[Magisk] mGforCe:
Hi,

I have Asus Zenfone Max Pro M1 with StockMod Pie with Magisk v20.3 Stable

Magisk Manager has been renamed to Manager

Safety Net Check has been successful always, both *ctsProfile & basicIntegrity"

On same, have been using an Indian Bank - IDBI Bank GoMobile+ app for last few months and things have been all fine. The app has been selected under Magisk Hide.

I do use other bank/fintech apps too like GooglePay etc and they work fine.

But since yesterday this GoMobile+ app is saying phone rooted and not working. It seems that with recent update of 30th Jul they have introduced some additional check.

Taking bit of inspiration from [MENTION=5357907]rithvikvibhu[/MENTION] message in earlier thread I tried to decompile the latest apk to jar and use jd-gui to see if can find something related to root

com.scottyab.rootbeer and within same I see following

package com.scottyab.rootbeer;

public final class b {
public static final String[] a = new String[]
{ "com.noshufou.android.su",
"com.noshufou.android.su.elite",
"eu.chainfire.supersu",
"com.koushikdutta.superuser",
"com.thirdparty.superuser",
"com.yellowes.su",
"com.topjohnwu.magisk" };

public static final String[] b = new String[]
{ "com.koushikdutta.rommanager",
"com.koushikdutta.rommanager.license",
"com.dimonvideo.luckypatcher",
"com.chelpus.lackypatch",
"com.ramdroid.appquarantine",
"com.ramdroid.appquarantinepro",
"com.android.vending.billing.InAppBillingService.COIN",
"com.chelpus.luckypatcher" };

public static final String[] c = new String[]
{ "com.devadvance.rootcloak",
"com.devadvance.rootcloakplus",
"de.robv.android.xposed.installer",
"com.saurik.substrate",
"com.zachspong.temprootremovejb",
"com.amphoras.hidemyroot",
"com.amphoras.hidemyrootadfree",
"com.formyhm.hiderootPremium",
"com.formyhm.hideroot" };

public static final String[] d = new String[]
{ "/data/local/", "/data/local/bin/", "/data/local/xbin/", "/sbin/",
"/su/bin/", "/system/bin/", "/system/bin/.ext/", "/system/bin/failsafe/",
"/system/sd/xbin/", "/system/usr/we-need-root/",
"/system/xbin/", "/cache", "/data", "/dev" };

public static final String[] e = new String[]
{ "/system", "/system/bin", "/system/sbin", "/system/xbin",
"/vendor/bin", "/sbin", "/etc" };

private b() throws InstantiationException {
throw new InstantiationException("This class is not for instantiation");
}

Now am not using any of these apps atleast. So what can be the reason here? I don't want to go with the option of signing modified apk.

Also anything else to be searched in jar file? I tried searching isrooted etc but couldn't find. Even tried searching for rootbeer but nothing came.

Pls help and suggest what can be possible solutions.

I installed Rootbeer Sample app and selected it in Magisk Hide and upon running same, it says Not Rooted. Everything passes with green except "Busybox Binary"

Also I tried analyzing logcat over adb and read following

[ 08-02 19:40:11.629 27679:27830 V/RootBeer ]
c: a() [184] - /system/xbin/busybox binary detected!

PS: I am using apk to jar and using the above tools for the first time. So may be missing few more options/search etc

SOLUTION: Read post 2, in my case there was an old remant of BusyBox which was creating the issue.

For others having issue in using IDBI GoMobile+, pls check that you don't have any of the above apps (mentioned under spoiler)