yashsingh1/xdaforums huggingface dataset:
[Magisk] CharlieMHz:
How did you configure the Magisk settings? I tried Zygisk on and off, Native Test still says "Magisk found". If I turn off Zygisk, I lose root access, but because of that TnG works lol.

EDIT: Turns out I had Enforce SuList turned on, so all apps couldn't get root access. Now I have:

Zygisk OFF

MagiskHide ON

Enforce SuList OFF

Added TnG and Native Test to MagiskHide list

TnG works now (no longer stuck on splash screen), but Native Test still says "Found Magisk". As for modules, I'll need to switch from Zygisk to Riru versions.
[Magisk] pndwal:
The obvious oversight above is passing new Play Integrity API's deviceIntegrity verdict...

Of course SafetyNet is deprecated and all apps using it must migrate to PI by June... Most already have.

Check with Play Integrity API Checker, and if failing deviceIntegrity find solution in first posts (OP's) here...

Don't forget need to clear data in Play Services, Play Store (don't assume Play Protect certification negates the need as it still uses old S/N API) and your app after fixing this as indicated... 🤠 PW
[Magisk] 2uk3y:
every magisk delta canary release i will try run tngewallet but no luck. the problem when i enable zygisk, the app cannot run.

so today receive canary update and surprisingly tngewallet running well with zygisk enable.

Device - Redmi 9 (r vendor)

OS - Superior OS A13
[Magisk] pndwal:
May be helpful to say what device/OS...

Seems to depend on device/OS for some... Worked fine for me (RN8T, stock MIUI A10) since I tested on official Canary:

https://xdaforums.com/t/magisk-module-universal-safetynet-fix-2-3-1.4217823/post-87873291

🙂 PW
[Magisk] 73sydney:
Defs per device on that banking app, i cant get that one to pass here...
[Magisk] CharlieMHz:
Thanks soo much for this! It worked for me as well!

Poco F3 - crDroid 2022-09-13 build

Magisk Delta app NOT hidden

No modules installed

Native Test shows "Normal"

I then installed Displax's USNF and was able to pass some some integrity checks (they were all red before this)
[Magisk] 2uk3y:
Device - Redmi 9 (r vendor)

OS - Superior OS A13
[Magisk] Technology geek:
im using magisk delta and touch n go just leaves a black screen i tried everything but can't figure how to make it work. i also tried cygisk(another custom magisk) still same result so idk. the app version im using is 1.7.87
[Magisk] locolyric:
Just use magisk delta, switch on zygisk and magiskhide. It will pass tng wallet. But you can't use shamiko.
[Magisk] Technology geek:
im using custom rom(evoxA12L) with magisk delta latest 25.2-delta-5 with shamiko i will try but do i need safetynetmod?
[Magisk] prokiller1199:
u can't use shamiko to get tng working
[Magisk] Technology geek:
wut modules u have flashed can screenshot please
[Magisk] Technology geek:
so i uninstalled shamiko but still like this
[Magisk] prokiller1199:
Got try reinstall TNG? I'm using stock pixel rom yeahh. maybe its something detected in ur rom.

BTW 25.2-delta-5 is stable build, we were using canary build.
[Magisk] Technology geek:
tried reinstalling different version and 1.7.84 works but later versions don't work. idk what they kinda detection they used from 1.7.84 onwards
[Magisk] prokiller1199:
v1.7.84 known to work with no problems. After that no.
[Magisk] Technology geek:
yea so now will continue using this version until something changes anyway thanks for suggestions
[Magisk] 2uk3y:
i attach modules that i use.

do u already use magisk delta latest canary release? still work for me
[Magisk] Technology geek:
Is ur magisk delta canary version still the same as ur screen shot and what version is ur touch n go app. My magisk delta canary version is 2f4b1049-delta
[Magisk] 2uk3y:
i already update latest same like u 2f4b1049-delta. my tng apps version is 1.7.87
[Magisk] Technology geek:
It worked thanks
[Magisk] dipdipax:
Hi, is there any way that still work to hide root from banking apps in android nougat/7.1.2 (lineageos 14.1) ?
[Magisk] pndwal:
Any reason the ways mentioned here (and in OPs posts) shouldn't work w/ 7.1.2?

Edit:

If your concern is lack of Shamiko support, you can still use Canyie's old Riru Momohider solution... PW
[Magisk] CharlieMHz:
What I've noticed with TnG on Magisk Delta Canary is that it can sometimes stay on the splash screen for 10+ seconds before loading, so you gotta wait for a while.
[Magisk] GoodSoul:
Tutorial has been updated and is working again.
[Magisk] 2takta11:
Help solve the detection problem
[Magisk] zgfg:
You have Zygisk enabled but according to Ruru you have XPrivaxyLua -I'm not familiar with Lua anymore (used but long time ago) but if needs Riru, Riru is not compatible with Zygisk

If I recall correctly, Lua does not properly clean its files when uninstalling. If that's your case, check on the Lua GitHub what to remove manually (again, I think it was described there)

It also detects your Magisk app, although you did Hide Magisk app. That's not enough. You will need Zygisk LSPosed and Hide My Apps (HMA).

There is another thread here on XDA how to configure HMA, search for the thread and read instructions in the OP post there
[Magisk] 2takta11:
But I hid the app from magisk in DenyList! Why does it see Magisk?
[Magisk] J.Michael:
That is the issue with most detection problems: If putting the app in DenyList was enough, this thread would be much shorter.

Did you read @zgfg's response?
[Magisk] zzz2002:
Where can I find LSPosed?

Thnx
[Magisk] m0han:
https://github.com/LSPosed/LSPosed

https://github.com/LSPosed/LSPosed/releases
[Magisk] pedroandroid:
Hey team!

Anybody can help me to find why still detecting?

Magisk already hide with another name.

Thanks
[Magisk] zgfg:
Just answered the similar thing 2hrs ago in this SAME thread (previous page) - 3rd part of the post, HMA:

https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87952173
[Magisk] pedroandroid:
Hey buddy!

(I didn't read the full thread before, sorry about that)

Yeah, thank you, tried here but anyway, C6 app not working yet.

Tried using enforced list without shamiko, with shamiko, HMA... No sucess.

I think the only way will be flashing the Chinese stock ROM. =\
[Magisk] zgfg:
Does it FULlY pass now with the Applist detector?

If it does, did you configure the same for that C6 app

Don't know what is the C6 app

Btw, HMA is only about hiding the Magisk app (you must also hide HMA itself and any other LSPosed module you may have)

Can you fully pass with those three:

Releases · byxiaorun/Ruru

An android sample app of detecting suspicious apps like magisk manager - byxiaorun/Ruru

github.com

Oprek Root Detector - Check De - Apps on Google Play

Apps to check devices health, root, or xposed framework.

play.google.com

TB Checker - Play Integrity - Apps on Google Play

All in one tools check android devices

play.google.com

You should be able to pass with them - then you know a good shelter for the hide and seek game

Chinese ROM - some Xiaomi or what - phone and ROM?
[Magisk] pedroandroid:
So, its a bank app.

If I put the oprek in the blacklist in Magisk, it pass. If not, don't. Downloaded the tb checker, same thing.

My configs in HMA are:

- Blacklist template with HMA and Config2 (Magisk).

- App manager C6 with the template activated.

IDK if I'm not forgetting something, but I followed the thread to install HMA.

Maybe I'm leaving something behind about Magisk.

BTW thanks for helping me on this. I'm not the only one, in YouTube there's a lot of people with the same problem.

Phone: Mi 12 pro, MIUI 13.0.9.0 stable.
[Magisk] zgfg:
Ok but you must also use HMA to hide from TB-Checker, then it shall not detect XPosed module and Magisk app.

With TB- Checker in DenyList, TB-Checker must not find SU and so - all must be green for Root and XPosed checks

You say Stable - do you mean Xiaomi.eu?

Btw, with Xiaomi.eu I don't need USNF

Magisk Delta is better for hiding. Eg, for:

Security Check - Device compli - Apps on Google Play

Check your device readiness and compliance for Mobile Payments

play.google.com

I cannot pass Root detection on my Xiaomi.eu MIUI 13 with Magisk Canary TJW (official) but I can with Magisk Delta (Zygisk + MagiskHide, no Shamiko, no USNF, LSPosed + H MA)
[Magisk] zgfg:
Is this what you're looking for - passing with Magisk Delta but not with TJW/official Canary
[Magisk] pedroandroid:
Bro. You saved my life! LOL

Thank you very much. Working!

Will share this discovery
[Magisk] CharlieMHz:
Just an update, latest Magisk Delta stable works with Touch n' Go eWallet, not necessary to use canary release.
[Magisk] huskydg:
I found out the way how to detect magiskhide and safetynet fix, ... which is used by poinku 🙂
[Magisk] J.Michael:
Care to elaborate?
[Magisk] martyfender:
I have two similar devices linked in my signature, One had official debug builds and the other Magisk Delta debug builds. In the last few weeks I have been testing topjohnwu's debug artifact builds. I realize that these are pre-alpha builds that can contain bugs and are works in progress.

Overall they have been working well until the last few builds. On recent builds,when I install the magisk app-debug.apk, all goes well until I try to launch it. When I do it either it does not show any signs of launching, or I see a brief splash, or on the recent one, a brief dialog that flashes quickly and disappears, that looks like the additional setup required one. I can successfully install Magisk it self through TWRP.

The best way I have found to install these builds in recent weeks is to uninstall the the current apk, then install the new app-debug.apk. Second I go into app settings and grant storage permission and install from unknown sources. Furthermore, I then do a direct install of magisk, then reboot. Finally, after a reboot I hide the app-debug.apk by repackaging it.

Is anyone else having the above problem with recent artifact builds? I have also, I think heard them called CA builds. The A, I am guessing, means artifacts?

To continue, Can I report these builds in the issue area of github, as I am using the debug builds, or is it pointless?

Thanks

Update:

In the most recent build, the problem is fixed.
[Magisk] howlifego:
Hi, regarding Magisk installation on emulators. After enabling Zygisk without fail LDPlayer goes into bootloop while Nox is stuck at 99%.

Install app_process wrapper, enable zygisk, install safetynet-fix, reboot. No luck. Any ideas? Recommendations on which versions of emulators with known success? LDPlayer 4.0.7.8 and Nox latest 7.0.5.1. Thanks
[Magisk] huskydg:
I can't guess your question so stop talking only plain text: "I have a problem, how to fix", Bla bla...
[Magisk] howlifego:
Is it a known issue? Zygisk causing bootloop

Are you running Magisk on any emulator, if so what versions so I can switch to them. Maybe it's a version issue
[Magisk] huskydg:
Why it bootloops? As i said i couldn't guess what was the problem, so please report with proper bugreports. Thanks!
[Magisk] huskydg:
What is your Magisk version, you even didn't mention, HOW CAN I HELP YOU with only your "Zygisk causing bootloop" text??
[Magisk] howlifego:
Magisk 25.2-delta-5
[Magisk] huskydg:
No help with old, stable and canary version.
[Magisk] huskydg:
You should use latest debug version and report me!
[Magisk] Umbardacil:
Any other idea?
[Magisk] dohanin:
Hi zgfg,

When I try using LSPosed (zygisk) and HMA to hide youtube from Playstore, it works fine.

But now Oprek Detector failed in "Apps with root/xposed access". Should I be worried about it, or did I miss something, e.g. need to use HMA for Oprek Detector? I'm currently putting it in the denylist (for Shamiko).
[Magisk] zgfg:
Pls, what is thst Oprek Detector, and where from?
[Magisk] dohanin:
Just someone mentioned above, so I gave it a try. Can be found in Playstore.

Someone above also posted a screenshot, which is exactly what I see in Oprek Root Detector (though he had a different issue, I think). --> https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-86348703
[Magisk] meric57:
Hello, I have just tested oprek detector there are bugs it tells me not rooted when I am rooted and play store is certified
[Magisk] dohanin:
I think the result means you have hidden root successfully.
[Magisk] LuisCarlosHK:
Here is my result of Oprek Root Detector. Does it means that I am very poor to hide rooted?
[Magisk] meric57:
Hello dohanim, I use safetynet checker and root checker all are good in play store your certified or not if not empty the cache and given in app in device parameter.
[Magisk] dohanin:
Have you added Oprek Root Detector to DenyList or MagiskHide?
[Magisk] LuisCarlosHK:
No I didn't add Oprek Root Detector to denylist.
[Magisk] dohanin:
Oh, you have to add it in order to hide root from the app.
[Magisk] LuisCarlosHK:
Here is the result when added Oprek Root Detector into denylist.

First result is Magisk was frozen by AirFreeze without repackaged.

Second result is Magisk was repackaged without frozen.
[Magisk] zgfg:
Ofc, Oprek must be in DenyList

By HMA, I hid LSPosed apk and all LSPosed modules apk files, and Magisk app from Oprek - and everything is green

(alternatively, try with freezing the mentioned apps)
[Magisk] toejam119:
I'm willing to bet your banking app sees the same thing as Oprek Detector, that there are apps with root/exposed access. Is your Magisk APK hidden in Magisk settings? Then what apps do you have that require root?

I have the following in superuser list in Magisk: Fox's Magisk Module Manager (does require root), GSam Battery Monitor (does not require root), Naptime (does not require root), Root Checker Pro (does not require root), Solid Explorer (does not require root), Tasker (does not require root), Termux (does not require root). I pass all checks in Oprek Detector.

It could be that you need to freeze some apps so that your banking app doesn't detect them (I have not frozen anything), depending what apps you have.

I have Lineage OS 18.1 (Android 11) on Sony XZ1 compact. What device and OS do you have, stock or custom rom?
[Magisk] MartK87:
@pndwal

Pleasure mate glad i could help out
[Magisk] lebigmac:
Check out my Oprek detector results.

Thank god I don't use those banking apps on my phone. They would probably throw lots of fatal errors. :ROFLMAO:

When I want to do a money transfer I just login to my bank homepage and do the transfer from there. That has worked great so far no problems (y)
[Magisk] shoey63:
I can't seem to hide Lsposed from HMA, even though I am using the parasitic shortcut and uninstalling the real APK.

Also what's with xprivacylua in suspicious section? I completely uninstalled that?
[Magisk] nacos:
You uninstalled XPrivacy Lua because it was listed in the suspicious section???
[Magisk] shoey63:
I uninstalled it ages ago, and just now decided to give hma a try.

The question really is, where are the leftovers of xprivacylua hidden?
[Magisk] nacos:
Why would you uninstall it? For me, XPrivacy Lua was and remains one of the main reasons to root. It's by far, the most reliable privacy app. No relationship whatsoever, but if Marcel Bokhorst is not to be trusted, then I really don't know who else you can trust.

Well, anyways, your phone, your choice! 🤔
[Magisk] pndwal:
As these are generally only test builds they may be more unstable than Canary... I think the TJW builds not building very recent experimental/wip commits will likely be most stable; Canyie / Shana (LoveSy) etc builds there I know are often half-baked but enough for those w/ bug reports to test fixes for those Devs... Many can't hide the Magisk app or have other limitations and are quickly cobbled together... Many fixes come this way after various attempts / builds tested however...

You need to select carefully if you want properly working CI builds... Some are good...

You mean CI = "Continuous Integration"?...

No... Devs don't even want old proper debug build logs... They'll only test latest debug... They'll fix bugs going forward, but not backwards. 😉 PW
[Magisk] martyfender:
Much of this I figured out, but thank you for clarifying this. Based on this, I may only try the CI shown signed by topjohnwu and yes I did run into some major bugs with the others I tried.
[Magisk] shakeelbirmani:
Hi ther, Magisk hide seems to work fine on most of rhe apps howevery banking apps from Pakistan (i.e BHL Mobile and Alfa) detecta root everytime.
[Magisk] pndwal:
🤔... But MagiskHide is dead!...

Please say what Magisk version you use...

Merhaps you peant HBL Mobile? (We have BHL in Oz, but deals in hot property, not cold cash!)...

Xiaomi RN8T w/ A10 MIUI, Magisk Canary, Magisk App hidden, bank app in denylist (NOT enforced), Shamiko, LSPosed + HideMyApplist XPosed module hiding all root/mod related apps from app... and Play Integrity deviceIntegrity passing of course...

...And Alfalah Bank's Alfa?...

Xiaomi RN8T w/ A10 MIUI, Magisk Canary, Magisk App hidden, bank app in denylist (NOT enforced), Shamiko, LSPosed + HideMyApplist XPosed module hiding all root/mod related apps from app... and Play Integrity deviceIntegrity passing of course...

... Long live MagiskHide!...

😜 PW
[Magisk] spicediablo:
Hi,

If I am on official magisk 25.2, how do I move to this delta?

Thanks.
[Magisk] RubyRose:
Hi everyone.

Installed PixelExperience Plus edition ROM on my Galaxy s8+ from this thread

I installed Magisk, Riru, MomoHider, everything is as it should be.

But in Momo it gives me the following:

SELinux is permissive.

init.rc is modified.

Seccomp is disabled.

I created the files I needed inside /momohider/config but it didn't work.

Also, this assembly, I can not change the state of Linux in any way.

Can anyone give some advice or in my case I just need to change the build with SELinux support?
[Magisk] huskydg:
💀💀💀💀💀💀💀💀💀💀💀💀💀
[Magisk] RubyRose:
Your version of Magisk and MomoHider also :D
[Magisk] CharlieMHz:
Kitsune Magisk

There's no stable release for now, so you can download the Canary release.

Here are the instructions to switch to Delta: https://huskydg.github.io/magisk-fi...current-magisk-to-magisk-delta-and-vice-versa

Follow the Direct Install (Recommended) steps
[Magisk] pndwal:
Your main concern is passing Play Integrity API's deviceIntegrity verdict, not extra Momo detections... I'm doubtful you are passing that... Have you checked?

You have a big clue here however... How will you pass PI deviceIntegrity w/o Security-Enhanced Linux?... Why is it set to permissive?...

It was possible to pass S/N w/ permissive in the past, but I believe we may not be able to hide permissive selinux for PI yet... And why would you want it anyway? PW
[Magisk] RubyRose:
Yes that's right. Now I'm trying to solve this problem.

I have already tried both Pixel Experience and LineageOS 19.1 on the 12th android.

By all means tried to translate selinux into enforcing - to no avail.

Now I'm looking for a ROM/firmware that provides SELinux or I'm thinking of installing a custom kernel for Pixel Experience. But I can't figure out which one.
[Magisk] pndwal:
Ah ... But you indicated you were simply trying to hide permissive w/ momohider etc... You need a ROM w/ enforcing if, as it now appears, you didn't set permissive yourself...

Permissive is only for testing issues/ bypassing issues temporarily for development purposes, NOT for production builds... If a ROM is supplied w/permissive SE, assume something is still broken / it's not really for daily use... Especially for rooted device users, it offers an invaluable defence against hacking / malware / attacks as it's something you can / should still have despite adjusting some SE rules for root....

Nb. All PE ROMs broke S/N (so now PI) for a while w/ USNF changes due to PE inbuilt prop manipulation... Newer PE ROMs appear to have fixed this, but integrated ROM prop changes leads to many unpredictable issues especially w/ Magisk module conflicts etc...

I much prefer a clean ROM, like any official LOS build, and to add pixel prop values etc thru some module later... Much easier to diagnose issues then... And I do understand @kdrag0n recommends integrating SafetyNet Fix (now w/ PI fix per his Proton ROMs) w/ it's prop changes; this may be fine w/ Proton/expert ROM builders, but I've seen many issues arise when adopting this approach...

Nb. Any official LOS build will never manipulate props from expected values, integrate proprietary code incl. GApps, release SE permissive builds, or do other 'shady' stuff... so I'm guessing you only tried unofficial LOS...

Nb. 2. some unofficial ROMs build all sorts of crazy stuff...

😜 PW
[Magisk] RubyRose:
I have already encountered the problem of SELinux permissive on other firmware and did not attach serious importance to this, since I thought that you can safely switch this setting using the "SELinux Switch". But when I tried (already after the publication of the original question) - I could not and began to look for a way out of the situation. I tried a lot of options (with modules, files and console), but nothing happened :D

This is the number one issue right now and I'm looking for a ROM with SELinux built in, or preferably a kernel with support that can be integrated into Pixel Expirience (because Momo doesn't show I'm using a custom ROM).

When using LOS it tells me that I am on a custom ROM. I would like to bring everything to the ideal, as far as possible.

I will be glad if you advise something.)
[Magisk] spicediablo:
Thanks！I installed magisk delta on top of official magisk, enabled magisk hide and added TNG to hide list and it works now!
[Magisk] m0han:
Try AICP if that is available for your device.
[Magisk] pndwal:
You can switch some permissive ROMs to enforcing, I guess it depends on how much is broken... Some just won't boot... If you can switch, some functions will most likely break... Read Permissive ROM = experimental, insecure, half-baked ROM not fit for daily use...

Personally I wouldn't worry about that detection unless you have a bank app that detects it... Not sure kernel would fix it either; depends on what half-baked ROM feature(s) are preventing the dev from setting enforcing... Don't think it has to be kernel issue...

Very interesting that PE can hide that however!... This suggests that the same may be achievable by a Magisk module... Someone here may want to investigate what PE is doing to hide that it's a custom ROM and give it a go if such a module doesn't already exit...

To me that is ideal...

Inbuilt spoofing may be good for those wanting deviceIntegrity etc w/o Magisk/root, but for those using Magisk a clean and predictable ROM with hiding etc achieved by systemless mods is the ideal for me...

So I'd be inclined to use a stable, well cooked ROM with few nasty surprises, like official LOS if available, and try to fix detections with addons after the fact (unless you have a particular favourite feature you need)... But that's just me... 😜
[Magisk] spicediablo:
It seems tng still intermittent, sometimes it works and sometimes it doesn't. Did you encounter this problem?
[Magisk] CharlieMHz:
I have to wait 10+ seconds on the splash screen sometimes. Have patience.
[Magisk] RubyRose:
Yes, I would just like to find such a ROM. But as I understand it, at the moment there are no such ones on s8+.(

Or I didn't search well.

This is the problem, that I plan to use banking applications. And it's a matter of honor to bring everything to perfect condition. :D

But apparently on this phone it will not work. Now I will try to do it on google pixel.

This is true. Hopefully there will be one here. I attached a screenshot of PE along with momo to the first post.

That is the problem. Official LOS is not available for my device. :D
[Magisk] Lughnasadh:
What's interesting here is John's response in the screenshot below about whether Google should do something about this...

(The screenshot John originally quote tweeted is from appdome dot com)

https://twitter.com/i/web/status/1618116841645445121