yashsingh1/xdaforums huggingface dataset:
[Magisk] zgfg:
For some banking apps both were reported as required. You should test yourself for your case
[Magisk] gaduaxe:
Vietnam region
[Magisk] rwhryz:
MS Teams suddenly detects root even if it is in the deny list, same for Outlook.

Intune Company Portal opens just fine.

Anyone have the same issue?

Teams 1416/1.0.0.2022324202

Company Portal 5.0.5556.0

Magisk 25.1

SafetyNext Fix 2.2.1

YASNAC passed both Basic integrity and CTS profile

Device is certified on google play
[Magisk] zgfg:
I have Teams, the same version (updated yesterday), but without Intune.

Not in DenyList and it doesn't (never did) complain about root

IMO, must be something related to Intune Device Management
[Magisk] webtroter:
Yep! This morning I had my work profile apps cleared of data because they detected root (Outlook and Intune Company Portal)
[Magisk] rwhryz:
Indeed, reverted back to Intune Company Portal version 5.0.5541.0 fixed this.

Try the old version 5.0.5541.0.

I'm also on OP6 😁
[Magisk] webtroter:
You got it on apkmirror or similiar I'm guessing ?
[Magisk] rwhryz:
yes from apkmirror
[Magisk] dohanin:
Yes, I just updated the Intune app and it detects root.

That app is on my Work profile, so I have no way to revert to previous version :(
[Magisk] dohanin:
I tried HSBC VN app, and as I suspected it's the same as HSBC app in other regions. Disabling the Magisk app is the trick for me. Again, different devices may behave differently.
[Magisk] webtroter:
Well, you can. I just did.

I downloaded the file from APK mirror from my work profile, opened it with the Files app (again, in my work profile)

I also disabled the auto-update of the app in Google Play.

Finally, I also had to downgrade my Outlook app.

So basically, I suggest everyone to disable auto-update for MS apps (both on work and personal profiles)
[Magisk] dohanin:
Thanks. Unfortunately my company dictates the policy of Google Play update in work profile. I cannot disable it.

By the way, is there any way I can replace the Intune app in work profile while the work proflie is not turned on? What is the location of the app files in work profile?
[Magisk] rseiler:
@webtroter OMG, that problem could be huge for people. Not that this would help most because they would have no control of the 365 admin side, but I bet Intune has a setting where it doesn't do this check. I've dabbled with it before (we use 365 but have not enabled even the built-in MDM let alone Intune) and I recall there being a huge variety of configurability.

Oh, look at the date on it. Why is this only turning up now? Are the apps themselves driving this by force regardless of how the admin has set it? Or did the default on the admin side also change?

Company Portal device setting requirements for Android

Learn more about Intune Company Portal device setting requirements for Android.

docs.microsoft.com
[Magisk] megabeast:
did you manage to get a fix for this? i need it too lol
[Magisk] megabeast:
please send the custom module that makes it work please
[Magisk] digger16309:
I haven't updated Teams or Intune this month for this reason. I won't update them until they stop working and force it. When I recently upgraded to A12.1, I couldn't restore those apps and their data. I had to freshly install them. A13 may be a loser for me.

I also hide the Magisk app because TEAMS detects root without doing so.
[Magisk] rwhryz:
I had an issue with a banking app as well previously. It detects root even when app is on my denylist. What solved the issue is deleting the TWRP folder on my phone, its empty and I'm on stock recovery so I have no use of it.
[Magisk] rseiler:
There are many ways to setup Intune, but I did it in a very basic way in a test tenant, ensuring that the root blocking in Intune (now called Endpoint Manager) admin was enabled and then verifying that Teams (current version) did trigger the root block message when run. (The site says that Excel, Outlook, PowerPoint, Word, SfB and OD also fall under the policy.)

I then cleared Teams storage, rebooted, and added Teams to the Denylist, then hid M. That works, at least for my configuration.
[Magisk] megabeast:
lol it worked ur a life saver bro thankyou 🙏🏽🙏🏽
[Magisk] Palazzo_K:
Zygisk cannot activate on some old Samsung devices with old kernel (3.19-) · Issue #5395 · topjohnwu/Magisk

For some old Samsung devices, there's a kernel restriction that whenever exec an ELF from /proc, the process can no longer call some systemcalls. For kernel 3.19+, the workaround is fexecve, but it...

github.com

Sorry for taking so long to respond. I don't use forums regularly. Take a look at this. They won't fix it.
[Magisk] nayak.aj:
I sorted it out by upgrading Android :) basically a Kernel update is what was needed . I eventually stumbled on the git link and figured it out ! Thanks for your response !
[Magisk] super_nooby:
I have the problem that although I have frozen Magisk with TitaniumBackup, the health insurance app still reports that the smartphone is rooted. However, before the last update of the app, it was still possible to use it. Strangely, there is no problem with the banking app.
[Magisk] svendsvin:
I pass everything in TB Checker but Magisk Random Package Name when I run Xposed Check. Can someone explain why? I don't have Xposed installed. I have Magisk 25.1 but it was also the case with 24.3.
[Magisk] dohanin:
no idea why it's in that section. to hide it, you can simply disable the magisk app, or use hidemyapplist (lsposed module)
[Magisk] svendsvin:
No reason to disable Magisk so far. I don't have banking apps detecting root. It just mystifies me.
[Magisk] gaduaxe:
Thanks I think so, I am using Realme device & Magisk root with all latest module magisk installed :(
[Magisk] pndwal:
I too don't understand the TB Checker section heading "Run Closed Check" / "Result Check XPosed"... Looks like a left over heading to me, but perhaps to indicate that a number of XPosed functions / modules are detected in this section... Many items are unrelated in fact...

Perhaps this should be 'Root-mods check; Xposed and others'.

...The green sub-headings look more relevant, and aren't necessarily XPosed related either!

Still, above advice is correct... I can hide that randomised Magisk detection only if a solution like LSPosed / HMA is used. (I have all green).

Magisk App can be identified despite app name obfuscation using tricks like detecting the classes.dex code (which does not change, unlike the package name when using Hide the Magisk app) which can be used to identify the app by employing simple pattern matching. (Nb. Some banks detect other installed apps this way also, in case they have been repackaged / obfuscated by users.) I put info on this here:

- https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-85913481

- https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-86053233

- https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-86264883

Nb. In S-PushTAN example above, both random package name obfuscation and HMA hiding using X-Hook injection are required to bypass detection.

It seems that use of intent or API queries along with permissions like QUERY_ALL_PACKAGES etc are still needed for apps to do detect obfuscated apps, so HMA module works to prevent even classes.dex info detection.

Reasons acquiring applist has been allowed despite Google policy that should prevent it (and changes s l o w l y being implemented):

https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87078529

⚠️ Nb. re. Privacy:

TB Checker is collecting your data! - You may wish to review 'Privacy & Policy' in its About App section...

👀 PW
[Magisk] Stillhard:
Sorry, I can't do that, it's really for my private use
[Magisk] svendsvin:
Thanks for the warning. I've used NetGuard to block the firebaselogging in TB Checker.
[Magisk] m0han:
how to do that in NetGuard? couldn't figure it out by myself.
[Magisk] m0han:
Fox's Magisk Module Manager updated to 0.5.5
[Magisk] svendsvin:
You have to use paid version from Github. In settings, Advanced options, enable Filter Traffic. Within Netguard start TB Checker. You then see attempts to access and you can block/allow.
[Magisk] HippoMan:
Yes, I see your point. So let's just hope that most banking app developers just don't bother to read the messages here due to all the repetitious posts here. :)
[Magisk] m0han:
Fox's Magisk Module Manager updated to 0.5.6

Releases · Fox2Code/FoxMagiskModuleManager

A module manager for Magisk because the official app dropped support for it - Fox2Code/FoxMagiskModuleManager

github.com
[Magisk] gsser:
It isn't a secret anymore lol

Got shamiko, set the list. Even tried hiding applist/freezing/disabling magisk manager. The app still detects root and can't use nfc payments. :C

App is https://play.google.com/store/apps/details?id=com.garanti.bonusapp&hl=tr&gl=US
[Magisk] gsser:
Trust me, they do read haha
[Magisk] zgfg:
I can open, I don't see how can I change the language or something but I don't see anything like a warning about root

See the screenshots

Magisk Delta latest and MagiskHide. Did not try official Canary with DenyList instead

Xiaomi Mi 9T, Xiaomi.eu 12.5.2, A11 (not a stock ROM but certified and I don't need MHPC and/or USNF to pass SafetyNet)
[Magisk] Nekromantik:
nope decided not to open account with them
[Magisk] Ainz_Ooal_Gown:
I just can't get Viper4Android working...the module will install but V4A driver doesn't then it prompts to install...i select okay but no dice...
[Magisk] pndwal:
This method should be enough:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-85398919

A previously known method:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-84716381

😛 PW
[Magisk] m0han:
continuing from this post, my current setup is shown in these screenshots. viper works fine. @Ainz_Ooal_Gown
[Magisk] gsser:
Aight i will try delta
[Magisk] suhel28:
Isn't there a way to hide root from Company Intune Portal app? I tried downgrading but it doesn't work... :(
[Magisk] dohanin:
See this thread

People are struggling to make it work (including me). Some have manually re-installed the previous version.
[Magisk] zgfg:
BTW, the app also opens for me with the latest TJW Canary:

- App is in DenyList, DenyList is not enforced

-Zygisk enabled, latest Shamiko and USNF, SafetyNet passing

-using Hide My Applist to hide Magisk app (I did not take Hide Magisk app) and LSPosed modules from the Bonus app

- restart upon the changes and only then start the app first time (otherwise Clear Data for the app before a new test)

- I don't have TWRP folder (it's renamed to TWRP.bak)

This setup is kind of a common sense - it has been discussed here many times

IMO, nobody should ask how to hide root from app x, if he didn't first make sure he carefully setup and tested as above (instructions for HMA have also been posted here few times and several times discussed)
[Magisk] gsser:
Using delta's zygisk + hide with shamiko solved the problem thanks
[Magisk] appleman_wp:
I have a problem with shamiko. I tried many times to install it via magisk. Itinstalls itsuccessfully however the app is not showing in the app drawer. Could someone help why shamiko is not on my device?
[Magisk] 73sydney:
It doesnt get added to the app drawer, its a module...many/most modules do not include an app in them

Look in your list of modules section (last menu item in bottom right) in Magisk Manager, you'll find it there
[Magisk] appleman_wp:
Ok. Thank you. And now how can I use it? How should I hide apps? Thank you
[Magisk] J.Michael:
Try reading posts in this thread. A lot of posts.

I don't think Shamiko has a "Settings". I think you use the Magisk Manager app's deny list. If you do not "Enforce Deny List" in Magisk, then Shamiko will use Magisk's Deny List to tell it what to hide from.
[Magisk] 73sydney:
in this case you don t "use" shamiko as a user, its just an addon script that (attempts, as best possible) to hide whatevers in the Deny List

Magisk Manager -> Settings (gear icon, top right) -> Configure Deny List

Ideally you need to read (and if need be ask questions) before installing modules because worst case scenario its theoretically possible to install the wrong thing and bootloop your device

At which point myself and the other senior members will pass around the chalice of your tears and drink heartily from it

Research, understand, then action....this is the way
[Magisk] m0han:
:D

@appleman_wp, RUE, so you don't 'rue'

Spoiler content hidden.
[Magisk] pndwal:
Just to avoid confusion/ be clear, Shamiko does not hide apps (in denylist or otherwise)...

It's akin to old MagiskHide, and hides traces of root from apps in the list...

@appleman_wp

If you wish to hide apps detected by banks etc, try the Hide My Applist LSPosed module...

(Edits mine.)

Generally Shamiko is used without settings / extra configuration.

However it can actually be reconfigured (by those game / mavericks 😛) for whitelist mode usage. Note caveats:

Sadist! 😜 PW
[Magisk] Gunn3409:
I'm looking for how to root with magisk on a ovation 2 I can't get a boot.img or something like unlock bootloader I think
[Magisk] zgfg:
There are only two ways for installing Magisk:

- flashing the Magisk zip (renamed apk) through a Custom Recovery (like TWRP)

- or by patching the boot.img (or recovery.img in some cases) and flashing the patched img through Fastboot (or through custom Recovery).

In both cases Bootloader must be unlocked (for the first option you need custom Recovery and that must be also flashed from Fastboot.

For anything to be flashed through Fastboot, Bootloader must be unlocked)

No other way - except for ancient phones with ancient Android versions (4.1, 5, maybe 6 in some cases) where rooting worked by King(o) apps (from the phone or PC)
[Magisk] Gunn3409:
Ok then as I read on Google I must root to unlock the bootloader or get boot.img but I can't find a way to root without the bootloader unlock how do I do this. That is what I want is a rooted ovation 2
[Magisk] Homeboy76:
@zgfg, I didn't mean to interrupt your Conversation.
[Magisk] rseiler:
Out of curiosity, do you know how it is that Shamiko isn't findable via Fox's Module Manager? I would have thought that would be a natural way to install it, like with USNF and others.
[Magisk] 73sydney:
Only modules that are submitted are in the Alternate Magisk Repo

Stands to reason if shamiko isnt in there the dev hasnt submitted it

Been plenty of modules that were never in the official repo even, mine wasnt (7000+ downloads tells you a repo isnt everything), some get around just by reposting, word of mouth or linked in signatures...

Shamiko is always attached to the first page of this thread
[Magisk] zgfg:
Unlocking Bootloader comes first. You have to google how to do for your vendor/make/brand

For example, for Xiaomi phones, (some details skipped) I have to install a particular Xiaomi app to the PC, boot the phone to Fastboot mode and connect. That app from PC connects over Internet to the Xiaomi server and server tells me that I have to wait 168 hours. After those 7 days I connect again, Xiaomi server tells me that I'm allowed now to unlock, I click Yes and Bootloader will be unlocked

Another example. Huawei till 2017 - you go to their site, register your account and phone (model, IMEI) and the server immediately gives you BL code for your particular phone. You execute a Fastboot command and BL will be unlocked. As simple as that

Huawei now - they don't allow unlocking BL and they made it almost impossible. However it can be still done for some models but you have to find a guy (usually over Telegram), he will charge you 30+ Euros (probably a more now), he will remotely connect to your PC (think about safety of your data on the PC) and run his tools that will unlock the Bootloader. To make things more complicated, you first have to physically open the phone (you need professional tools if you don't want to break the screen, damage battery and/or break cables) and shortcut certain pins on the phone's motherboard

How the procedure goes for Samsung, One Plus One or whatever (your vendor) I have no bloody idea and I'm not really interested (I won't google for your vendor) as long as I don't buy such a phone for myself 😁

Might be relatively simple or very complicated. Depends on the policy/mercy of your vendor

--

Be aware that for some brands and in some regions, unlocking BL voids the warranty

Also, unlocking BL will usually trigger factory resetting the phone - hence think about backing-up in advance

But ince the BL is unlocked, you can flash custom recovery, custom ROM, install Magisk - sky (minus your knowledge and broadness of hackers community for your phone!!!) will be your limit then for modding
[Magisk] Gunn3409:
Yes I have and got nothing
[Magisk] Gunn3409:
So can you help me with ovation 2 unlock the bootloader?? I don't come up with anything.
[Magisk] zgfg:
How can I help you if I never had that phone in my hands. If you didn't find, maybe there are no guides, so how would I find them?!

After all, sorry but I'm absolutely not interested in wasting my time to google for something that is of totally no need and use for me

---

For an endemic phone, community is narrow. Specially a community of hackers. Hence low chance to find useful guides and specially a first time hand if/when things go wrong (read: when you brick the phone)

Even when you unlock BL, you may hardly find a custom ROM, custom recovery (if there are no users and hackers, who will develop them) or modules to really improve something useful once you root the phone

All to think about before buying the phone, unlocking BL, rooting...
[Magisk] martyfender:
On many Android devices you have to enable developer mode and enable it there. You then need to reboot and it has to factory reset the device.

Also on many devices it can be be done through fastboot.
[Magisk] Homeboy76:
I interrupted a conversation between you and zgfg. So, I edited my previous post.
[Magisk] pndwal:
Guess it's worth / just a matter of trying this...

Are there any indicators/ ways you know of to determine if OEM code (or other steps) will be needed on obscure devices?

I'm guessing there's a good chance it will just work if such an OEM hasn't had to deal with unscrupulous resellers 'globalising' China region devices/ROMs etc. etc., like Xiaomi has for example... But it's just a guess. 🤪 PW
[Magisk] Gunn3409:
Thanks for all your help. I'm hoping that someone is willing to help me with this. I'm just trying to learn how to root phones. I don't know if I'm reading Google wrong or what ,but I've tried that . O by the way I didn't buy this phone ovation 2 it was given to me. Not knowing what I'm doing I wood not try to do this to a phone I need to use. But thanks again for all the help you given me
[Magisk] Gunn3409:
I'm looking for all the help I can get
[Magisk] pndwal:
Did brief search for ovation 2... Can't find much either on B/L unlock...

But you can try the (standard method) suggestion given above:

https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87177199

see also my response:

https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-87177427

... It just might be enough... 🙃 PW
[Magisk] J.Michael:
Do you know anything about the phone?

On XDA, I see references to "ovation" as if it is a version of the Barnes & Noble Nook, but that's a tablet.
[Magisk] pndwal:
Think that's red herring / old... Seems Ovation 2 (Phone) launched May 2021... PW
[Magisk] rseiler:
Magisk v25.2

Maintenance release fixing various issues.

[MagiskInit] Fix a potential issue when stub cpio is used

[MagiskInit] Fix reboot to recovery when stub cpio is used

[MagiskInit] Fix sepolicy.rules symlink for rootfs devices

[General] Better data encryption detection

[General] Move the whole logging infrastructure into Rust
[Magisk] joegreat:
Great to have ongoing Updates, but currently Microsoft apps detect root regardless of all the efforts - I have outlined it here - with currently no solution... :oops:
[Magisk] rseiler:
Yes, Intune/Company Portal problem have been driving many mad over the last week or so. Otherwise, the apps don't care.

BTW, hiding Magisk is the way to get that test to pass. It won't solve your other problem, but it's good to do (AirFrozen is commonly recommended).
[Magisk] zgfg:
ONLY if your device is managed b Intune - it has been already discussed

I have Teams but not Intune and I have no problem whatsoever with Microsoft Teams
[Magisk] RANJITH THRISSUR:
Thanks for this thread guys! I am able to use icici bank's imobile app..after doing lsposed+ HMA app trick provided earlier. Now.. i was trying to use Google wallet, after adding card details and click ok, it says "phone doesn't meet security standards/might be rooted etc..

Is there a work around for this scenario?

I'm sure this is the last resort i have..

Tried the method used for imobile app . Wasn't a success. I'm sharing screenshot too
[Magisk] zgfg:
See the last three or so posts in the Universal SafetyNet Fix thread for the suggested workaround
[Magisk] Fariezgie:
Running MIUI 13 with Android 12, magisk delta + magiskhide prop + shamiko + usnf + zygisk lsp/riru lsp, turn on/off zygisk,

My issue is that my payment app freeze when opened

finally, turning the selinux from permissive to enforcing fix the issues, just use terminal and type

su
setenforce 1

Then my payment app can be used, may try it if u find same issue
[Magisk] janitor9:
Working great. Now i have v1.4 because i can`t find links to download newer one. Been looking hours but no result. Can someone point me a link,please??!!

I had v1.7 few weeks ago but i changed phone and now i can`t find links to update
[Magisk] pndwal:
Please read back in this thread, and see my post linked here:

https://xdaforums.com/t/discussion-google-pay-magisk-discussion-thread.3906703/post-87191597

🤠 PW
[Magisk] m0han:
Shamiko 0.5.2 released
[Magisk] joegreat:
@rseiler @zgfg Thanks for the Intune hint! Removing Intune made it work also for me! (y)

Update: Unfortunately it does not work for long - overnight Outlook stops working as it detects root... :confused: The culprit is explained here - not sure the "solution" works, but I will give it a try!

Update 2: The solution posted by @dtkent worked overnight - looks like this is the final solution (until M$ finds another trick to spot root)! :cool:
[Magisk] dohanin:
Has anyone tried this version of Shamiko on device with Microsoft Intune Company Portal yet? My device with this app is no longer rooted, so I cannot test it myself, but curious to know how the cat and mouse game goes... :)
[Magisk] huskydg:
Shamiko v0.5.2 is released to fix zygisk detection of apps i had mentioned before.

I just wanna say that lsposed group is a little rude. My member in group report in lsposed group that shamiko cannot hide zygisk from some apps and get muted immediately.
[Magisk] huskydg:
Reversed
[Magisk] Baalzaman:
Happy to report that the new Shamiko (0.52), possibly helped by the USNF fork by Displax, and the usual items of adding Intune company portal and the outlook app to the denylist and hiding/renaming the magisk app has resulted in a Intune that passes all checks.
[Magisk] 73sydney:
Sadly normal behaviour for the devs, theyre always *spicy*. Just as likely to get same response to a issue/bug report on the magisk github these days...someone who was generally applauded for their contribs while TJW was on hiatus now has an ego that wont quit....closes issues with one word replies often
[Magisk] Stillhard:
"They Give Magisk A Bad Name" - Ban Jive
[Magisk] amn1987:
It looks like Shamiko and/or USNF is to blame for misbehaving Google and Android processes causing battery life to significantly worsen. Right now manually killing the processes in FKM. Every few minutes any of com.android.vending or com.android.gm, com.android.launcher or com.android.deskclock etc. start to use a lot of the CPU and the little cores max out at 100% until I manually kill them. In 3 different devices ranging from A10 to A12 (custom ROMs ). Official Magisk 25.2. Today clean flashed crDroid 8.7 in my Poco F1 and the issue cropped up after flashing the modules. Anyone else noticed the same?

Edit: USNF continues to block logging into Google accounts. Disabling USNF solves it everytime.