yashsingh1/xdaforums huggingface dataset:
[Magisk] zgfg:
Didn't search. Frankly, I saw v4.1.1 there on Friday when it was posted but wasn't in hurry to download/install.

Now seeing your post I wanted to check is it still available on the developer's TG channel and I finally installed now (but for me there is no diff compared to the three days older v4.1.0)
[Magisk] pndwal:
Seems not, but Canyie has fixed her GitHub link to Momo from MomoHider page https://github.com/canyie/Riru-MomoHider ('depreciation notice' introduces Shamiko - MomoHider may not be a 'thing' anymore...) however (Link to momo apk is dead #22 / Fix #22, 54d76a6), so at least we can link to that on XDA since we can't post TG links as file source...

Momo is linked under 'Test':

https://github.com/canyie/Riru-MomoHider#test

👀 PW
[Magisk] winner71:
Could you tell us too what apps we should check ✔️ in lsposed after the recommended system framework and setting storage?
[Magisk] mGforCe:
It is mentioned .... Install Xprivacylua. Go to LSposed, select Axis Bank for Xprivacylua module ....

Select only those apps in LSposed / modules which you want to be address / modified.

In this case it was Axis Bank app selected within LSposed for Xprivacylua

For HMA, within LSposed, one needs to just select System Framework and nothing more

Hope this helps
[Magisk] winner71:
Have you had solution for this? Can we hide this xlua folder for being detected?
[Magisk] winner71:
Actually I want to try this method for marketplace app GRAB or OVO. I think anyone from Asean countries is very familiar with these apps. I've followed precisely all your instructions, but no luck. Grab and Ovo still refuse to work, but strangely your method is well worked with Shopee, Gojek, and all of my bank apps. Maybe someone here in xda can helps me please
[Magisk] pndwal:
You need Universal SafetyNet Fix, if you have 24 series magisk, use latest Zygisk solution w/ Zygisk enabled. PW
[Magisk] _mysiak_:
Sorry, forgot to mention this module, but it was the first one which I installed (zygisk version). It works as I switch from HW attestation to basic once activated, but Safetynet still fails (basic + cts profile fail). It seems that props which are set by Magisk hide in v23 fail to be detected by system in Magisk v24.1 + USNF.
[Magisk] DineshValor:
With new zygisk magisk update, you have the option to turn ON/OFF Zygisk if u want to use riru but i prefer to use zygisk bcoz i was also the riru user back before.
[Magisk] DineshValor:
SafetyNet (Basic + CTS Profile) Bypass Successful by these steps:- Try your luck.

1. Update Magisk v24.1

2. Hide Magisk app

3. Enable Zygisk, Enforce Denylist, Configure Denylist (Google Play Services, Banking apps, Pokemon Go, etc)

3. Install latest Module "Universal SafetyNet Fix" by kdrag0n

4. Remove existing Module like Riru, Lsposed, etc.

5. Reboot and try check SafetyNet.

Good Luck!
[Magisk] Lughnasadh:
You should be able to. I would first disable your mods (to be on the safe side). Then update the app and then update Magisk via direct install (no need to re-patch the boot image). Your custom kernel should remain intact after the reboot (I'm assuming your kernel doesn't need any changes implemented to work with 24.1). Then set up your stuff again. As mentioned above, disable Zygist if you want to use Riru.
[Magisk] Syoenth:
To use Banking apps on rooted phone with Magisk I did this, I have Magisk latest canary but it'll work on Magisk 24.1:

1. Enable Zigysk and Denylist

2. Add to Denylist Google Play Service and Banking apps

3. Install Lsposed module Zigysk version

4. Install and enable MyHideApp lsposed module

5. in the app go to 'Select Effective Apps' and Select one of your banking apps

6. Go to Additional app invisible and select all apps that use root including the Magisk app, save changes and then copy the config to the other banking apps and done
[Magisk] _mysiak_:
Thanks, I tried these steps already to no avail (basically the same what I do with Magisk 23). 😕 Probably will give it another go with logcat capture.
[Magisk] pndwal:
Not sure what you mean by props set... Are you using custom ROM & MagiskHide Props Config module?... PW
[Magisk] _mysiak_:
Magisk Hide v23 sets these props, USFN module should set them too, but Mamo for some reason still detects unlocked bootloader. I am using stock ROM without "MagiskHide Props" module (installed it briefly only for the test).

Magisk-23.0\native\jni\magiskhide\hide_policy.cpp

static const char *prop_key[] =
{ "ro.boot.vbmeta.device_state", "ro.boot.verifiedbootstate", "ro.boot.flash.locked",
"ro.boot.veritymode", "ro.boot.warranty_bit", "ro.warranty_bit",
"ro.debuggable", "ro.secure", "ro.build.type", "ro.build.tags",
"ro.vendor.boot.warranty_bit", "ro.vendor.warranty_bit",
"vendor.boot.vbmeta.device_state", nullptr };

static const char *prop_val[] =
{ "locked", "green", "1",
"enforcing", "0", "0",
"0", "1", "user", "release-keys",
"0", "0",
"locked", nullptr };

static const char *late_prop_key[] =
{ "vendor.boot.verifiedbootstate", nullptr };

static const char *late_prop_val[] =
{ "green", nullptr };
[Magisk] pndwal:
Sorry, I've missed your point... Are you saying that it's wrong for Google to offer their partners / other Devs Hardware keystore attestation to TEE? (This is really the whole purpose of AVB)... Is that what you mean by asserting their dominance? PW
[Magisk] pndwal:
Ok, I see what you mean now... Have you tried passing SafetyNet with only Zy-USNF enabled (all other modules disabled), and Zygisk enabled?... MOMO detection is the least of your worries if you don't pass Safety net, and I can't bypass bootloader unlocked detection w/ Android 10 MIUI... PW
[Magisk] HippoMan:
As for me, I consider this whole "we banking companies need to prevent our mobile Android users from using our apps on a rooted device" effort to be a completely misguided debacle that wastes mass quantities of their programmers' time that could instead be dedicated to developing and maintaining other banking and financial applications that actually accomplish something useful.

These same banks gladly permit people to access their services on millions of rooted devices: i.e., desktop computers. Every Windows, Linux, and MacOS system allows users to switch to "root" or "Administrator", and they allow users to choose to run programs in root or Administrator mode. This is the same thing that "rooting" accomplishes on mobile devices.

Furthermore, these banks happily allow us to use a non-protected device to house a mechanism which allows quick and nearly automatic access to customers' funds. That device is called a "wallet". I carry one of these devices, and it contains a mechanism called a "debit card" which was gladly issued to me by my bank, and which could be used to withdraw or spend funds from my account if this "wallet" device of mine ever happens to be stolen.

My bank has never tried to "protect" me by working to prevent or lock down the use of their "debit card" mechanisms with these "wallet" devices. Nor has my bank ever tried to "protect" me by preventing me from accessing their services and my funds via my rooted Linux, MacOS, and Windows machines.

There is no law against being stupid, so, of course, these banks have a right to pursue these idiotic, useless, programmer-hour-wasting protect-against-root policies. We will therefore have to continue to suffer the consequences of this stupidity.
[Magisk] mingkee:
Now I have 4 rooted machines updated to 24 and passed Safetynet with Safetynet Checker (all 3 passed).

There you go

1. Remove any old USNF and get the latest one working with Zygisk

2. Update Magisk to 24.1 and reboot

3. Patch boot.img to 24.1 and reboot

4. Enable Zygisk and Enforce Deny List, reboot

5. Install USNF, reboot

6. Wipe Play Store, reboot

7. Install Safetynet Checker and upgrade to Pro (buy few bottle of water for developer)

If you see any app discovered root, add it on Deny List. It's pretty similar with Hide. Reboot after updated
[Magisk] jons99:
if you don't care about safetynet then yes you can just install the magisk 24.1 apk and update magisk directly from the magisk manager via direct install
[Magisk] meric57:
Good evening for shamiko I am on version 73 and I see s already arrived at version 84. Can be put the link for shamiko or more need like unfs and already activated.
[Magisk] JazzieBoi:
Nope, Riru's inject itself into zygisk so it won't work supposedly... Try installing the zygisk version of the lsposed zip. Find the zips at this telegram: https://t.me/LSPosedArchives
[Magisk] JazzieBoi:
Is there something you have to set of before installing shamiko on Magisk? Or something after? I couldn't get it to pass safetynet after Shamiko was installed, I even tried their Magisk apk.

Edit: Sorry for the double post 😬
[Magisk] dr.ketan:
- deleted -
[Magisk] nacos:
For all of you out there having issues with banking apps (and others) detecting root, regardless whether you are on Google Play Services or microG, there seems to be a way around this - if everything else failed.

Replace the original Android System WebView (Google) for Bromite WebView. It's NOT a very friendly installation but it works. I was successful on two Samsung phones with two different OS. The trick is to get the system app installed first, either by flashing the zip in Magisk, or by using their WebView Magisk module AND then installing the apk file just like a normal app, on top of the system app, a couple of times. Rebooting will likely remove the apk in the /data folder but after a couple of consecutive reinstalls and reboots, it eventually sticks and ...voila, all those pesky apps work again.

If you have TB or any other app that can check the package installation location, and can confirm (after rebooting) that Bromite WebView is installed in /data/ folder and not in /system/, then you're all done. It should act like a split installation.

Of course, there is also the privacy argument since it's well known that Android WebView is yet another spying tool in Google's arsenal.

For clarity, this only takes care of those pesky apps detecting root. The proper rooting itself, whether using Magisk v.23 or 24 remains a hard prerequisite.

------------------------------------------------

Also, check out this XPosed (LSPosed) module suggested by _mysiak_

It does the same job and it does it very nicely. Personally, I've used both, Bromite WebView + Hide My Applist module. 😁

https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-86340479
[Magisk] mingkee:
Fortunately, my bank app doesn't care.

It uses 2FA instead
[Magisk] osm0sis:
Sigh.. guess I'll secretly install Telegram just to download things. 🤷‍♂️🙄🥲
[Magisk] BillGoss:
You don't need to install Telegram. You can do it in using your browser.

Follow canyie's link. And then, if you strip off the last level from the URL, you can see all the posts, including the latest version of Shamiko.
[Magisk] osm0sis:
Couldn't get the actual download to work in Chrome on my phone or laptop, even with Desktop mode and Incognito, not without a Telegram app installed. 🤷‍♂️
[Magisk] martyfender:
I am just curious why you don't want to install telegram. About a year ago, or so, I uninstalled telegram because I got tired of the juvenile, posts on an android app dev forum, lspeed. I feel now that telegram is better moderated, but that is mostly based on the magisk alpha, lsposed. etc that I am now on. Is there some other security issues with it that I am not aware? I have most notification in it turned off so it doesn't constantly annoy me.
[Magisk] osm0sis:
Nah just the childishness nonsense you mention. I was on a few Android groups at one point and they were all pretty obnoxious. That and when I tried having a public profile getting random "Hey are you THE osm0sis from xda? Cool! Just checking." roughly every couple days was ridiculous. Made me fairly certain I'm doing just fine with xda, Twitter, email, GitHub, Slack and TWRP's Zulip. 😜
[Magisk] meric57:
Hello suite updated shamiko module to version 0.5.0 (110)

I have this message which appears with a red cross shamiko doesn't worksince enforce denylist is enabled

Also in modo mod v4.1.1

message the environement is abnormal
[Magisk] BillGoss:
You have to configure the Deny List in Magisk with the apps you want to hide, but you must turn off Enforce Deny List in Magisk so that Shamiko can work.
[Magisk] Stillhard:
Luckily to get the file(s) from every TG public channs/groups, you don't even need to join/exist in there, just leech and go - no one will notice :LOL:
[Magisk] mrjuniork:
FYI:

https://xdaforums.com/t/device-forum-rules-please-read-before-posting.3333345/post-79278325
[Magisk] meric57:
Hello,i launch momo is this normal or do fixe something.

Thank you
[Magisk] 73sydney:
I mostly get on there for about 5 minutes a day for early releases, and to post random things in the invite only dev groups that are all so full of random off topic nonsense that my offerings like "butternut pumpkin" in complete isolation, seem to escape attention....
[Magisk] 73sydney:
Could be worse, my S20+ looks like this, yet all still works....

My S20+ does indeed have decrypted /data, debugging mode on and unlocked bootloader.

Wish zygisk wasnt found, but thats its.

update:

Actually this trick seems to have solved the Zygisk detection

https://xdaforums.com/t/discussion-magisk-the-age-of-zygisk.4393877/post-86896041

01010000011011110110111001101011011011000110010101110011
[Magisk] BillGoss:
Woo hoo!

Thanks for clarifying this.

So the link to Momo 4.1.1 is https://t.me/magiskalpha/492?single
[Magisk] pndwal:
Ok, good... So no more blanket 'TG is not allowed as file source'.

New rule states:

What about download links?

Download links from hosts, platforms or other sources are allowed as long as they do not require registration. Some Telegram links require registration for downloads, so they will not be allowed. Please check them before posting.

However apart from 'preview pages' it seems TG can't be accessed without registration including files hosted there. So effectively there is no change / the rule remains the same. 🙁

(Ie, there is no XDA accepted download source for vv2060 / Rikka Momo 'root' detector as it's only officially hosted on TG which requires registration for file access. Nb. This was also the case with Canyie's Shamiko until it recently got a presence in LSPosed GitHub.)

Re this:

What is NOT allowed?

Posts like For support, join my Telegram group: https://t.me/abc. This means you're not willing to provide support to users on XDA.

I think this cannot be inferred; a dev may well be willing, but as they wish to support a non-English userbase, they choose TG for discussion and support purposes, just as Russian Devs might prefer to use 4PDA... XDAs English-only policy is is the issue; it's a matter of XDA's willingness to allow non-English support rather than a Dev's reluctance...

This is very much the case with the LSPosed Devs who are the most prolific contributors to Magisk. Many have their own predominantly Chinese discussion groups, Eg, Rikka (Riru core framework module, YASNAC, Sui, [Momo]...), vvb2060 (Alpha & Lite Magisk, Momo...), Caynie (Dreamland XPosed, Bravo Magisk, Shamiko...), LoveSy aka yujincheng08, Shana (LSPosed etc) and others.

These generally wish to communicate in Chinese with fellow Android modders / other Chinese devs...

Putting this here since "Device Forum Rules (Please Read before Posting)" thread you linked is locked, and actually "Not open for further replies."...

👀 PW
[Magisk] 0purple:
What packages do I select to hide? Tried both LSPosed and Magisk, didn't work. Also, Shamiko now causes "Partition mounted abnormally".

Not really related, but modules that systemize things like libs, apks cause "found file modified by magisk modules". Is there any eay to fix those? "TEE is broken" is ROM's fault afaik so jo way to fix it.

Lineage 19.0
[Magisk] zgfg:
Be careful with enabling Momo in HMA

I never enabled Momo in HMA because (as the name says), Hide My Applist hides applications (like Magisk APP - not the Magisk itself), and as Momo says, Momo does not look for applications

Nevertheless I tested now by enabling Momo in HMA (Effective apps, Enable Hide):

1) enabling File detections or All hide methods does not help to hide TWRP folder.

Simply renaming TWRP folder to TWRP.bak works perfectly for me (without Momo in HMA)

2) Without Momo in HMA, my Momo v4.1.1 does not detect Zygisk.

When I configured Momo in HMA by using All Hide Methods (saved and rebooted) - Momo did complain that Zygisk was found !!!

Hence I disabled Momo in HMA, saved, rebooted and it was fine again - Momo did not find Zygisk.

I tested once again with Momo in HMA (Enable Hide, All hide methods), saved in HMA, rebooted and Momo again wrote Zygisk found

All together, I don't see a use/need for enabling Momo in HMA, Select Effective Apps - without, I have no problem with Zygisk found

And with Momo in HMA, All hide methods - then my Momo finds Zygisk?! (and it does not help to prevent finding TWRP folder)

Xiaomi 11 Lite 5G NE, A11
[Magisk] martyfender:
Do you have momo added to the magisk/shamiko denylist though? In my case, I find I have to do this to hide zygisk. Sometimes it does find zygisk, though. Like before, it is not consistent.
[Magisk] pndwal:
Maybe I'm being dense, but please can you tell me how Momo can be downloaded from here without registering an account (giving phone number etc) for Telegram? - I always get "Download failed" when trying this from a browser...

Thanks, PW
[Magisk] BillGoss:
I thought I had downloaded the APK using the browser, but it seems that I used the Telegram app to download it.

Sorry for the misdirection.

Edit: but I didn't need to join the group. I just had to install Telegram, click on the link I posted and then select Download from the 3dot menu on the post.
[Magisk] pndwal:
👍

But if I'm not wrong, you needed to register to use Telegram (and give a phone number etc), and apparently that's the clincher...

I believe links to files not actually hosted on TG can work, but Momo links seem to be to TG hosted files... PW
[Magisk] HippoMan:
def what_is_it(thing):
item = int(thing, 2)
print(item.to_bytes((item.bit_length() + 7) // 8, 'big').decode())

what_is_it('01010000011011110110111001101011011011000110010101110011')

101010001100001011010110110010100100000011000010010000001101000011010010111000001110000011011110111000001101111011101000110000101101101011101010111001100100000011101000110111100100000011011000111010101101110011000110110100000100000011101000110111101100100011000010111100100101110

1001001001000000111011101101111011011100110010001100101011100100010000001101000011011110111011100100000011011000110111101101110011001110010000001110100011010000110100101110011001000000111000001101111011100110111010000100000011101110110100101101100011011000010000001101100011000010111001101110100001000000110001001100101011001100110111101110010011001010010000001101001011101000010000001100111011001010111010001110011001000000110110001101001011100010111010101101001011001000110000101110100011001010110010000101110
[Magisk] zgfg:
Yes, of course (but DenyList/Shamiko/USNF are not about hiding apps like HMA).

I do have Momo in DenyList and DenyList is disabled due to USNF and Shamiko
[Magisk] GreekPilot:
Anyone else with Magisk found from Momo 4.1.1 or am I the only one...
[Magisk] m0han:
Go back a few pages and you will see various types of detection are found with Momo 4.1.1.

Unfortunately, try as I might, I could not get the instructions by @Wak Joko to work for me.
[Magisk] jakito:
What do you'll think about this Xposed module?

GitHub - GeekTR/PrivacySpace: 隐秘空间/PrivacySpace

隐秘空间/PrivacySpace. Contribute to GeekTR/PrivacySpace development by creating an account on GitHub.

github.com

I can't find an app that doesn't work...momo still complains about broken tee.

4.1.1 momo, 1.3.7 privacyspace, 0.5.0 shamiko and 1.8.3 lsposed
[Magisk] svendsvin:
My banking app still crashes every time I update to Shamiko 0.5.0-110 and 0.5.0-112. After downgrading to 0.4.4 again there is no problem. Can I report this somewhere without having to register to Telegram?

Edit: Apparently it's a Shamiko bug: https://issueantenna.com/repo/LSPosed/LSPosed/issues/1943
[Magisk] Wak Joko:
The ROM diffrences issues assumption could be.

in my case if i enabling the momo in HMA it could solved the "found zygisk"

permenently by configure the API req, intent queries & ID detection without tick the other 2 opt. Yes it does hide the TWRP from momo even i didnt touch the twrp folder. However, its doesnt simply solved the TWRP issue in Oprek. i was deleting/renamed the folder to TWRP.bak etc(temporary i guess) Coz after i reboot into TWRP it recreating the folder again. the Oprek giving me a nightmare. The last solution i had is not using the TWRP.
[Magisk] zgfg:
Did you simply try:

- Momo ticked in DenyList

- DenyList not enforced

- Shamiko installed

And Momo not enabled in HMA

After the changes you must reboot

That should be the 'normal' way to hide Zygisk
[Magisk] BillGoss:
Momo complains about broken TEE because of the way OnePlus implemented hardware key attestation. The same happens on my 8T.

It's not something that can be fixed and it doesn't affect root detection or SafetyNet.
[Magisk] Wak Joko:
like i said i can manage the hiding the "found zygisk' detection. And all my detectors are green except "boot loader unlock" in momo.

As u mentioning "momo not enebled in HMA" causing the zygisk not triggered in momo that is doubt to me. Bcoz i enabled it in EFFECTIVE APP list to hide the zygisk. coz thats the way it work by it name HMA (magisk is still app and zygisk is part if it). I already did the test flash the magisk zip without installing the manager and momo was fine. without the manager u couldnt active the zygisk.
[Magisk] zgfg:
I was simply asking can you hide Zygisk by the way I described (without using HMA)

But anyway, who cares. You are free to use your method and you don't need to test (I'm also no more interested) 😃