yashsingh1/xdaforums huggingface dataset:
[Magisk] Lord Sithek:
Correct, I updated to the latest Delta from Github releases and no more issues
[Magisk] mGforCe:
Thanks. But you use Riru and mine is Zygisk.

I will update and try nevertheless.

EDIT: Bootloader Spoofer was the one triggering Xposed hooks. I unticked Ruru and TB Checker in the same and now all good.
[Magisk] mGforCe:
Thanks for these experimentation :)

I confirm the same for Nothing OS A13 with Magisk Delta latest.

Bootloader Spoofer triggers Xposed Hooks for both Ruru and TB Checker. If not this module, what else to use?

Momo for me gives error - service not started or so.

Native Bridge - can't hide. Give error

@chiteroman - for your reference.
[Magisk] mGforCe:
Hi, is there a link/post anywhere for all these detectors and their source to download?

RootBeer, TB-Checker, Oprek Root are on Play Store

I got Native Test from TG of nullptr_dev

Applist Detector from Github https://github.com/Dr-TSNG/ApplistDetector/releases

Ruru from https://github.com/byxiaorun/Ruru/releases/

Where to find Memory Detector (I see some on TG but not sure if trusted source)?
[Magisk] zgfg:
Magisk Detector and Key Attestation:

https://github.com/vvb2060[/URL

Native Detector:

https://github.com/LSPosed/NativeDetector/releases/tag/v2.2
[Magisk] mGforCe:
thank you.

I think Native Detector has been removed. Just see "macOS-latest-artifact.zip" in releases

Any link for Memory Detector?
[Magisk] zgfg:
Unzip, find apk and install
[Magisk] wifontor:
Hi there 👋

I'm facing magisk delta direct installation failed problem. It shows /dev/block/mmcblk 0p39 is read only partition, is there any way to fix this problem or should I patch the boot.img and flash in fastboot mode.
[Magisk] zgfg:
Little concerned
[Magisk] Nekromantik:
if you use core only mode then does that break google pay?
[Magisk] zgfg:
With Core only mode no module is active - so how would you hide that Bootloader is unlocked, that Boot partition was changed by installing Magisk?

It might work only for custom ROM that has USNF/Play Integrity Fix integrated into the ROM

Btw, put to Core only mode, reboot and test for yourself
[Magisk] Nekromantik:
I not installed Delta yet.

I have one banking app which people have found works only on Delta using core only mode but i also need to use google pay. So is this not possible? Is it either use modules and make pay work or no modules and make bank app work?
[Magisk] zgfg:
Cannot be answered as asked - banking apps are different, they use different methods to detect modding. You must test
[Magisk] spinning_quirK:
I don't understand... why are you quoting my post and replying with this irrelevant WOT?

A helpful person has already answered my question with a simple sentence:

"The statement (by the Magisk Delta's dev that Shamiko is useless on Magisk Delta) was probably for delta v25, not v26.1."

I didn't thumbs-up his post because I don't want to stir anything unnecessarily, as he had continued with this sentence:

"The owner also seems to stop being too sensitive and then ban someone on Telegram if someone mentioned Shamiko"
[Magisk] zgfg:
It was not related only to you but generally about experimenting with hiding

But since this is your level of understanding and communication, I'm putting you to the Block list and I will carefully pay attention not to read and answer whatever you posts

So, bye man
[Magisk] spinning_quirK:
Thank goodness, finally!

Nevertheless thank you for generally wanting to be of help in this thread.
[Magisk] 2takta11:
I only need root for Total Commander.

redmi note 5, 9 android, Magic Delta 25.

how do I 100% hide root from banking apps?

Is it possible to do this without HMA, Lsposed...? Only using Magic Delta
[Magisk] pndwal:
Guess you mean Starling...

Yes, possible without modules (apparently detects most) or Zygisk/Riru hooking, eg if you find a custom ROM that integrates Play Integrity deviceIntegrity spoofing... Then you can possibly use both without root, and with root as I mentioned here:

https://xdaforums.com/t/banking-app-starling-detecting-magisk.4576421/post-88903611

and won't need modules for passing PI verdicts or Play Protect Device certification pass.

Nb. @chiteroman had Starling working with Alpha's hidelist, but didn't have custom ROM for passing PI deviceIntegrity... His notes on Starling detections here:

https://xdaforums.com/t/banking-app-starling-detecting-magisk.4576421/post-88866561

may be useful/significant even with custom ROM passing PI verdicts.

🤠 PW
[Magisk] gj4560:
Does anyone know if using Magisk Delta will help pass the checks of Microsoft Intune Company Portal? My current setup is official Magisk 26.1 with Shamiko, Play Integrity Fix 6.0, LSposed (Zygisk) and Hide My Applist. I've made sure the setup is correct and using Applist Detector, nothing is detected, however Momo detects Zygisk. My device is a Pixel 7 Pro on the stock August firmware.
[Magisk] spida_singh:
Works fine. I use intune daily. Nothing special required. I only use delta and riru + riru pi fix.
[Magisk] pndwal:
You can't 100% hide modified device... There are foolproof ways for apps to know this although interested parties seem to be slow to catch on...

Meanwhile you can have root and hide it sufficiently for most apps including those with better injection detection, eg with a custom ROM with spoofing for PI verdicts + Magisk with an old style hidelist, eg Delta or Alpha forks, and hide root from Droidguard GMS process...

You could also try these @huskydg solutions to add (inject) such spoofing to a custom ROM lacking it (old but maybe useful):

https://github.com/HuskyDG/injectprop

or to add old-style hidelist to current official Magisk:

https://github.com/HuskyDG/MagiskHide

My post above has information that may help also...

🤠 PW
[Magisk] pndwal:
At what point do you have issues with that?... What happens? PW
[Magisk] gj4560:
When logging into Teams for work, after I log in to my work account, the Intune device check appears and fails as it detects my phone as rooted and thus does not let me use Teams. I'm assuming this is because of it detecting Zygisk as everything else should be hidden (other than bootloader unlock status but I doubt it checks for that).
[Magisk] gj4560:
Okay thanks for your reply, what is the difference if I wanted to use LSposed instead of Riru?
[Magisk] pndwal:
Riru currently is less detectable as uses native bridge loading and compatible Riruhide (inbuilt since v22). NB loading is a WIP for Zygisk ATM and should arrive with Magisk 27.0... Currently Alpha fork builds the experimental commits from LSP Devs so you can have the equivalent hiding for Zygisk by using Alpha Magisk+ Shamiko hiding which is already compatible with NB loaded Zygisk...

If this detection is the issue it should help...I also recall some time ago that users needed to select extra or all Intune processes in denylist; default selection wasn't enough... 🤠 PW
[Magisk] spida_singh:
you can either run zygisk based lsposed, or riru based lsposed, i dont use zygisk due to detection on my apps, so stick with riru
[Magisk] Jwtiyar:
Hey

Why i can't find magisk hide option on the app?
[Magisk] zgfg:
You have Unmount Modules, so use it
[Magisk] Jwtiyar:
installed debug version, but got to bootloop, any suggestion?
[Magisk] westruk:
Send logs to dev
[Magisk] Jwtiyar:
Got it, AOSPmod Version 3.0.0 was the probelm.
[Magisk] gj4560:
Thanks, is Riru still compatible with the latest Magisk? Looking at the GitHub page, it says that it is deprecated in favour of Zygisk?
[Magisk] zgfg:
If using Riru, you most not use Zygisk (and you don't need Shamiko)

Take 15 minutes or so and read back the posts in this thread. You will find Delta users who use Riru instead of Zygisk and then what Riru modules they use in lieu of Zygisk modules (Riru USNF and Riru-LSPosed)

They end-up with less detectable 'root'
[Magisk] pndwal:
Yes and yes...

Riru has inbuilt Riruhide which works with Riru injection's native bridge loading and anonymous memory...

Native bridge loading is a WIP for Zygisk in official Magisk by Magisk collaborators... It is being developed in LSPosed GitHub Metagisk/Zygisk branch... The commits are also currently built in Alpha Magisk fork releases and Shamiko hiding (from the same development team) has already added NBZ hiding support...

Evidently NB loaded Zygisk is already as hidable as Riru; TJW Zygisk is detected by many more banks than Alpha Magisk Zygisk... Some banks (eg Starling) still detect both Riru and NB loaded Zygisk...

The Devs were aiming at having NBZ ready for mainstream Magisk for a 27.0 release. They have been working on it since March... They may still be aiming to have this merged for public 27.0; there has been no recent word on this however.

👀 PW
[Magisk] Nekromantik:
The github merge request have had no updates in 2 months so think they got more work to do
[Magisk] pndwal:
Yup, "This branch has conflicts that must be resolved"... Meant no further word on 27.0 target, but that may just be pushed back till it's done. PW
[Magisk] Kendrenogen:
I am not sure if you tried this, but Shamiko can be detected, which the app blind detects libshamiko.so.
[Magisk] zgfg:
Just installed, and I had no problem/no reported detection, no warning, no force-closing, no whatever

I did not proceed to register (and specially not with my work mail)

See the screenshots

Latest Magisk Canary with Zygisk and Shamiko.

Hints (there are tons of similar/related posts how to hide 'root" from an XYZ app): DenyList and HMA
[Magisk] Kendrenogen:
I just switched from Magisk Delta to the latest Magisk Alpha build, and installed Shamiko. libshamiko.so is still detected.

This was on launch.

EDIT: The error goes away when using official Magisk Canary
[Magisk] zgfg:
I don't use/mind for Magisk Alpha

See my previous post, I tested with straight Magisk Canary and I had no problems (and no popup detection as you have)

I don't see that you commented/confirmed anything about your use of HMA and DenyList for hiding (for Delta, it would be Unmount Modules)

Hiding does not end by installing Shamiko and Play Integrity Fix (btw, check do you pass Basic and Device Integrity)

---

Note:

Since you are/were using Delta, you can fully live without Zygisk and Shamiko. Please look into the older posts in this thread (I don't know does it also apply to Alpha).

That way you can get rid of troubles with Shamiko

However, as I answered above, I do have Zygisk enabled and Shamiko installed and your Blind app did not complain me anything (specially not for Shamiko as on your screenshot)

Sorry, cannot help you further - I tested, it was all ok for me and I uninstalled the Blind app since I'm not interested to use it
[Magisk] westruk:
Yeah, they're using LIAPP protector
[Magisk] andr_SMOLKEYS:
So I tried this on my Galaxy Tab 4 running LOS 18.1.

Didn't work, it just bricked itself until I reflashed the original Magisk.

Is it just incompatible with VERY old devices?
[Magisk] Nekromantik:
If you run core only mode but choose to unload modules for certain applications then can you still have modules enabled for everything else?
[Magisk] zgfg:
Core only mode disables ALL modules and GENERALLY

If you're not sure how certain settings do, please experiment yourself, it will not cause a nuclear explosion
[Magisk] fjunk:
Hello, i know that tons of 'my apps' is not working because my phone is rooted exist, but I have a question...

I am running v26.1 magisk delta. I also installed safetynet module. I have hidden the application magisk applied (renamed), tried combinations of hide and other options.. but I am stuck.

I have two banking applications. One is working but the other (credit agricole) not because my phone is detected as rooted.

I tried root beer sample. It fails on magisk specif checks. Any idea?
[Magisk] westruk:
What combinations and options you tried?
[Magisk] zgfg:
In the official Magisk you have to use. DenyList, here you have to use Unmount modules- do you?

How about Zygisk and Shamiko?

Hidden My Applist?

Please if not familiar with scroll back and read in the other posts
[Magisk] abobobilly:
@zgfg ! First off, thank you so much to you and all other devs for being such legends. This is God's work 🤭 Really appreciate everyone's contribution.

I have gone through pretty much all the posts but i am a little confused about a few things. Would be super amazing if you or anyone else can clarify these for me.

Phone: OnePlus 7T Pro

Build: HD1913, Android 12, Oxygen OS HD1913_11.F.22_3220_202303231820.

Google Play Services Version: 23.32.55 (190400-558954284)

Magisk Delta 26.1 Stable (26100-delta)

, with Below Settings:

Zygisk: Disabled

Bootloop Protection: Enabled

Magisk Hide: Active,

Enforce SuList: Active.

Modules:

Systemless Hosts: Active

Universal SafetyNet Fix: Inactive (becaues Zygisk is Disabled)

*SuList updated to include all apps requiring Root.

*YASNAC Basic Integrity: Pass

*YASNAC CTS Profile Match: Fail

*YASNAC Evaluation Type: Hardware Backed

Good Thing:

My earlier banking app "ENBDX" is now working. (Link: https://play.google.com/store/apps/details?id=com.emiratesnbd.android&hl=en&gl=US )

This app was detecting root earlier using Magisk Official v26.1 with Zygisk and Magisk Hide

Not So Good Thing:

SafetyNet Triggered.

Cannot use Google Wallet. 'Device Doesn't Meet Security Requirements'.

*Haven't checked for other issues yet.

I have checked the possibility to use Riru (after reading here: https://www.xda-developers.com/riru/#how-to-download-and-install-riru ) but it seems their GitHub page is archived.

Maybe my brain isn't functioning at full capacity but would be super amazing to add a few opinions or words to help me out there. 🤭

Cheers
[Magisk] zgfg:
Although archived (bcs not compatible with Zygisk and since development has stopped), you can still use

Then, Displax has Riru version to pass Play Integrity (Basic and Device), hence also SN/CTS (Basic, not Hardware) - deprecated, and there is also Riru version for LSPosed (you can use then eg HMA)

AFAIK, @m0han runs that kind of Delta configuration. I use Delta but with Zygisk, Shamiko and Play Integrity Fix module (requires Zygisk)

Btw, in the latest Delta (Canary, from TG), you have Unmount Modules (no more MagiskHide/SuList, but you can use the same way)
[Magisk] fjunk:
Hello, many thanks. I installed shamiko but the appli list selection was no more available (0r/and because I also updated to the latest magsik delta version).

I finally installed magsik and running shamiko module enables me to run my bank apps.

Thabks
[Magisk] Nekromantik:
Is Riru only on Alpha Magisk?
[Magisk] m0han:
AFAIK, Magisk Delta
[Magisk] Nekromantik:
does not look like delta has riru enabled so would need to install it via module
[Magisk] zgfg:
If you use Delta without Zygisk (you can, UnmountModules/MagiskHide does not require Zygisk) then you can use Delta with Riru

Pls, search for and read posts from other users in this thread who use(d) Delta with Riru
[Magisk] esclusoilcane:
Mmm I don't know if it fits here, but on mi 11 lite I'm using cygisk magisk fork (it's still at ver25), with universal safety net Fix and hide list configured and everything from wallet ,to bank apps, to lsposed zygisk, working. Yasnac tests passed

Anyway installing latest magisk delta canary from cygisk as a module.zip everything works as well
[Magisk] sampathkumar2811:
For some reason, the rename is not working. After I click magisk hide nothing happens. Though I have enabled allow install.
[Magisk] spicediablo:
Hi,

One of my banking app is detecting root after the latest update. I have other banking apps that is working well. I am using the latest magisk delta 26105(Canary) and have HMA and usnf as shown below. What else can I do to make this banking app work? Attached below is the detection result from HMA as well as currently installed modules.

I've also tried disabling developer options without success.

Thanks for your help!

Update: fixed by using usnf mod 2 + shamiko
[Magisk] westruk:
What app?
[Magisk] m0han:
Magisk Delta has been updated to Magisk v26.3.

They say the known bug from previous build should be fixed

https://github.com/HuskyDG/magisk-files/releases/tag/24b5daf6-delta

Things seem fine for me on my earlier device. Riru mode; not Zygisk. (All testing apps behave as before.)
[Magisk] kevinco1:
First thing to do is update USNF mod, that version is outdated and lots has changed in the meantime.

Edit - see you've fixed the issue
[Magisk] spicediablo:
Hong Leong bank
[Magisk] creezalird:
mine stopped working too a version before the latest delta, just updated yesterday and HLB works back
[Magisk] spicediablo:
Do you have shamiko installed?
[Magisk] creezalird:
nope, just play integrity fix.
[Magisk] spicediablo:
Can you share me the link for play integrity fix? I am currently using usnf mod 2 and it seems to work for some and not for others (shamiko needed for those to work)
[Magisk] zgfg:
The easiest way
[Magisk] spicediablo:
Doesn't work. I used play integrity instead of usnf mod 2 and still Hong Leong app detects root. Can you share your complete configurations?
[Magisk] zgfg:
I don't know/use your banking app, and don't know what additional hiding steps it may require (Shamiko, HMA, etc, maybe Riru instead of Zygisk but then with Magisk Alpha or Delta and then also with Riru version of USNF and so)

The USBF and Play Integrity Fix modules are to pass Play Integrity, Basic and Device (you cannot pass Strong with unlocked Bootloader)

That's just one/first thing the 'banking' apps look for. Then they look for other footprints of 'root', by their various methods
[Magisk] spicediablo:
Sorry, the question should be directed @creezalird
[Magisk] tenghc:
Hi, do your Touch N Go app return a black screen with the newest magisk delta update?
[Magisk] creezalird:
besides Play Integrity Fix, I am configuring mine as below and only put application requires root in the list
[Magisk] creezalird:
So far mine is working fine. it loads with no issue

Earlier topup the wallet, topup tngo card with NFC. Still ok. Last night received an update to tngo wallet app.
[Magisk] spicediablo:
Do you use uob app? I currently have my zygisk turned off + play integrity fix +disable unmount modules by default. Added banking apps in the unmount list. All banking apps +tng works except for uob...
[Magisk] creezalird:
I don't have the need to use UOB. But I tried just now, it is not working on my device too. So far all other banking M2U, HLB, PBe, Cimb are ok
[Magisk] tenghc:
Can you show me your modules? Mine is like this. But my Touch N Go gone black screen.. can't access.
[Magisk] creezalird:
These are from mine
[Magisk] spicediablo:
Wow, didn't know there is a workaround for Google photo unlimited backup. Thanks for sharing!
[Magisk] spicediablo:
After enabling zygisk, my tng just stuck on welcome screen... Even though I have play integrity +shamiko+hma and hidden tng. I think tng is detecting zygisk because I was able to use tng as soon as I disable zygisk.

Update:just need to wait longer(up to minutes sometimes) , tng works with shamiko+hma+play integrity
[Magisk] Stillhard:
Disable shamiko, that's the cause of your problem
[Magisk] spicediablo:
It works now even with shamiko. Just need to wait longer.... If I disable shamiko, some banking apps won't work. So, I am trying to find a configuration where both my banking apps and tng works.
[Magisk] Stillhard:
Ah, ok then, my point was that that app is likely not detect Zygisk robustly
[Magisk] spicediablo:
Do you know why shamiko doesn't work with tng? I thought shamiko should be hiding root better?
[Magisk] Stillhard:
The thing is, Shamiko 'leaked' Zygisk

Try to test it with momo, momo detects Zygisk while Shamiko being active

TnG app acts the same
[Magisk] spicediablo:
But, some banking app requires shamiko in order for them to work. They are using different root detection methods?
[Magisk] zgfg:
Ofc

Different banks, different developers, different detections, different methods to hide

Even for the same bank/app, you have to expect that they will improve detection with some of the app updates and that you will need to reconsider how to hide

Unified method: Reflash stock firmware, relock bootloader
[Magisk] CharlieMHz:
Hey, just wanna ask about your setup now, cuz I'm following your setup but using Alpha Magisk 26301. HLB needs Shamiko, while TnG seems to detect Zygisk, similar to what you've experienced. I've waited on the TnG splash screen for a minute still doesn't work.

Zygisk ON

Apps added to DenyList

Enforce DenyList OFF

Shamiko 0.7.3

Play Integrity Fix 8.4

HMA with blacklist template applied on TnG

If everything is the same, then I might have only one last option which is to switch to Delta.
[Magisk] docluv01:
Hmm, I decided to update today, (on august build). On boot up, keyboard won't work. flashed the normal magisk and came up fine. Any suggestions?
[Magisk] kevinco1:
Any setup that you're duplicating from another user is a waste of time if you aren't even using the same fork of Magisk

Make Delta your first option, not last
[Magisk] CharlieMHz:
Just tried with Delta, still same situation, there must be something else I'm still missing or setting wrong.
[Magisk] CharlieMHz:
@spicediablo just an update as to what I'm running now:

Delta Magisk 26301 (0fe46c5a-delta)

Hidden Magisk app

Zygisk ON

Unmount modules ON

Unmount modules by default OFF

TnG added to Unmount modules list

Modules:

USNF 2.0

Shamiko 0.7.3

All other apps work fine, only TnG stuck at splash screen. Waited for over a minute there, still no luck.
[Magisk] kevinco1:
Not necessarily, some apps just have good protection and only a locked bootloader will allow access to it

Best advice is to avoid any updates to problematic apps like this. It might have worked in the past but any of the newest updates could have fixed any holes and added additional protection. And that's the sort of thing that won't show up in any of the changelogs

One other thing you can try is disabling Zygisk when you want to use the app. That's always a major issue for most users who are having trouble hiding an app
[Magisk] CharlieMHz:
Yeap, they are using the same apps as I am, which is why I think there's higher chance of success following their config.

Unfortunately, some apps, especially bank ones, force you to update after some time.

Yes, for now I'm able to disable Zygisk to get the app working, but all my Magisk modules stop working, and it requires a phone reboot which can get cumbersome if I'm switching often. They mentioned that they were able to get the app working with Shamiko, meaning Zygisk is also enabled, so if I'm able to get that working that'll be perfect.
[Magisk] kevinco1:
Yeah, I rely on Zygisk like so many other people here do. Luckily, the apps I use aren't as strict with detection but I understand the annoyance of having to reboot your device to make it work

If you've been able to confirm with other users that they've been able to hide the app with Zygist turned on double check that their setup is 100% the same. Maybe they could be using a different version of Shamiko which alone could be a deciding factor

Also...don't use Momo, but you can always install Memory Detector app to view what your system is able to see in regards to root to give you more insight
[Magisk] CharlieMHz:
Nice, thanks for the info, I'll give Memory Detector a shot!
[Magisk] spicediablo:
Yes, i have the same setup but for tng to work, you need to disable shamiko and restart. Expect to wait sometimes even >1 min.
[Magisk] CharlieMHz:
So you were not able to get TnG to work with Shamiko? That's what I understood from your post here:
[Magisk] spicediablo:
Yes, with shamiko disabled, tng works even with zygisk enabled but you will need to wait for minutes at times....
[Magisk] CharlieMHz:
Do other apps work in that condition? HLB for example requires Shamiko right? So you'll switch Shamiko on/off and reboot for different apps?