yashsingh1/xdaforums huggingface dataset:
[Magisk] Laptapper:
For me only 24.2, zygisk forced deny all 3 of phototan necessary

Android 12 crdroid 8.2 without safety net fix. Playstore certified out of the box.
[Magisk] VD171:
Comdirect phototan makes some checks that can be spoofed using XPrivacyLua.
[Magisk] lordnils:
Yes but how? Did you do it? Where?
[Magisk] muschi.muscholini:
That worked. Thank you.
[Magisk] ezy79:
I had to clear photoTAN's cache and data and re-register the whole deal.
[Magisk] diemadedrei:
And don't forget to disable auto updates in the play store... At some point their backend will force the update though, I fear. We need a long term solution
[Magisk] Asellus:
I was not able to re-install the app from my Swift backup backup. It crashed immediatly.

Fortunately I found my old activation letter, so that I was able to activate v8.2.1
[Magisk] Asellus:
Did nor work for me
[Magisk] AndDiSa:
@diemadedrei that's my fear, too. There are more and more banking apps detecting Magisk hide. Most likely due to the use of isolated processes as described here and here.

Let's hope that @topjohnwu will find a solution.
[Magisk] Asellus:
Taken additionally riru with its lastest release v25.4.4 on top of Magisk v23 and the module "riru - Enhanced mode for Magisk Hide" (see https://github.com/vvb2060/riru-unshare) which shall be able to handle isolated processes, but also with no success
[Magisk] pxrave:
Hey fellas I got it working and others apps detect magisk before.

Update to latest v23

Install modules riru and riru unshare

Remove data from tan app

Go to magisk hide and tick all process to hide included the isolated

Start the tan app and do the activation again.

Problem you need wait 2 days to activate because comdirect use new activation process for photo tan app.

Working fine all version 8.3
[Magisk] Conan179:
can you please post the link to riru and riru unshare?
[Magisk] Asellus:
Riru is a standard Magisk module. In order to install the Riru app while installing the module, you need to create a file /data/adb/modules/riru-core/allow_install_app prior to installation, according to https://github.com/RikkaApps/Riru. Don't know whether the app is necessary.

Riru unshare is the file I mentioned before. This you need to download and install it via storage in Magisk.

As I told I was not able to get the phototan app working with Riru. Maybe others?
[Magisk] pxrave:
It's working the way I told. Try it and make exactly what I write you will have success.

You don't need any app just this two modules. Search in Google and download from github. Br
[Magisk] Conan179:
I can confirm that it works!

I first run and installed riru via the magisk app, then downloaded and installed riru-unshare without restarting, restarted, updated phototan ap via playstore and then immediately activated all 3 points in Magiskhide and I can now open the phototan app without any problems!

Only 1 time, secondopen the app, after 30min later, root detect back and not working anymore.
[Magisk] allrightlite:
For me it's not possible to activate 8.2.1 again. How long do I have to wait until this is working again? I have one working device at least.
[Magisk] diemadedrei:
Still working on 8.2.1 here
[Magisk] allrightlite:
I have deactivated online the activation and then I have clean install 8.2.1 and I have unhide/hide more times. It's not possible to get it working. I want activate with my second device. But 8.2.1 won't recognized anymore.
[Magisk] Conan179:
i have yesterday 2 8.2.1 instance activate, with qr pic over mail, no problems, only 2 days waiting time.
[Magisk] allrightlite:
Ok, yesterday. Maybe it's over today.
[Magisk] Conan179:
Sorry, but you're wrong, I just successfully activated version 8.2.1 on my Note 9, with QR code on a letter.
[Magisk] allrightlite:
Ok, seems so, that I have to send me a letter for that. I just have an old phone with the old photo TAN app to, which I use instead of the letter (which I don't have). Normally that should work, but in the cd settings just the option to send me a letter with qr code. But I don't want that, because my second device and that way has last time worked
[Magisk] xuxu1:
I just installed Riru core + Riru Unshare Module by vvb2060 and its working again
[Magisk] VD171:
I just click on enable button.
[Magisk] Asellus:
No need. Zygisk with deny list plus safetynet fix is sufficient. The rest is voodoo 😉
[Magisk] VD171:
DenyList alone does NOT changes nothing.

You need to disable enforcing denylist and enable shamiko.
[Magisk] Asellus:
I enforced deny list and have not installed anything except for the safetynet fix, and all my banking apps including comdirect's phototan work w/o any issues
[Magisk] edwardenglish:
hello,

can anyone post a qick and noobfriendly "HOW TO" get photoTAN by comdirect working with the latest version?

I have latest magisk installed, forced denyLIST and enabled it for photoTAN but still its detecting root.

thank you
[Magisk] VD171:
Obviously, enforcing denylist is a very bad action.

Just read my previous replies.
[Magisk] langweiligh3:
I don't think you wrote why it's supposed to be a bad thing. Just what/how other modules you use.
[Magisk] edwardenglish:
ok what I did now is install Universal SafetyNet Fix and Shamiko from Github as modules in Magisk and disabled "enforce deny list". I reinstalled PhotoTAN App and disabled the permission to "check for other installed apps" - still it is detecting root = not working
[Magisk] Asellus:
If you use Shamiko you must not enforce deny list in order to make it working.

In case that you have not installed Shamiko you must enforce deny list in order to apply Zygisk to the selected apps.

So saying that enforcing the deny list is the root cause for problems is wrong.

The strange thing is that for me Zygisk plus deny list is sufficient. Obviously this is not always the case.

You have cleared the cache of the phototan app? You have at least Android 11? You have put all services of the app to the deny list?

Perhaps you need to give Shamiko a try. Then, as stated above, you need to configure the deny list, but must not enforce it

Edit: Was in reply to #390 and #391
[Magisk] VD171:
Yes, I wrote.

Just read my previous replies.

https://xdaforums.com/t/comdirect-phototan-app-detecting-root.4274825/post-86539763

Enforcing denylist does NOT hide magisk or root.
[Magisk] edwardenglish:
Okay, I tinkered a bit and it works like this. BTW I am on android 10 and it still works with root and the latest photoTAN:

1. uninstall photoTAN

2. install Universal SafetyNet Fix and Shamiko from Github as modules in Magisk

3. install photoTAN but dont launch it

4. remove permisson to scan for other apps (photoTAN permissions)

5. add all 3 (!) processes of photoTAN to the denylist of Magisk BUT dont enforce denylist

6. reboot phone

7. start photoTAN for the first time - works for me
[Magisk] VD171:
You don't need to uninstall or clear data of the app.

You don't need to reboot after add a process to the denylist, only after installing/updating/removing any module.
[Magisk] Asellus:
Zygisk does not work on Android 10. This explains the difference. I asked for it in my post...

From Android 11 on it should be sufficient to use the deny list w/o Shamiko
[Magisk] edwardenglish:
just posting what did the trick for me. Those are the steps that made it work for me. anyone is free to decide what to leave out
[Magisk] langweiligh3:
Sorry, but there is no explanation why one should use shamiko and why enforcing denylist is a "very bad thing" (obviously under the assumption that the latter is working)
[Magisk] Laptapper:
Again:

You have to make a difference for your replies and say if you're on Android 10 or 11 and above.

If you are in 11 or above like me ONLY magisk >24 and zygisk enforcing with all 3 on phototan and of course google play store and services (delete cache and data after enabled and restart then google play shows certified) is needed. May be safety net fix needed but for me on crdroid 12 isn't needed.
[Magisk] nik2011555:
Can confirm this method makes 8.6.0 work on Android 10
[Magisk] VD171:
This works on all Android versions.
[Magisk] Asellus:
Perhaps the only solution for Android 10 and below, but much too complicate for Android 11+
[Magisk] endrancer:
by now i am on android 12, miui, latest magisk (beta/stable), not sure if I could use the latest version with zygisk and denylist?
[Magisk] Asellus:
From our experience Zygisk plus deny list should be sufficient from Android 11.

I would install the universal safetynet fix also, but it is not mandatory for the phototan app
[Magisk] endrancer:
I have all that,

but I am on android 12…

my current setup works with a few manual steps, so i just want to be sure i am not blowing it out of the window.
[Magisk] Asellus:
As I said, it should work and be sufficient from, not only on Android 11, that means, 11+
[Magisk] langweiligh3:
DenyList works for me on Android 12 with the latest photoTAN (8.6.0) without any further setup.
[Magisk] pa.pn2:
Same
[Magisk] Pixelmatsch:
Just updated to photoTAN 8.7.0 on Android 11, Magisk 24.3 with Zygisk+Denylist, all still working fine.
[Magisk] wtf!!droid:
I'm looking for 3c app the one which you posted in the screenshot to restrict a few permissions of some other app can you help me with the exact name and do I need to purchase the pro version of it
[Magisk] VD171:
Disabling services and activities are so exhaustive.

Because you need to disable it for every new update, due the code obfuscation the services and activities names are randomized for every new build.

I suggest you to use the wonderful magisk module: SHAMIKO.

Shamiko solves the problem.

Shamiko official website:

Releases · LSPosed/LSPosed.github.io

Contribute to LSPosed/LSPosed.github.io development by creating an account on GitHub.

github.com
[Magisk] wtf!!droid:
I'm already using it

wanted to restrict few services

unable to book uber on rooted device
[Magisk] VD171:
I can't try uber at this moment, because uber drivers from my city migrated to another app (99).

May you attach the screenshot of the error message, please?
[Magisk] Laptapper:
3c pro

3C All-in-One Toolbox - Apps on Google Play

The ENTIRE 3C collection in just one package! *

play.google.com

3C All-in-One Toolbox Pro key - Apps on Google Play

Unlocks the full potential of 3C All-in-One Toolbox

play.google.com
[Magisk] xflowy:
guys.. im on android 12 stock and rooted with a pixel 6 pro. somehow just zygisk, denylist and safety fix doesnt work any more. any ideas? :)

thanks!
[Magisk] Asellus:
Can't tell.

I checked now with a second phone with KOSP (Android 12.1), Zygisk, deny list, safetynet fix, Magisk Manager not hidden, and phototan starts without issues.

Have you checked all three phototan services in the deny list, and deleted data of the app afterwards?
[Magisk] endrancer:
root detected as well...

- android 12 miui 13

- denylist active

- safetynet fix

recently it was working. not sure if there has been an update, but now it's not anyore.
[Magisk] Asellus:
Strange.

Give the Magisk module Shamiko a try (https://github.com/LSPosed/LSPosed.github.io/releases).

You need to configure the deny list, but must not enforce it. Then the deny list is used by Shamiko
[Magisk] endrancer:
having shamiko module installed as well...

- miui 13 android 12

- lsposed

- xprivacy

- magisk hidden

- denylist active (all 3 entries selected within the app, started fresh as well)

- denylist enforce disabled

- shamiko

- safetynet fix enabled

- comdirect app 8.7.0
[Magisk] Asellus:
For me

- no lsposed

- no xpriavcy

- manager not hidden

- denylist active (3 services)

- denylist enforced

- no shamiko

- safetynet fix

- phototan 8.7.0

is working. So the culprit should be in the difference.
[Magisk] xflowy:
Just installed Shamiko and configured the denylist, left enforce off and still getting the "root detected" message in the phototan app. Yes, cleared cache prior to it. Whats wrong here?

The normal comdirect app is working (and worked prior to Shamiko too).

Do i need to install LSPosed for Shamiko too?

Thanks!
[Magisk] Asellus:
According to https://xdaforums.com/t/edxposed-vs-lsposed.4297433/post-86447753:

you do not need to insall LSPosed.
[Magisk] endrancer:
same here,

for me it get recognized instantly after opening the app, maybe we should investigate if it's looking for other apps similar to magisk, or root related, maybe developer options / adb enable.

have had a few weeks/if not month no issues, but now the cat and mouse game for me is back. i still have an alternative device where i can unlock, so it's acceptable but it's pretty annoying.
[Magisk] Asellus:
But what has changed the game, if it was working for a longer period of time?

8.7.0 is a few weeks old. Did you install it in the last days?

My developer options as well as adb are on, and it is still working.
[Magisk] Asellus:
SecureGo is working only if the Magisk manager is deleted or frozen
[Magisk] endrancer:
i'm not using phototan daily.

recent changes have been

- pixelify magisk module (it unlocks a few google things - safetynet, googlepay and whatsoever still working flawless)

- i updated to xiaomi miui 13 from 12 maybe about 3 weeks ago, i would assume it was working with the newest version, but can't be for sure, as i said it's basically the only application which detects root. but it should've been working on android 12, because i made sure after reading the posts about denylist and whatnot to at least try it out.

- trading app and banking app does not detect root
[Magisk] endrancer:
just tried freezing magisk with airfrozen, deleted data for phototan and tried again. yet root is identified.
[Magisk] endrancer:
i have tried a few more things to make it work.

- delete google play store data

- delete google play services data

reboot => this led in being in some sort of endless-boot state (not reboot but sticking at boot oem logo

to fix "boot-stuck" i've unloaded all magisk modules which includes pixelify module

- then add shamiko again

- add safetynetfix

- make sure processes are hidden in denylist

and for the time being it seems to work.

so my problem in previous posts have either been

- pixelify

- play store/play services not providing a "root-free"-feedback to the tan-app.
[Magisk] Asellus:
Good point. I followed https://www.droidwin.com/how-to-hide-root-from-apps-via-magisk-denylist/. According to step 5, I deleted play store and play service data while installing Zygisk.

So perhaps this is the root cause for your problems.
[Magisk] Laptapper:
If you read the whole thread you'll see there'll be differences in android versions with banking apps....

Try to get android 12 and follow guide .....success
[Magisk] geekborg:
I have a banking application from a French bank (Hello bank).

It refuses to run the "digital key" that allows money transfers when root is detected or safetynet is not activated.

I activated safetynet with the 2 modules "universalsafetynet fix" + "magiskhide propsconfig".

To hide the root I first hide the magisk application on magisk manager settings->hide magisk application.

Then I install the last Shamiko module and I test it with the "magisk detector" app.

When "magisk detector" doesn't detect anything more my banking application works normally
[Magisk] misotauros:
I can confirm this is working on two different devices for me.
[Magisk] Asellus:
Caution, the newest version 8.7.1 detects root again, at least on my device (Magisk v25.2 with deny list and safetynet fix)

Edit: Seems that the manager app is detected. After freezing it I have no further issues yet.
[Magisk] Marty4:
Thank you for the warning about version 8.7.1, @Asellus!

Is it really necessary to freeze the Manager app? Is it also possible to hide it via the Magisk settings menu?
[Magisk] Asellus:
Don't know. I know that hiding is not sufficient for SecureGo+, so I have not tested it.
[Magisk] AntaresFP:
Thanks for the warning. FYI, no problems updating to 8.7.1 on OP7T, latest Rom and Magisk, with Manager enabled (just a random package name).
[Magisk] Asellus:
I have created two easy MacroDroid makros, one for starting Magisk by unfreezing and starting it, onr for freezing it. Both can be started by launcher buttons. So I start Magisk with the first button and freeze it again using the second.

The freezing makro is also started while starting photoTAN and SecureGo+, just if I forgot to freeze the Manager app after using it
[Magisk] Annil:
For me the app worked without issues also after the last update to 8.7.1 on P6P Pro.

Today I noticed, that app is not working anymore and is now detecting root on both our phones where it is used.

Phototan 8.7.1 App was installed since it got released and only now it is detecting root.

Magisk did not change since then and freezing Magisk and/or hiding is also not helping anymore.

Not sure, what exactly has now caused this and if there is still a way around?

Any help and/or ideas are very appreciated...
[Magisk] Asellus:
Have you checked whether phototan is still and completly on the deny list?
[Magisk] Annil:
Yes it is (ticking arrow down and everything below is ticked) - and as said, there was also no further update from the App. 8.7.1 used to work till last week where I used it last time and then something has changed (be it something from google play stuff or some bit set by comdirect...no idea what could cause it now).

Wondering if it is still running for anyone with the latest version on A13 and whats the difference?!
[Magisk] Asellus:
I'm still on A11.

If it is Google Play related, it could be the same issue like Google Wallet, which detects root for some weeks now.

To solve this one need to use and configure MagiskHidePropsConf.
[Magisk] jokk3l:
Update Magisk to latest release.

Install LS Posed with the "HideMyApplist" module.

In HideMyApplist:

first install magisk extension. Module should be up and running.

second create a blacklist template

Then: select effective apps -> enable hide -> enable all hide methods -> apply created template -> save on the disk symbol upper right corner

Done. Works with all banking apps ive tested this far.
[Magisk] Asellus:
As he told, hiding the manager does not help
[Magisk] jokk3l:
It doesn't hide the Magisk Manager.

It hides everything to the selected apps, even if they try to obtain your applist (and thus the root status) through other methods than the regular API.

Works flawless with 8.7.1 on the op9pro
[Magisk] Asellus:
With A13? On my op7t with 8.7.1 Magisk plus deny list is sufficient, at least for now.

LSPosed is a sledge hammer. Many custom rom and kernel developers deny to work on bugs reported for phones with LSPosed installed
[Magisk] Annil:
With A13 on P6P (and on P6) with latest google stuff it stopped working. Using Magisk Alpha latest version (which worked flawlessly since always), Universal Safetynet Fix 2.3.1-mod and deny list enforced and configured...

This combination worked long and now it just stopped working and phototan app decided to detect root :(

(google wallet/pay and other apps which were picky with root still work flawlessly btw)
[Magisk] Annil:
tried this also following exactly the steps (except I used the A13 compatible version, which means no direct magisk integration of HideMyApp list). However: Does not work :(

TAN2Go and Phototan App both continue to detect root on A13 P6(P).

I also tried with XPrivacyLua+Shamiko and blocking all different accesses from the apps, also there no luck.

Also what should be mentioned: There was NO update of TAN2Go or Phototan App recently and they both used to work flawlessly!

The only change since when it stopped working at some point of time (on 2 phones!) is, that there were some google updates (e.g. play services and such) coming... (Google Wallet works without any issues btw)
[Magisk] Asellus:
Please give MagiskHidePropsConf on plain Magisk plus deny list a try.

There are some hints in the web which fingerprints could be chosen. Sometimes it helps to select the own phone.
[Magisk] Annil:
Are you able to run Phototan App which I linked above successfully without it detecting root? (and you are using latest google apps?)

MagiskHidePropsConf to my understanding is helping in passing the CTS checks (at least for the cases where there is no hardware attestation, as it is e.g. in the P6P), so not sure how this could help here further?

Yasnac and similar all state everything is "fine" and all checks pass, however phototan and tan2go have different opinion :(
[Magisk] Asellus:
My phototan works without problems on A11. But wallet does not work since a couple of weeks after some Google play updates, so it could be comparable to your problem.

Google's changes seem to depend on Android version and phone. Therefore it helps in some cases to show the fingerprint of another phone and/or version to Google's code by MagiskHidePropsConf.
[Magisk] langweiligh3:
can confirm that photTan is still working under Android 13.

I have a fresh install of SparkOS, photoTAN 8.7.1 (latest atm from Play Store), fingerprint set to my device (Mi 9t, Android 10) in MagiskHideProps Config, Universal SafetyNet Fix Mod 2.3.1 by Displax and the usual stuff in denylist, enforced. Magisk 25.2.
[Magisk] Annil:
I also now gave this a try:

Magisk 25.205

Magichideprops (fingerprint set to my device (its then older security patch and A12, but that is fine))

USNF 2.3.1 mod 2.0 by Displax

(no other module is installed)

On Denylist (enforced):

Phototan App (all sub points ticked)

-> not working (Yasnac passes, integrity checker first two pass, thrid fails)

Am I missing something? What else should be put on deny list?
[Magisk] Asellus:
Did you freeze or even delete Magisk manager?
[Magisk] Annil:
Yes, tried with appfreezer (which I had used some year ago) but no success with that.

What else is in your deny list except phototan app?
[Magisk] Asellus:
I ticked anything that has to do with Google Play and Android services.

You have cleaned the cache of the phototan app?

I have to admit, I have no further idea. As a last resort I would change the fingerprint to a different phone, e.g. a oneplus, and A11 or even A10
[Magisk] Annil:
Cache is cleared, yes. Always before start I try with that. Also from PlayStore and play services.

I also tried other device with older Android version A10 and actually also the Xiaomi device mentioned above ;)

Still no luck...

Could you maybe list all the programs in deny list? As when I show all system apps there is like hundreds of Google apps....and I'm not sure it's good to block there everything?!
[Magisk] Asellus:
I'm on A11 on an op7t. Therefore the list would not help.

I doubt that your problem has to do with other programs or services on or not on deny list.

In parallel I play with A13, a custom rom, on another op7t, to prepare a backup phone. There I have no issues with phototan.

One thing: Reinstall phototan. I know that it takes some days until activation...
[Magisk] Annil:
Thanks for the ideas! Reinstall i just tried, same issue :(

I wonder if it's something where Google had activated some mechanisms in their newer phones, as the same problem appeared like on same time in P6 and on be P6P.

I have now tried so many different approaches (lsposed, magicprops, also with different vendors and older versions) and none worked, phototan always detected root.

And as said, there was not any update from phototan or tan2go side , only a few from Google but suddenly the apps stopped working on two phones and previously it worked by just using magisk+usnf+denylist...

Feeling kinda helpless as I always had succeeded in finding a solution to make it work again but this time it feels different :(
[Magisk] Asellus:
You are right, it is not a good sign for all of us
[Magisk] banerni:
I used A12 LOS19 on S10e and after I installed Lucky Patcher Modded Play Store Phototan does not work.

My Solution:

1. Flash to A13 LOS20

2. Flash Gapps MindTheGapps-13.0.0

3. Flash Lygisk (not Magisk)

4. MagiskHidePropsConf (choose Fingerpint S10e)

5. Zygisk

6. Phototan Version 8.5.0 apk installed

7. deny list

Phototan Version 8.5.0 works
[Magisk] Asellus:
Phototan 8.5.0 might solve the issue with Zygisk + deny list only, w/o MagiskHidePropsConf, I guess.
[Magisk] banerni:
This could be also the solution