

You need to fix by yourself.

If you attach your results, I can help you.

You can share the app if you want :-)
[Android Apps and Games] xdarasc:
Duuuude?!

U sure an app like yours should use user tracking?!

Doesn't sound too trustworthy to me.
[Android Apps and Games] VD171:
No one tracking is made.

No one analytic is used.

Google Api are used for reading GSF id (google service framework) and ADVERTISING id.
[Android Apps and Games] xdarasc:
Thanks for clarification!

GSF works w/o that, ad ID obviously not
[Android Apps and Games] VD171:
You are welcome, my friend.

Enjoy and be free to play however you want 😝
[Android Apps and Games] ineedroot69:
is this false positive?
[Android Apps and Games] VD171:
Not exactly.

It is shown as an emulator, because you have a generic system on your device.
[Android Apps and Games] kascro:
Hello dear developer!

I am having trouble with my banking app. It says : Detected advanced debugger (adb1)

Phone is Xiaomi MI 10T Pro and i am rooted with magisk on xiaomi.eu android 11.

Settings are: magisk 21.4,, magisk hide enabled on banking app, systemless host and busybox addons are installed.

Was using bank app regulary and today it just gave me the error above. After that i hide magisk name in app and hope to somehow hide my root/twrp completely so i can go to bank and get new codes and hoping it will go okay if we are able to hide my root.

This is log from your app:

================ -> Quantities Total Time: 15 minutes and 53 seconds. Total of tries: 5,060,596. Total found: 11.

* Emulator detected. ================ ================ -> ROOT

#1. [* EMULATOR]: [ro.kernel.qemu.gles]: 0

#2. [Found]: package:/data/app/~~ZvUq6Q_TRxD8y9M54DFqDw==/com.llamalab.automate.ext.superuser-D3zRagxxZuVFNt6Hrjh [...]

#3. [Found]: com.llamalab.automate.ext.superuser, /data/user/com.llamalab.automate.ext.superuser, /data/app/~~Z [...]

#4. [Found]: /system/lib/libsigchain.so

#5. [Found]: /system/lib64/libsigchain.so

#6. [Found]: /data/data/com.keramidas.TitaniumBackup

#7. [Found]: /data/data/com.keramidas.TitaniumBackup/files

#8. [Found]: /data/data/com.keramidas.TitaniumBackup/files/busybox

#9. [Found]: /data/user/0/com.keramidas.TitaniumBackup

#10. [Found]: /data/user/0/com.keramidas.TitaniumBackup/files

#11. [Found]: /data/user/0/com.keramidas.TitaniumBackup/files/busybox ================
[Android Apps and Games] VD171:
Did you try to disable USB debugging and check the result?

Only magisk hide is NOT enough.

XPrivacyLua makes everything easier.

(XPrivacyLua requires Xposed.)

Please, give a try:

XPrivacyLua | Xposed Module Repository

repo.xposed.info

https://xdaforums.com/t/app-xposed-6-0-xprivacylua-android-privacy-manager.3730663/
[Android Apps and Games] conan_t:
Hi Developer, I used your app and please find attached information.

The issue is for one app - it detects root. I tried everything I could but no luck. Magisk did work for other apps including banking apps on my phone.

The app is "Service NSW".

Thanks.

I magisk hided VD infos and checked Simple Root Check, system Properties and Classes and Processes. Please refer to the report below.

================

-> Quantities

Total Time: 41 seconds.

Total of tries: 232,736.

Total found: 2.

* Emulator detected.

================

================

-> ROOT

#1. [* EMULATOR]: [ro.build.display.id]: QKQ1.190825.002 test-keys

#2. [* EMULATOR]: [ro.kernel.qemu.gles]: 0

================
[Android Apps and Games] VD171:
Hello,

By the result, the root was NOT detected.

It show as "emulator" because your build id does not have the "release-keys".

"test-keys" means you have a debuggable system.

Normally "ro.kernel.qemu.gles" is shown only in android emulators.
[Android Apps and Games] hshah:
I'm trying to work out why one of my banking apps still detects root and after running your app, the only entry I got was:

================
-> ROOT

#1. [* EMULATOR]: unknown

================

Any suggestions on what that is and how I can get rid of it?
[Android Apps and Games] VD171:
That is not a root detection.

Only an indicative of being using some kind of (android/device) emulator.

You can ignore that is only informative.
[Android Apps and Games] hshah:
You may want to update the app to make that clearer then, because at the moment it counts whatever that is and mentions it under the heading "ROOT".
[Android Apps and Games] VD171:
That's the purpose of using the word "EMULATOR".

If you are using an emulator, it means the device is PROBABLY (and not certainly) rooted.
[Android Apps and Games] hshah:
What does EMULATOR mean exactly?
[Android Apps and Games] VD171:
Means android emulator or device emulator.
[Android Apps and Games] bolagato:
Um alô do Brasil! Seu apk está perfeito.

(for Android 4.4 to 8.1) Device Emulator: The best app to camouflage information.

it would be perfect if you changed the name, model and manufacturer of the device.
[Android Apps and Games] VD171:
Saudações, amigo. Bom proveito. Tmj.

Yes, you can change them. The best app built for that is XPrivacyLua, but you will need to write the specific script for that.

These apps, can change them too. But their databases are really outdated.

(Sim, você consegue alterá-los. O melhor app feito para isso, é o XPrivacyLua, mas você vai precisar escrever o script espificiamente para isso.

Estes apps, também conseguem alterá-los. Mas, o banco de dados deles estão seriamente desatualizados.)

Spoof My Device: https://apkpure.com/spoof-my-device-xposed/nz.pbomb.xposed.spoofmydevice

Mobile Faker: https://apkpure.com/mobile-faker/com.unique.mobilefaker

Device Faker: https://apkpure.com/device-faker-xposed/com.devicefaker.free
[Android Apps and Games] denzi01b:
Hi, how to use your app to determine a hidden service check root of a banking app?
[Android Apps and Games] VD171:
My app does not inspect app by app.

You have to inspect app by app by yourself.

My app just show you what is exposing you.

And then, you try to fix it.

If you want to inspect an app, I suggest you ApkTool:

GitHub - iBotPeaches/Apktool: A tool for reverse engineering Android apk files

A tool for reverse engineering Android apk files. Contribute to iBotPeaches/Apktool development by creating an account on GitHub.

github.com
[Android Apps and Games] panosru:
@VD171 I run your app for ~45 minutes, I wasn't sure what I should check and whatnot, so I selected all. The report is attached to this post.

================
-> Quantities

Total Time: 44 minutes and 43 seconds.

Total of tries: 9,960,765.

Total found: 2,890.

* Emulator detected.

================
================

I can see that most entries are related to /sbin/.magisk/ path do you think that this is the reason that Winbank app is not working?

Thanks!
[Android Apps and Games] VD171:
You have many things to hide.

Did you try XPrivacyLua?

It can solves almost all your problems.
[Android Apps and Games] panosru:
@VD171, thank you for taking the time to troubleshoot my issue. Yes, I have XPrivacyLua, from inside the interface I have checked Winbank, nothing else, should I check something more than the application in question?
[Android Apps and Games] VD171:
Did you try BlockGuardOs.open by Fif_ and Use.Shell by Fif_ too?

XPrivacyLua repo

lua.xprivacy.eu
[Android Apps and Games] panosru:
No I haven't, I don't even knew about those and how to use them, I'm not checking to see if I can figure it out
[Android Apps and Games] VD171:
You need to download them manually using the XPrivacyLua Pro.
[Android Apps and Games] panosru:
Yes I found it, but I'm kind of puzzled, I downloaded the BlockGuardOs.open and all the hooks from Use.Shell by Fif_, should I do anything else other than selecting "Fif_" from collections and reboot?
[Android Apps and Games] VD171:
You just need to download them, active the collection and select them on apps list.

You don't need to reboot the app or reboot the device.
[Android Apps and Games] panosru:
I did, well it isn't working, let it go... I think that the app might detect the unlocked bootloader or something :/
[Android Apps and Games] panosru:
@VD171, for what is worth I read in a Greek forum (since the bank is Greek), that the app behaves differently, in some cases it just notifies the user that the OS is rooted; thus it cannot run (kind of like Revolute does), in some others, it will just crash (like in my case).

A guy wrote that from logcat he managed to identify that the app checks for selinux, in my ROM selinux is permissive, but if I try to set it to enforcing the screen turns off and won't turn back one until I reboot the device :/ Also, on the same topic another guy told that it also checks for bootloader status (unlocked or not) and if the ROM is official, if all the above are true, then I guess there isn't a way to make it work on an unofficial rooted ROM.

UPDATE:

I have an old Samsung S5 which I use it only as a screen for my teleprompter (lol), I installed crDroid with Android 11 on it, with magisk 22.1 (not even passing safetynet), without magichide - nothing - and winbank worked fine, so my guess now is that it is most likely an issue with that particular ROM. crDroid has selinux enforcing, but the ROM I use it seems that it doesn't work with enforcing selinux, maybe that is the issue.

I let logcat run while I start winbank to see the output, this is what I got, I'm looking into it now, maybe I'll get a hint or something..

UPDATE2:

I found some older versions of the app, up until v2.7.0 (Sep 8, 2020) the app starts properly but once you try to type your username it hangs, the v2.5.0 (Jul 23, 2020) works fine but if you try to log in you'll get a message that the service is temporarily unavailable - which is not - meaning that they block older versions.
[Android Apps and Games] VD171:
Permissive SELinux is really a security breach.
[Android Apps and Games] Vidz.CroiX:
@VD171 for best detect, which should i choose bro?

tried just applications, its detect eu.faircode.xlua

tried just process, its now detect 531
[Android Apps and Games] VD171:
Everything.

If you want to detect just something, you can choose less options.
[Android Apps and Games] Vidz.CroiX:
want to play game same as this thread

https://xdaforums.com/t/magisk-hide-doesnt-work.4234217/

so need to hide root.

doing like same as @QuaZero did, maybe.

but i use LSposed.

still newbie, and will try choose detect everything later,

its midnight already.

thanks for the reply
[Android Apps and Games] VD171:
XPrivacyLua is your best friend :)
[Android Apps and Games] Vidz.CroiX:
Bro, this time its alot found for everything checked, confused, what information useful for knowing root detected at which app to hide my game. could you help me pls?

hope @QuaZero login too to help me hide that same game
[Android Apps and Games] VD171:
Your root is totally exposed.

If you are using a custom rom, certainly you will have alot more things to hide.

The best chance is using XprivacyLua Pro, start blocking everything and then try one by one.
[Android Apps and Games] Vidz.CroiX:
i got bootloop, then wiped data. now im using EDXposed with XprivacyLUA, but cant use HIddenCore Module,

Hidden core always bootloop my phone.

for countless tries, now i know that game now only detect gameguardian is installed or not,

if installed, then force close game,

if not installed, can play normally.

so i hide Gameguardian use EDXposed Hide,

hide Gameguardian use xprivacylua,

no luck, detected Gameguardian.

help me broo
[Android Apps and Games] VD171:
You really need to keep trying everything you can.
[Android Apps and Games] Vidz.CroiX:
finally i can use GG, but now didnt know what to hack hahaha

thanks for your time and help bro
[Android Apps and Games] razdvar70:
hi find this on xiaomi mi8, ro.kernel.qemu.gles 0

Please tell me how to hide. Thank you
[Android Apps and Games] crok.bic:
I would try to do it with MHPC.. it has a prop remove method.. or if you don't care about /system anyway then just remove it from build.props.
[Android Apps and Games] VD171:
New Release: Version 1.09

Download: https://xdaforums.com/attachments/vd_infos-v1-09-apk.5350409/

Changelog:

- Fixed target to Android 11 (SDK 30). Apk size is now 3,84 MB.

- Fixed Save to File on Android 11 (SDK 30).

- Supressed warning for permission MANAGE_EXTERNAL_STORAGE.

- Updated Toybox to v0.8.5.

- Set "Simple Root Check" as default.

- Fixed DEVICE section.

- Increased PRODUCT section.

- Added DISPLAY ID section.

- Increased BUILDs section.

- Increased search inside /sdcard/Android/media.

- Increased search for Magisk, Riru, EdXposed and LSPosed.

- Heavily increased search for LSPosed.

- Heavily increased search inside /data/adb.

Enjoy !
[Android Apps and Games] OilPriceToday:
Such a nice app

Any idea on how to hide RIL serialnumber on android 9? I have already tried your recommendations. Thank you
[Android Apps and Games] VD171:
You can do that using XPrivacyLua.
[Android Apps and Games] George35000vr:
What line(s) of code trigger this im getting the same report. I need to figure it out so i can fix some apps that "detect" root/adb stuff.
[Android Apps and Games] VD171:
Probably that is your RADIO.

Do you have magiskhideprops enabled?

Emulator detections are only informative and are not exactly a root detection.
[Android Apps and Games] George35000vr:
I dont use magisk at all, apps check some adb related stuff that i found with your app on another rom and removed them. In this rom thats the only thing i get.
[Android Apps and Games] VD171:
Then, you can ignore that safely.

Do you mean adb debugging?

Adb debugging can't be detected precisely, you can ignore that too.
[Android Apps and Games] George35000vr:
The thing is that some apps like PS Remote Play still detects something and wont open. My Bank app (Winbank) detects root although theres no magisk or root at all, your app confirms that. So that's why im after that thing that your app reports.
[Android Apps and Games] VD171:
Probably the app is detecting unlocked bootloader or custom rom.
[Android Apps and Games] George35000vr:
Anyways sorry for bothering ya, its not your job to identify my rom's "faults" lol. Great app nevertheless, helped me fix another rom.
[Android Apps and Games] VD171:
You are welcome, my friend.

Enjoy :)
[Android Apps and Games] VD171:
🔟 New Release: Version 1.10

Download: https://xdaforums.com/attachments/vd_infos-v1-10-apk.5371159/

Changelog:

- Updated target to Android 12 (SDK 31).

- Added protected permissions. (PS: you need this to be sure those permissions are NEVER given.)

- Added REGION section.

- Added TYPE section.

- Added BUILD DATE section.

- Added HOST section.

- Added SECURITY PATCH section.

- Added SYSTEM VERSION section.

- Added ANDROID VERSION section.

- Added MARKET NAME section.

- Added ENCRYPTION section.

- Added BOOTLOADER section.

- Added MEMORY section.

- Added KERNEL section.

- Added DEVICE NAME section.

- Increased HARDWARE section.

- Fixed PRODUCT section.

- Fixed SELINUX section and detection.

- Added other ways to read Bluetooth MAC.

- Added other ways to read Wi-Fi MAC.

- Added other ways to read BRAND.

- Added other ways to read DEVICE.

- Added other ways to read DISPLAY ID.

- Added other ways to read FINGERPRINT.

- Added other ways to read IMEI.

- Added other ways to read KEYS.

- Added other ways to read MANUFACTURER.

- Added other ways to read MODEL.

- Added other ways to read PRODUCT.

- Added other ways to read HARDWARE.

- Added other ways to read RADIO.

- Added other ways to read SERIAL.

- Added other ways to read Phone and SIM cards infos.

- Added multiple ways to read build and system properties.

- Added multiple ways to search for files.

- Added multiple ways to read files.

- Now detecting UNLOCKED bootloader in ROOT section.

- Increased search for LSPosed and LSPosed Manager.

- Increased search for MOUNT INFOS.

- Increased search for PATHS.

- Increased precision search inside /PROC.

- Heavily increased search inside /PROC.

- Suppressed some unwanted details from some detections.

Enjoy !
[Android Apps and Games] crok.bic:
Just released on my birthday. Coincidence? I think not :D Thank you :D
[Android Apps and Games] VD171:
Happy birthday, my friend! 🎂

I wish you all the love and happiness in the world ♥️
[Android Apps and Games] Eng.Raman:
@VD171, Can you add Zygisk and riru detector in the next version?

Thanks for your amazing app.
[Android Apps and Games] String0011:
Several files were detected on my device:

/data/system/xlua

/system/lib/libsigchain.so

/system/lib64/libsigchain.so

/sdcard/Android/data/io.github.lsposed.manager

I have 2 questions:

1. Why apps can check arbitrary path in the system? Is it problem with OxygenOS11 or just apply to all android versions?

2. What is the best way to fix these? I'm not aware of any framework that controls how apps access filesystem.
[Android Apps and Games] scrawnyb:
@VD171 I'm working on reverse engineering one of my bank apps that started detecting root a while back.

Upon further inspection, I found some semi-obfuscated code that might be good to include in your tool, if not really (mainly the 'which' command being used).

public static boolean m2657g() {
if (m2656f()) {
return false;
}
String[] strArr = {"/system/app/Superuser.apk", "/sbin/su", "/system/bin/su", "/system/xbin/su", "/data/local/xbin/su", "/data/local/bin/su", "/system/sd/xbin/su", "/system/bin/failsafe/su", "/data/local/su", "/su/bin/su"};
for (int i = 0; i < 10; i++) {
String str = strArr[i];
try {
if (new File(str).exists()) {
return true;
}
} catch (Exception e) {
f2479d.log('e', "exception while trying to check existence of file %s", e, str);
}
}
return m2644a("/system/xbin/which su") || m2644a("/system/bin/which su") || m2644a("which su");
}

My question to you - what is the best way to mitigate this if it's what is triggering the app to abort execution? One of my devices that this is failing on is only showing a total of 5 items potentially for root - and I've already removed the /data/local/tmp ones.

Total found: 5.
* Emulator detected.
================================
-> ROOT
#1. [* EMULATOR]: [gsm.network.type]: Unknown,Unknown
#2. [Found]: ru.qXidUWfT.hlJewmBlf
#3. [Found]: /data/local/tmp/xposed
#4. [Found]: /system/addon.d/99-magisk.sh
#5. [Found]: /data/local/tmp/lp_utils
[Android Apps and Games] VD171:
1. Because apps needs to read and write their own files. And sometimes, needs to read other files that you want to open them, like photos and documments.

2. XPrivacyLua is one of the best choices.
[Android Apps and Games] VD171:
All them are already present on VD Infos.

Apparentely, you have Lucky Patcher installed on your device.

Files on /data/local/tmp are created automatically by Lucky Patcher app.
[Android Apps and Games] simplydat:
If I understand correctly, every app can scan every folder and every file on the device?

Could you provide a simple explanation on how apps the scan the entire filesystem without storage permission?

I have one bank app that manages to detect root, and I've already hidden everything I can. All other bank apps work except this one bank app.

Does Xprivacy block app from "reading" or "scanning" your storage? I installed it and used it block everything on this app, but root is still detected. The only way to make the app work is installing the app on a clean work profile via island app.

So it makes me think that app detected some files related to root on my phone and cause the app to detect root and I have no clue which files.

Btw, thank you so much for creating this VD infos.
[Android Apps and Games] crok.bic:
Consider the following:

Install a terminal emulator then issue the following command:

ls /sdcard/Download - "Permission denied.." but this is not the same as "No such file or directory"!

stat /sdcard/Download will still tell the permissions and other info of an existing directory.. or file..

So.. in case let's say the banking app is trying to run ls or stat for the directory called TWRP in your internal storage.. and the result is "Permission denied" and not "No such file or directory" the programmer can be sure that the directory (or file) exists - even though the app (your terminal in this example) has no storage access at all. And of course why do you have TWRP dir in your internal storage if your bootloader is locked.. you know.. the rest is speculation, guided guess, call it whatever you want but the programmer can deny the run of the app based on the results.. if she/he want..

And you mentioned "crash" but that's a different thing by the way. So I don't think this (I mean root detection) is related to your problem if it really crashing (force closing). App coders used to tell the user that the app refuses to run because of modified system / root detection, not just crashing without a word. In case it is really crashing if I were you I would check the logcat, searching for clues.

I don't see any info about your actual setup (device / ROM / Magisk version / modules installed and their versions) but probably all you have to do is to upgrade your stuff (ie. Magisk Canary + USNF Zygisk version + probably MHPC if you are using a custom ROM with nasty props handling). That's my two cents.