yashsingh1/xdaforums huggingface dataset:
[Magisk] AndDiSa:
I gave up on the cat and mouse game ... on every system update / resp. app update there is the risk that suddenly it's not working any longer.

Nevertheless while playing around with LineageOS-20 I found out that Phototan-App is working flawlessly on an device with open bootloader having installed an unofficial build of Lineage ... which makes the whole situation even more absurd in my opinion.
[Magisk] stereo007:
greatlte:/ $ find / -name "*magisk*" -print 2>/dev/null
/system/bin/magiskpolicy
/system/bin/magisk
/storage/3362-3733/Android/data/com.topjohnwu.magisk
/storage/3362-3733/Android/media/com.topjohnwu.magisk
/storage/3362-3733/TitaniumBackup/com.topjohnwu.magisk-73b1c98a4638f66bc2b52d8411b7a315.apk.gz
/storage/3362-3733/TitaniumBackup/com.topjohnwu.magisk-20220128-072959.tar.gz
/storage/3362-3733/TitaniumBackup/com.topjohnwu.magisk-20220128-072959.properties
/sbin/magiskpolicy
/sbin/magisk
/sbin/magisk64
/sbin/magisk32
/sbin/.magisk
/sbin/magiskinit

and on my other phone:

sunfish:/ $ find / -name "*magisk*" -print 2>/dev/null
/system/bin/magiskpolicy
/system/bin/magisk

But it doesn't work with either of them.
[Magisk] xcl1pse:
Your on R6566BB1C-kitsune? last time I tried was R6561D823-kitsune and it's working, but your mileage may vary tho
[Magisk] Asellus:
Have you installed the latest PlayIntegrityFix (https://github.com/chiteroman/PlayIntegrityFix)? Don't know whether this is necessary for phototan, but is will not hurt

After installing it you should delete /data/adb/pif.json
[Magisk] stereo007:
yes, R6566BB1C-kitsune
[Magisk] stereo007:
I looked for a fingerprint myself that works. Just as it was described. I have inserted it there.

The problem is that if the fingerprint of v14.1 is burnt then nothing works anymore. That's why I left the one I was looking for for the time being. It happened so often in the last few weeks that I suddenly couldn't pay with my phone because the FP was banned by Google.

Edit: OT - I just saw there is v14.2, FP of v14.1 is banned....

https://github.com/chiteroman/PlayIntegrityFix/releases/tag/v14.2

(DO NOT UPDATE TO THIS VERSION IF YOU ARE USING CUSTOM FINGERPRINT!

This release is only for people who don't know how to use custom spoof.

I will release a new version for custom spoof later.)
[Magisk] Asellus:
Unfortunately I can't help. I could understand that phototan would not work on your first phone with all the magisk related stuff in the file system.

But your second phone is comparable to mine, and mine is working with current kitsune and PIF v14.1, even without device integrity.
[Magisk] stereo007:
That was the right hint. I took another old phone. That works. I kept all the same directories and deleted the rest.

Deleted:

/storage/3362-3733/Android/data/com.topjohnwu.magisk
/storage/3362-3733/Android/media/com.topjohnwu.magisk
/storage/3362-3733/TitaniumBackup/com.topjohnwu.magisk-73b1c98a4638f66bc2b52d8411b7a315.apk.gz
/storage/3362-3733/TitaniumBackup/com.topjohnwu.magisk-20220128-072959.tar.gz
/storage/3362-3733/TitaniumBackup/com.topjohnwu.magisk-20220128-072959.properties

The strange thing was that I had to reinstall the app. I deleted the data but the app still recognized root. Only after deleting and reinstalling did it work. At least with the Samsung. It still doesn't work with the Pixel.

Edit:

It now also works with the Pixel, but only after reinstalling the Comdirect Phototan app.

Thanks for the help.
[Magisk] kdupke:
Never update a running system, right?

I today updated from Delta 26301/0fe46c5a to kitsune 26401/R6566BB1C and phototan did not work anymore.

I had to go back to delta to make it working. (including moving the add on file).

Kitsune looks different in the setting, is this correct?

I am still on phototan 8.13

best regards,

kai
[Magisk] stereo007:
R6566BB1C-kitsune + 8.13 works for me:

PIF v14.1

Zigisk = on

MagiskHide = on

Enforce SuList = on

I had to uninstall and reinstall the Phototan app once. Deleting the data was not enough.
[Magisk] gentano:
this is unnecessary, all you need is this:

Comdirect photoTAN app detecting root

Since version 8.3.0 additional measures to detect root have been added, do not update as MagiskHide won't be able to prevent detection. Until a solution is found I would recommend staying on the previous version for as long as possible. Finding...

xdaforums.com

tested right now with PIF 14.2 - nothing else changed and its working like a charme

keep it simple!
[Magisk] stereo007:
Well, it wasn't enough for me, I tried it the last few days. See post from the last few days. Not everyone has the "99-magic.sh" either.

I can only say what helped me with two devices.
[Magisk] kdupke:
May I kindly ask, what PIF is the shortcut for?

Best regards,

kai
[Magisk] stereo007:
Play Integrity Fix (SafetyNet fix)​

https://xdaforums.com/t/module-play-integrity-fix-safetynet-fix.4607985/
[Magisk] Asellus:
There seems to be an issue whlle upgrading from a Delta release to kitsune. In my case I needed to reconfigure kitsune. Before the my banking apps were complaining about root.
[Magisk] kdupke:
Please tell me/us what you had to change.

best regards,

kai
[Magisk] Asellus:
No suprises: Zygisk on, MagiskHide on, Endorce SuList on, phototan not on SuList
[Magisk] mj084:
Android 14

Magisk R655F6129-kitsune (26401)

Zygisk on

Magisk Hide on

Enforce SuList off

PhotoTAN fully checked in MagiskHide List

PhotoTAN app works fine:)
[Magisk] MaxFluteHD:
How can I mount system RW to rename the 99-magisk.sh?
[Magisk] wandi34:
Unfortunately I cant get it working. I have:

Lineage 20

Magisk 26.4

MagiskHide Props Config 6.1.2-v137

Play Integrity Fix 15.0

Zygisk activated

Added Comdirect PhotoTan, Google play store, Google play services, Google Wallet to Zygisk Deny List

Reinstalled PhotoTan App instead of just removing the Cache and Data

There is no /system/addon.d/99-magisk.sh, just some google stuff, gsm and 50-lineage.sh.

Please I would like to keep Lineage OS on my device, but having a TAN solution is important for me. Could someone help please?
[Magisk] Asellus:
I'm not aware of anybody who got it working with original Magisk.

The only known solution is Magisk Kitsune / Delta, as described before
[Magisk] wandi34:
Thanks Asellus! I finally got it working. My setup now for everyone else having this problem:

Lineage 20

Kitsune Kitsune Magisk 26403

PlayIntegrityFix 15.1 module installed

MagiskHide Props Config 6.1.2-v137 installed

Zygisk On

MagiskHide On

Enfore SuList On

Confiigure SuList -> NO PhotoTan App checked!

Rename /system/addon.d/99-magisk.sh and magisk folder to sth else (I did it with adb shell: connect to phone with `adb shell`, activate su mode with `su`, mount / as read-write `mount -o rw,remount /`, rename the files and folders with `mv`

Maybe this also helps MaxFluteHD
[Magisk] Asellus:
This is very the same config like mine, except for MagiskHidePropsConfig. I read somewhere that it is outdated.

Instead of renaming I "chmod 700 /system/add on.d"
[Magisk] wandi34:
Yeah, the MagiskHidePropsConfig was from previous attempts. Maybe I dont need it. But now Im just happy that I have a working state.

Nice solution with the chmod!
[Magisk] ScottIsMyName:
I don't see any addon.d, but I'm using regular magisk, maybe this is why?
[Magisk] Asellus:
It depends on the OS, I guess. wandi34 and I both use LineageOS.
[Magisk] starbright_:
An update to 8.13 let me fail. At least return to 8.7 works (although I have to redo acount/login). So restore backup won't work. There is no way around this full loop, right?

I am fine with 8.7 but afraid one day I am forced to update again.
[Magisk] Asellus:
You need to pass the full loop.

On one phone 8.9.0 is installed. An update is requested, so push is not working, only by taking a photo of the phototan image and entering the 6-digit-code.
[Magisk] starbright_:
Push is not really needed. Usually you know when you do actions that needs confirmation. I am afraid of the day the app will not work at all and an upgrade is really, really required.
[Magisk] xflowy:
Is there still no way to make the phototan app work with official magisk? I'm kinda skeptical about the safety of kitsune.
[Magisk] Asellus:
The number of options is limited, and from my perspective all options have been checked. No way was found
[Magisk] xflowy:
So HideMyApp, Shamiko and Co. everything tried?

Are u using Kitsune Delta then? Is it legit? Is it safe?
[Magisk] Asellus:
I did not investigate much time to try out each combination of any plugin or module that might help. I use several banking apps, and it is hard to find the best combination, if any.

With Magisk Kitsune it runs flawlessly out of the box, without any further module, even without play integrity.

Is it safe? It is a fork of Magisk, and you can have a look to the changes in github, if you want to.
[Magisk] Molt:
Hey, I just switched back from Kitsune as things didn't really worked either. But back at original Magisk I'm still struggling with comdirect and GPay also - so nobody else managed to get comdirect running?

@Asellus, you don't have any plugins/modules installed with kitsune and it just runs and everything else, too?
[Magisk] Asellus:
Which problems do you have with kitsune?

For gpay one needs device integrity. As Google currently bans each new working finger print after some days, to my knowledge it is not possible to use gpay on any phone rooted with Magisk or forks.
[Magisk] blu.italia:
This isn't true!

With this

GitHub - osm0sis/PlayIntegrityFork: Fix Play Integrity (and SafetyNet) verdicts, allowing custom fields and props

Fix Play Integrity (and SafetyNet) verdicts, allowing custom fields and props - osm0sis/PlayIntegrityFork

github.com

and this

GitHub - TheFreeman193/PIFS: A collection of build properties for the PIF module

A collection of build properties for the PIF module - TheFreeman193/PIFS

github.com

you have access to many fingerprints that you can automaticly install and try. This doesn't need more then 10 minutes to install and find a working fingerprint.
[Magisk] Asellus:
Ok, that's fine and might help @Molt, if this is sufficient for Magisk.

I use my credit card 😀
[Magisk] Molt:
Okay, I think I made the wallet work again...but photoTAN still fails. So I understood right, the only person here having it running under root is using kitsune mask? With no added modules at all?

I might switch back then
[Magisk] Molt:
Okay, I went back to version 8.7.1 and photoTAN is working without any problems (complete reinstall, deleting data before, adding accounts by initial QR again)

I seem to be fine, finally!

thanks a lot!
[Magisk] Asellus:
With working push tan on 8.7.1?

On one phone with Magisk (not kitsune) version 8.9.0 is installed. Here push tan is not working, and I am aked to upgrade.

This can be ignored, but I can only use photo tans by camera
[Magisk] knoedelcc:
Not a customer but out of curiosity (since it's one of several possible bank accounts in DE for me):

The most recent version 8.13.0 (16.10.2023) for my Pixel is working with (the official) Magisk Canary (26404) + Shamiko 1.0.1 + PIFork v6.

At least the initial check (error due to root status): Adding it to the DenyList will get rid of the message.

Edit: Are there also some later checks/restrictions? ("Enforce Denylist" not enabled, Magisk not yet hidden)

Edit2: @blu.italia already posted some links for PIF above: https://xdaforums.com/t/comdirect-phototan-app-detecting-root.4274825/page-34#post-89287406
[Magisk] Asellus:
Shamiko v1 seems to make the difference. It hides much more than former versions.
[Magisk] Asellus:
I cannot confirm this.

I set up an older Samsung phone with LOS18, Magisk Canary (26404), Shamiko V1.0.1 and PIF7 (w/o own finger print, so only with basic integrity). After this I hid Magisk photoTAN does not work. SecureGo plus is working without Shamíko, that means, using standard deny list, but still photoTAN not.

So at least for me Magisk Kitsune is the only working solution.
[Magisk] swour:
Magisk 27.0 appears to have done the trick (for now). photoTAN 8.13.0 works without any extra modifications or modules, except adding it to the DenyList.
[Magisk] pa.pn2:
Confirmed
[Magisk] daamon01:
This doesn't seem to work for me. photoTAN 8.13.0 and Magisk 27.0 with photoTAN (both processes) on denylist. Any idea what could have gone wrong?
[Magisk] ChillDuder:
did you reset phototan app? clear data and cache, or even better: uninstall and reinstall, and re-setup afterwards.
[Magisk] Asellus:
To my experience a deletion of any phototan related data is not needed. If one can get rid of the root cause, the app continues to work.

You might have a look to the path /system, especially /system/addon.d . If you find this directory on your phone, and is contains a file with "magisk" in its name, you should change the permissions of addon.d to 700 (chmod 700 /system/addon.d), so that the phototan app is not longer able to find the file.
[Magisk] daamon01:
Sorry for the late reply. I didn't have time the last few days.

Yes, I tried that and it didn't work

I do not have a magisk file in system/addon.d.

I noticed that the issue appears only after I install Magisk. However I need Magisk to pass PlayIntegrity
[Magisk] User-xdadevelopers:
Thanks, it worked with com.comdirect.phototan version 8.13.0 (deleted cache and storage)

LOS 19

magisk (hide app, deny list) 27.0

shelter (net.typeblog.shelter) 1.9.1

done it with nextapp.fx version 9.0.1.2 # System (root) > system > menu Mount Read-Write > select addon.d > menu Security > change to only root with rwx (700) > menu mount read-only

I am prepared to upgrade to LOS 20 now....
[Magisk] pa.pn2:
Last Update of Photo Tan does not work anymore out of the box, be careful
[Magisk] Asellus:
Which version does not work?
[Magisk] pa.pn2:
The most recent after 8.13.0
[Magisk] coloneyescolon:
Just updated to 9.0.1 and the app detects root again.

My setup with the previous version was just vanilla Magisk with DenyList and the 99-magish.sh file renamed.

Any ideas what could be causing detection this time?
[Magisk] Doc Sniper:
Everything works fine for me after updating from 8.x to 9.0.1

My setup currently: Magisk 27.0, Shamiko 1.0.1 and Play Integrity Fix 15.9.7
[Magisk] neonblind:
no problem with 9.0.1 and Magisk Delta (v. 26.1, sulist disabled) , just check that both process are enabled in magisk hide. i think the second (isolated) one is new or needs to reactivate after phototan update.
[Magisk] Asellus:
These are the services to be checked for phototan version 8.13.0
[Magisk] dkadds2:
v9.1.0 successfully installed with environment:

- v27000 - Magisk and MagiskApp (had to upgrade due to modules requirements

- v16.3 PIF by chiteroman

- v1.0.1 Shamiko

- number of other irrelevant modules

Magisk configuration:

- Zygisk enabled

- Enforce DenyList - disabled

- photoTan on DenyList (both elements).

Installed from Aurora store.

Steps:

1. Install (i.e. from Aurora store).

2. Configure DenyList in Magisk

3. Reboot!!!

4. Run PhotoTAN

Worked fine, no complaints as earlier about root, went through login up to taking picture of activation code.

Good luck and big thanks to big guys behind Magisk, PIF, Shamiko!!! Guys we would be screwed by Google and the commercial entities if not you. Thanks again.
[Magisk] mj084:
Here nearly the same Setup but without Shamiko
[Magisk] Asellus:
You mean, phototan 9.1.0 is working with Magisk v27, but without shamiko.

My problem is that in the past other apps like Secure go+ detect root if and when I tried to use shamiko. So I avoid to use shamiko
[Magisk] mj084:
Yes, exactly - never used Shamiko here on P8P
[Magisk] Named Individual:
Can confirm that the guide from dkadds2 works for photoTAN 9.2.1 as well: https://xdaforums.com/t/comdirect-phototan-app-detecting-root.4274825/post-89581218

In contrast to the two others, it really requires Shamiko, without it root is still detected.
[Magisk] Doc Sniper:
But that only works if you have a ROM without addon.d support.

For (custom) ROMs that have addon.d support, there is a directory /system/addon.d in which Magisk stores the file 99-magisk.sh in order to survive an OTA. PhotoTan seems to discover this file somehow and then reports that root has been detected and refuses to work. And that despite Shamiko...

You can of course delete the file, but then you have extra work to reinstall Magisk after an OTA.

Edit: You can also rename the file, then the app will work (again) and the OTA survival will work too.
[Magisk] davidx00:
Works for me with LineageOS.
[Magisk] Conan179:
open for me and the safetynet check is passed.
[Magisk] planck0815:
So you changed device fingerprint? What device do you use?

Me, I had to change the device fingerprint to force basic attestation.
[Magisk] Conan179:
GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk

Google SafetyNet attestation workarounds for Magisk - kdrag0n/safetynet-fix

github.com

Note 9
[Magisk] swour:
Since my device is running a custom rom, the bootloader is unlocked and the known methods via Magisk to pass the check by Google have been applied. SafetyNet doesn't seem to play a role here. However it is generally a good idea to make sure it will pass to avoid running into trouble if not already a requirement for another app like Google Pay.

It could also be the phone is simply too old for some of the root detection methods to yield results.
[Magisk] tko:
okay thats wierd.

btw i was only talking about the carnary manager app. i have 23.0 flashed .... no idea if that makes a difference...

manager app name is changed?

(just for info... my bootloader is unlocked, safetynet full pass)
[Magisk] Conan179:
oh embarrassing embarrassing, after I switched to canary earlier, I forgot to hide the magisk app, just checked in and will now watch it.
[Magisk] hueuebi:
I got it working as well.

Safety net is intact.

I only installed riru and riru unshared, I didn't bother renaming magisk.

Also I used magisk hide to hide all 3 photo tan processes.
[Magisk] Conan179:
I have found my problem,

I created a module with the smali-patcher to always take a screenshot, even for apps protected by drm.

If this is running, the phototan app does not start, without a module it always starts.
[Magisk] Knotte:
Hey folks, I'm glad to have found a fix here but I can't install this:

I download the code from https://github.com/vvb2060/riru-unshare as a Zip file, right? But when I try to install it in magisk it says "unzip error". Any suggestions what I'm doing wrong? Thanks a lot!
[Magisk] Conan179:
code or release?
[Magisk] Knotte:
Ah, that's it! I opend the page on my phone and didn't find a download option, so I opened it on my PC but there I only downloaded the code, but I need to go to the latest release on the right. Thanks!
[Magisk] Knotte:
Thank you as well. I did not even have to rename Magisk, just install the modules, hide all 3 PhotoTAN processes, clear its cache, done!
[Magisk] TheFerhatKing:
For me Commerzbank photoTan and Comdirect don't work. Note10+ Exynos (N975F) Android 11 One UI 3.1 May Patch DrKetan ROM.

Installed both modules, hidden in magisk and renamed magisk. Last time it worked was on February Security Patch. I still ask me why I tried it again after tried so much things out.

I still think that the SafetyNet Fix included in ROM does interrupt the Banking App, but ROM Developer doesn't care. Maybe I will change the ROM if I have time.
[Magisk] Seppel007:
Hi, I got it working too :) with Magisk 23.0 then Hiding Magisk and

- installed the 2 Riru Modules (Riru v25.4.4 and Riru Unshare 2.0)

- applied magiskhide on all 3 processes of the phototan-app

Instantly works again (didnt use it since it updated to 8.3.0 and wasnt working anymore.

Machine: OnePlus 5 Android 9.0.11 unlocked/rooted
[Magisk] Marty4:
Hi,

Is there anyone on rooted Android 11 who actually found a way to make the latest photoTAN app work?

I'm running out of ideas...

My current config:

Magisk Canary with the following modules:

Riru 25.4.4

Riru - EdXposed

Riru - Enhanced mode for Magisk Hide

Systemless Hosts

Universal SafetyNet Fix

(disabling these modules doesn't make a difference)

Magisk Hide: all three photoTAN processes enabled

EdXposed Hide: photoTAN blacklisted

SafetyNet passed with BASIC

XPrivacyLua: "Get applications" restricted for photoTAN

Even Google Pay works like a charm! Any ideas what could be the problem for photoTAN?
[Magisk] Conan179:
Post 1

https://xdaforums.com/t/comdirect-phototan-app-detecting-root-fix-found.4274825/#post-84987761
[Magisk] WK 85:
THX Comdirect is working on my Xiaomi Mi 9 lite with Android 10,
[Magisk] hey_malik:
The riru fix works for me too. Many thanks for that.

Are there any experiences with doing os updates (OnePlus 6t/oxygenos) with the riru modules installed? Is there a need to uninstall them prior to an update?
[Magisk] RfBob:
I'm on Oxygen OS 11.0.0.2 GM21BA on a OnePlus 7 Pro / Android 11

Finally managed to get it running with the following setup:

Magisk Canary f822ca5b (23001)

Magisk Manager Canary f822ca5b (23001) (21)

comdirect Phototan 8.3.0 (latest version atm)

1. Hid the three processes of phototan in Magisk Manager

2. renamed Magisk Manager to sth else (This did the trick in the end, I think. I had not known of the possibility to do so via magisks settings)

(3. Hid the Adaway process in Magisk Manager - propably not necessary) Propably not necessary. Will trigger new problems once adaway or the ROM itself need updating.

4. started phototan.
[Magisk] ralphabt:
I managed to get it working (Magisk 23.0).

Using only riru unshare was not sufficient for me. A few root apps are installed on my phone, Magisk has been renamed. Still phototan crashed on startup. After trying many things, XPrivacyLua did the trick (-> disable XPosed Hide for phototan & restrict "Get applications" for phototan).

@RfBob AdAway is installed on my phone, I did not need to hide the process
[Magisk] planck0815:
This also worked for me! Thanks.

Tried XPrivacyLua before, but forgot to unhide PhotoTAN from Xposed. 😑
[Magisk] Marty4:
Thank you so much! The trick was NOT to put photoTAN on the Xposed Hide blacklist!
[Magisk] Laptapper:
Which settings in magisk fot phototan? Or only one tick in xprivacy?
[Magisk] Conan179:
all 3 points in magisk hide.
[Magisk] Laptapper:
Not working for me

Please could you be so kindly and explain all steps and versions. Thanks
[Magisk] Conan179:
https://xdaforums.com/t/comdirect-phototan-app-detecting-root-fix-found.4274825/#post-84987761

make this, this IS working.
[Magisk] Laptapper:
:cry: for me not working on cherishos 2.5

magisk 23, riru, riru unshare, edxposed and newest xprivacylua.

I recognized phototan only checking magisk. If I deinstalled only magisk and don't remove any other root app like franco kernel manager or alpha backup or xprivacylua.... phototan is working.
[Magisk] highsciguy:
I didn't get it to work. In my case SafetyNet fails both tests in Magisk (at least since I reinstalled).

You wonder what the motivation of .comdirect is to reinforce the root check. They blame regulations, but do you trust someone on legal issues who just tried to increase fees with an illegal update of their terms and conditions?

I'd expect that most rooted Android devices are to have an up-to-date System with security patches applied, and not due to unintended root exploits. So someone with a superficial understanding of Android security seems to be involved here.

Probably time to look for another direct bank that still deserves the name and doesn't invest in this useless arms race.
[Magisk] planck0815:
Make sure that Xposed Hide is activated, but don't blacklist PhotoTAN-app. Then disallow "read applications list" in XPrivacyLua.
[Magisk] planck0815:
You have to change devices fingerprint to get to basic attestation ("MagiskHide Props Config" Magisk module). In combination with "Universal Safetynet Fix" you should succeed passing safetynet-check. But I think Safetynet is not the problem here.