yashsingh1/xdaforums huggingface dataset:
[Magisk] endrancer:
just now recently it's another round of cat and mouse. not working anymore yet again.

xiaomi poco x3 pro

xiaomi eu rom (newest stable)

vers 8.7.1

magisk newest

lsposed

universal safetyet

enforced list with all ticks
[Magisk] Asellus:
Which phone and Android release?
[Magisk] endrancer:
It was working for the last few months while also just updating most.

By now I've tried a few things and none work so far.

Safety net pass
[Magisk] banerni:
Try this:

1 Flash Gapps

2. Flash Magisk

3. MagiskHidePropsConf (choose a Fingerpint)

4. Zygisk

5. Phototan Version 8.5.0 apk installed

6. deny list
[Magisk] lemon567:
The app works for me for now running app version 8.7.1

my setup is

- latest magisk (stable by topjohnwu)

- latest shamiko module (denylist unmount module might work too haven't tested it yet)

- zygisk enabled (force denylist disabled for shamiko to run as blacklist)

- NO LSPOSED installed since a lot of banking apps detect it and there's no good way to hide lsposed for now

- NO TWRP installed for the same reason as LSPosed

- magiskhide props config with a fingerprint that's certified by google (no device simulation enabled)

- latest universal safety net fix mod that enables basic device integrity pass

- magisk app hidden with random package name

- photo tan app in denylist (everything checked)

- google play services in denylist with com.google.android.gms and com.google.android.gms.unstable checked (important clear cache and data from play services and playstore and reboot so that the changes take effect)

- any files/folders that contain the word magisk, lsposed, twrp should be renamed without containing magisk, lsposed or twrp or simply removed e.g TWRP to ABDC and not to ABCDTWRP

If this setup won't work clear cache and data from the photo tan app and reboot then run the app once more

hope it helps
[Magisk] endrancer:
just like you describe it...

enforce no

shamiko yes

magiskhide yes

universal safetynet yes

safetynet pass

phototan in denylist (all 3 checked)

play service in denylist and clear cache/data

reboot

=> doesn't work

clear cache/data phototan app

reboot

=> still doesn't work
[Magisk] Asellus:
For me shamiko + magiskhidepropsconf + modified safetynet fix sounds a little bit like an overkill.

Potentially the modified safetynet fix did the trick. It breaks the fingerprint on oneplus devices so that I cannot use it.

@endrancer

Give the modified safetynet fix a try: https://github.com/kdrag0n/safetynet-fix/files/9356078/safetynet-fix-v2.3.1-MOD.zip
[Magisk] endrancer:
magiskhide props on

(enforce list)

modified safetynet fix

delete play service cache/data

delete phototan cache/data

reboot

=> doesn't work

(enforce list unticked + shamiko)

modified safetynet fix still active obviously

delete play service cache/data

delete phototan cache/data

reboot

=> finally works after the 10th change of settings

(i have done the shamiko version before a few times, with all the bells and whistles, ... i am very amazed sometimes how many attempts it requries and it's like stacking cards easily collapsing)

lsposed uninstalled during the process, but i'll add it again, since the tan method is not gonna work the next few days anyways.

(xiaomi.eu stable 13.x)
[Magisk] Asellus:
Okayyy... so you have not installed MagiskHidePropsConf?

shamiko + modded safetynet fix do the trick?
[Magisk] endrancer:
Unfortunately after successfully doing all the setup. Now it's back again, no Change whatsoever.

I only setup Google Wallet with a card and that's basically all. Haven't changed any other setting regarding root/magisk...

Magisk hide props config is on
[Magisk] lemon567:
I'm running lineage 18.1 (A11) and therefore I need the fingerprint spoof or my device won't be Google play certified are your devices certified when checking the playatore under settings info? I forgot to metion that I do not run TWRP or have any TWRP folders on my phone removing Twrp and its folders might do the trick

I read through the posts here and people have cleared cache and data of play services but did not menrion clearing playstore cache and data have you done that as well?

Run TB Checker to check for root to see if there are parameters that won't pass the check
[Magisk] endrancer:
my twrp folder is renamed to twrpw
[Magisk] lemon567:
rename it so that TWRP is not in the name of the file i had the same issue with lineage 16 (A9) and a magisk script in the addon.d folder renaming the file 99-magisk.sh to abcmagisk.sh didn't work but renaming the script to abc.sh did the trick might be worth a shot
[Magisk] endrancer:
i tried again...

- deleted twrpw folder

- not enforce list / but shamiko

- delete data/cache for play services and play store

- delete data/cache for phototan

- magisk manager renamed as well as frozen

- reboot

=> root recognized

- deleted twrpw folder

- enforce list

- delete data/cache again for these 3 apps

- magisk renamed

- reboot

=> root recognized

not sure what caused the setup to go though before once, but it seems like i am stuck.
[Magisk] lemon567:
I suggest that you run tb checker or Momo to see if something in terms of root or xposed is being detected do you pass Safetynet and cts profile and is your device Google play certified?

it's a long shot but have you tried to run shamiko module and denylist unmount module together?
[Magisk] endrancer:
Did the check with the said app, here's a list on what's marked as "fail"

Result Play Integrity

- strong integrity

- virtual integrity

result check root

- su binary

- 2nd su binary

- for rw path

- root via native check

- magisk specific checks

result check xposed

- xprivacylua

pmcommands

-org.lsposed.manager

pm conventional apis

- org.lsposed.manager

pm sundry apis

- org.lsposed.manager

pm intent queries

- org.lsposed.manager

xposed modules:

- 3c all-in-one

- xposedprivacylua

magisk random package name

- huacj.netflqx

all other things listed are "pass"
[Magisk] lemon567:
Have you put tb checker into denylist ad did the scan?

Have you disabled lsposed in the module section of magisk and tried to run the photo tan app?

Just in case install the magisk boot loop protector module by huskydg in case lsposed causes issues
[Magisk] endrancer:
Xprivacy still fails even though Its not installed

Xposed modules are listed as fails even though Xposed and lsposed is not installed and no module is activated.

Strong integrity and virtual integrity fails

Everything else passes.

Tried with both shamiko and enforce list, with clearing and rebooting.

Still not working.
[Magisk] lemon567:
From what i gathered from your posts and based on my personal experience it seems like Xposed is causing the root detection.

The problem is even if you remove Xposed there are still remenants of it in the system that might be detected by the phototan app.

I would try to remove Xposed and all of its modules afterwards check in the root directory --> /data/adb/lspd if the lspd directory still exists delete it and try to run the phototan app once more.

I personally gave up on running Xposed and TWRP (for now) because the banking apps i use would always detect root when both or either one of them would be installed.
[Magisk] endrancer:
no lspd folder available.
[Magisk] lemon567:
forgot to mention --> /data/adb/modules/zygisk_lsposed
[Magisk] endrancer:
that's also not existing already
[Magisk] lemon567:
Two more suggestions

1.) Use magisk hide props config and change your devices fingerprint to a pixel device with android 11 e.g pixel 5/5a

2.) Use magisk delta fork and use its magisk hide function some users reported that delta worked for them while the zygisk shamiko setup of topjohnwu didn't
[Magisk] endrancer:
I have a second device where it's set up as backup, to have a failsafe, … because setting up Google Pay (after clear cache play services) and phototan lock is really time-consuming. So I am up for more suggestions to try. Since it's failing xprivacy, even though it's not installed... is there any sort of leftover other than the folders in data/adb

??
[Magisk] lemon567:
since xposed is still somewhat present on your system you could try the following xposed modules

- hide my app list (discontinued)

- privacy space
[Magisk] endrancer:
i have updated to the newest xiaomi eu 13.0.8 stable for my pocox3 phone, this hasn't changed anything... as well

for xposed, i have disabled lsposed, removed app, disabled module, rebooted, cleaned cache / data of play services, play store and phototan

however root is always still detected. i have obviously also deleted lsposed folder from root data/adb

so i am continue to struggle
[Magisk] endrancer:
Hide my apps list does not also seem to help, trying with shamiko, without shamiko, resetting all related app caches and files, hiding magisk as well as using air frozen.

Not sure what else could be the problem by now
[Magisk] lemon567:
Have you tried the denylist unmount module I mentioned a few posts back?

GitHub - mywalkb/DenylistUnmount

Contribute to mywalkb/DenylistUnmount development by creating an account on GitHub.

github.com
[Magisk] endrancer:
i tried it before, but i tried it again...

- install denylist unmount

- disable shamiko

- disable enforce list

- add phototan to denylist

- clear cache data on playstore and services, as well as phototan

- lsposed removed

- xprivacy not installed

TB checker says xprivacylua fails

all other seem good anyways

phototan says i am rooted
[Magisk] lemon567:
I have to ask again is your device Play Protect Certified? Go to Playstore --> Settings --> Info --> scroll down to the bottom

regarding xprivacylua have you checked within your phones root directory --> /data/system/xlua
[Magisk] endrancer:
- magisk renamed + frozen

- certified yes

- xlua folder just now deleted

- clean cache+data for all

rebootd

TB checker

- root checker all pass

- play integrity "strong integrity, virtual integrity" both fail

- basic + device integritypass

phototan still root detect
[Magisk] lemon567:
Have you checked if your cts profile match passes not just basic integrity

Download yasnac from playstore and see if your cts profile match passes if it does not you have to use magiskhide props config to pass it

The last thing I would try if cts profile match passes and root is still detected is to run the magisk delta fork switching is very easy just unhide the magisk app (if hidden) and simply flash delta within the magisk app and use its magisk hide feature
[Magisk] endrancer:
yasnac cts profile pass
[Magisk] endrancer:
ok, after a few more attempts and changes with delta magisk, it seems to be working. i just finished the activation process. as well as closing/killing task the app a few times, as well as reboot.

so the current settings are:

- delta magisk + hidden

- removed old magisk app

- flash magisk delta

- zygisk off

- magisk hide on

- enforce sulist (nothing ticked in the list though)

modules

- no shamiko, denylist because zygisk is disabled.

no lspoed app

no xprivacylua app

....

2 days activation period meh
[Magisk] Seppel007:
Switching over to Magisk Delta worked for me too. Thanks!!

Oneplus5 rooted stock rom, faced new issues when accidently updating my ComDirect PhotoTan App.
[Magisk] p3rsi2k:
Works nice! Thx!
[Magisk] swour:
Beware of updating from 8.9.0 to version 8.10.0. Previously only enforcing denylist was necessary. The latest version is detecting root again. Initial tests with Shamiko also fail.
[Magisk] Knotte:
So I dug right into it to see which solution works for the newest version of photoTAN and this worked for my Galaxy S20+ with rooted Stock:

Uninstall Magisk (if you don't have delta yet) from within the app, then install Magisk Delta the usual way you do for your phone model (most likely from recovery after renaming the *.apk to *.zip, I also had to install the APK after booting up the system)

Now for me Zygisk is not needed, but I am enabling it so I can use the Universal SafetyNet Fix module for passing CTS for whatever other apps might need it

Enable MagiskHide but leave Enforce SuList disabled, add photoTAN to the MagiskHide list

Voila, at least for me photoTAN works again, even without wiping its cache!
[Magisk] booyakax:
I am on Crdroid 8.14 and this is not working for me. I followed all the steps. Did i miss something?
[Magisk] Conan179:
Working great on my Fold4!
[Magisk] Killerbaer:
I did it as described but it did not work for me.I have a oneplus 9pro and lineage 20. Do i have to reinstall the tanapp ?
[Magisk] Asellus:
You can give it a try, but it will fail for sure
[Magisk] swour:
No success with Magisk Delta 25206 here. Which version are you using?
[Magisk] Knotte:
I don't know, since CrDroid is based on LineageOS, the procedure will be different. I guess photoTAN is detecting that it's a custom ROM. The changes in the ROM are much deeper than just with unlocked/rooted stock, which is why I went back to (debloated) stock for my Samsung.
[Magisk] Knotte:
I used the 25210 canary but I guess it would work with 25206 too. It obviously seems to depend on which device or brand and ROM you have.
[Magisk] Conan179:
i using stock rom, only rooted by magisk delta. (patch ap file)
[Magisk] eliezerjk90:
Same for me. On Crdroid 9.2. For now I just downgrade to older version (you can use lsposed module that allow to downgrade), and then hide the app from play store using other lsposed module so it's not updated. That way you don't have to uninstall and redo the registration
[Magisk] eliezerjk90:
just downgrade the app. there's a lsposed module that allow us to install older version without deleting.
[Magisk] Killerbaer:
I will give it a try thanks.
[Magisk] System23:
The Easy Way to Hide Root from Apps!!

-Install Magisk.apk App from /sdcard/ and start Magisk App

-go to Settings and Enable "Zygisk" Option

-Setup the Denie-List with Apps you would hide Root (Especially Banking-Apps and other the dont start in Rooted-Device)

-Setup "Hide-Magisk-App" and choose a name 4 the new Shortcut

-Now The App starts again

-goto Modules and choose "Setup from Internal_storage" and Install "MagiskHidePropsConf-v6.1.2.zip" & "safetynet-fix-v2.4.0.zip" without Restart the Device!!!

-After that reboot the Device

-Now Setup a Terminal_Emulator/Termux/etc.. from PlayStore!!!

-open your Terminal on Android and Type the following command

su

props

choose 1

choose f

choose your Device in next 2 Steps!!

(Samsung - 26 / Galaxy Tab A 10.1 2019 - 84)

choose y

choose y to reboot Device!!

-After Reboot open Settings and go to Apps

show all and choose

1# Google-PlayStore and Clear Stored-Datas/ Clear Cache

than goto

2# Google-PlayServices and Clear Stored-Datas/ Clear Cache

-Now you can Download "YASNAC SafetyNet Checker" from Playstore and can Check the Status!!!

-Finish!!!!!!

Magisk_Module_+_Uninstaller << Here the Files
[Magisk] Killerbaer:
Thats what i did before the phototan APP updated to Version 8.10. in Version 8.9 it works fine but with die comdirect update they "fixt" that and the apps knows the phone ist rooted (oneplus9pro)
[Magisk] Killerbaer:
Short update. With the module "Core patch" i downgraded the APP and i works fine now.
[Magisk] booyakax:
i am on magisk delta 25210 (system crdroid 8.14) and it works with the new phototan version 8.10.0.

this is a result of try and error, maybe this wont work for you guys but you can give it a try.

-first you need magisk delta 25210 (canary) and setup in a usual way

-enable "Enforce SuList" and add photontan app to deny list.

-restart phone

-check phototan app -> it still detects root

-disable "Enforce SuList" and add photontan app to MagiskHideList

-restart phone

-phototan app is working again

i also renamed the file under /system/addon.d/99-magisk.sh to something like 99-helloworld.sh
[Magisk] eliezerjk90:
The key step is to change the filename of /system/addon.d/99-magisk.sh. So basically just add it to magiskhide list (enforce sulist disabled), change the filename, reboot, and it works!

Thanks for the workaround! Just wondering does changing the filename would affect functionality?
[Magisk] System23:
redo the Steps, and look what it done after
[Magisk] jaager:
I installed CorePatch and activated it. But how can I finally downgrade the app? Didn't find out how to do this yet :(
[Magisk] Killerbaer:
Now you can download the phontotan.apk Form a side and install. Afrer that you can login
[Magisk] jaager:
Ok thanks. I thought it's possible to downgrade directly from Google Play 🤦‍♂️
[Magisk] Killerbaer:
but that is no problem and quickly done. simply download the apk via the smartphone and install it from there. 2-5 min
[Magisk] jaager:
Thanks I got it working :)

I was just a bit worried to use APKs from third party websites...
[Magisk] bgsdeluxe:
Hi Killerbaer,

since my phototan app updated to 8.10 as well I'm facing same issues. Although I'm not a fan of using older apps, for me it's more convenient than installing magisk delta, therefor I decided to give the CorePatch workaround a try.

Am using Lygisk (magisk fork) and installed LSPosed and CorePatch. When in CorePatch settings a warning is telling me that the phototan app is still on denylist and changes in CorePatch might not have an effect.

Disabled force denylist in Lygisk/Magisk and even removed the phototan app from denylist before performing a reboot.

Now I'm trying to downgrade the phototan app, but am not sure how to do this. I disabled automated updates in playstore and optimized app in corepatch, but when opening the app now it forcecloses instantly.

Would you mind guiding me on how to proceed?

Thanks in advance!

EDIT: Should have refreshed page before posting. :)

Regarding downgrade: Any trustworthy sites to download old apk from you'd suggest?

EDIT 2: Done and working.
[Magisk] Killerbaer:
hehe :D . i downloaded it from APKmonk works fine
[Magisk] swour:
It appears that renaming the file is the only step necessary on my device running Lineage 16, no reboot required. That brings up the question why non root apps can read files inside /system/addon.d/ at all. And if there is a more elegant way of denying access to those files.

However on another device running stock ROM Android 13 there is no addon.d folder from Magisk. Most files reside in /data/adb/magisk. There must be other files the phototan app is scanning for.
[Magisk] System23:
Thats one of the Intressting thing i would testing out, thx your knowledge let me learn New ways to do!! thats very intressting me to know a second or third way to do so!! 😁😉
[Magisk] pa.pn2:
The problem is, after a while we are forced to use the most recent version.

I guess the main Comdirect App also will get an update soon, which will occur in same problem like the photo tan app now..
[Magisk] nixchecka:
Downloadlink PhotoTAN 8.9.0:

Portailpro Send

Encrypt and send files with a link that automatically expires to ensure your important documents don’t stay online forever.

send.portailpro.net

sha256: 91fc677505cb1b8b82c91bc842e5627fc8600450f72022c297335f2f45a23e5d
[Magisk] Asellus:
The comdirect app never was a problem. W/o the phototan app this is only a viewer.

But you are right, at a certain point in time they will force us tp upgrade. So it would be great to have a working solution.

Because the phototan app is not the only banking app I use I would want to avoid to switch to Magisk Delta and want to stay with Magisk.
[Magisk] Asellus:
Because I did not succeed using Magisk and HidePropsConfig on my phone to play with, I gave Magisk Delta Canary (25210) a try on this phone. The only module I installed was Displax' safetynet fix mod 1.2.

To my understanding one need to put only a few apps on SuList, only those who shall be able to get root access. So putting the phototan app on the SuList is supposed to be wrong.

Do I tried this with three different apps. SdMaid asked for standard permissions if I have not put it on the SuList, but asked for root permissions on the SuList. The other two apps detect root only if the have been put on the SuList.

So the SuList seems to be the better choice, at least for me and for now.

At the end both configurations work, MagiskHide (phototan app on the list) and SuList (phototan app not on the list).

Also further banking apps start without complaining.

As I mentioned this phone is not my daily driver. Therefore I will not gain any experience with Magisk Delta.
[Magisk] nik2011555:
I'm still on app version 8.6.0 but there must have been server side changes somewhere in the beginning of March when it stopped working with Shamiko, switching to Magisk Delta canary made it work again.
[Magisk] masi79:
How did you rename the file under system as /system ist mounted as read only?
[Magisk] System23:
open an Android Terminal

use

su

mount -o remount,rw /System

to make the System RW
[Magisk] srothe:
I'm using Magisk 25200 with with Zygisk, Enforce DenyList and PhotoTAN App in DenyList.

Like everybody else I got an error msg since the last update.

My Workaround: Wrote a little frida script, which will deny access to "/proc/". That's all, app works again as expected :)

Spoiler content hidden.
[Magisk] AndDiSa:
@srothe Thank you very much that's a quite an important information
[Magisk] diemadedrei:
May I ask what to do with that script?
[Magisk] srothe:
Frida is a dynamic instrumentation toolkit. So it can influence/modify the behavior of apps during runtime.

Main purpose is for debugging or sth like that. So you will have to start it each time you want to use it. It's not some kind of magisk module, which does some "magic" in the background.

Spoiler content hidden.

So in the end my workaround is more like PoC, no persistent solution. Either you use it like that or someone is going to implement e.g. some magisk module. Maybe there are some other (easier) workarounds too, pls tell me :)
[Magisk] schalli110:
@srothe , what files under /proc is the phototan app trying to access?

It's probably another way of detecting Magisk, and locking that down might be helpful not only for this app, but for hiding Magisk in general..
[Magisk] AndDiSa:
@srothe if I remember correctly there is a Frida magisk module. I've never used it yet but would be an option to dig in deeper
[Magisk] booyakax:
i know this is not the right place but did anyone manage to make the techniker krankenkasse app work? the old trick was to rename the 99-magisk.sh into something else, actually the same procedure for the photo tan app, but apparently this wont work anymore.
[Magisk] r4p70r:
Could this Magisk Module be used to do the same but on App launch und without frida?

GitHub - HuskyDG/magic_proc_monitor: A Magisk/Zygisk module allows user to run script whenever app process start

A Magisk/Zygisk module allows user to run script whenever app process start - HuskyDG/magic_proc_monitor

github.com
[Magisk] diemadedrei:
I cant get it to work...does anyone have any new idea? Im on LOS 19 and tried Magisk Delta with universal safetynet fix and also the mod of displax to no avail. Also tried both hide list and SuList...
[Magisk] r4p70r:
It is possible that the app detects that it is a custom Rom and therefore refuses to work.

I think there is a magisk module to hide the user debug keys.

Search in Fox's Mmm for "Hide UserDebug"
[Magisk] diemadedrei:
Tanks for the hint, but it didnt help unfortunately :(
[Magisk] r4p70r:
Do you have LSPosed?

There is a module for hiding apps.

I also have this active with SUList in addition to Magisk Delta.

Without it, the PhotoTAN app simply closes again.

GitHub - Dr-TSNG/Hide-My-Applist: An Xposed module to intercept applist detections

An Xposed module to intercept applist detections. Contribute to Dr-TSNG/Hide-My-Applist development by creating an account on GitHub.

github.com

The app is also available in the Google Play Store.

Hide My Applist - Apps on Google Play

An Xposed module to intercept applist detections

play.google.com

In the attachment is a configuration backup that contains a "Hidden App" template in which Magisk is included and which is applied to the PhotoTAN app.

After restoring you can add any other apps you want to hide.

The apps to be hidden must be added to the template. Then select an app and activate Enable Hide. At "Template config" select the "Hidden Apps" template.

The detection test should ideally show a check mark everywhere.