Xposed without breaking SafetyNet - Asus ZenFone Max Pro M1 Guides, News, & Discussio

Now, the standard disclaimer is that Xposed breaks SafetyNet which is true in all cases that I have seen. However, I still needed xposed for various reasons, primarily privacy purposes.
After searching for months finally got to try out Tai Chi Magisk module. It also requires the Tai Chi app and supports various xposed modules. I use XPrivacyLua.
Out of respect for the developer, I am not providing any direct links but rather urge you to search in repo and read the FAQs for better understanding. Thanks !

Tianhe said:
Now, the standard disclaimer is that Xposed breaks SafetyNet which is true in all cases that I have seen. However, I still needed xposed for various reasons, primarily privacy purposes.
After searching for months finally got to try out Tai Chi Magisk module. It also requires the Tai Chi app and supports various xposed modules. I use XPrivacyLua.
Out of respect for the developer, I am not providing any direct links but rather urge you to search in repo and read the FAQs for better understanding. Thanks !
Click to expand...
Click to collapse
Thank you for the suggestion! i also need to use xposed. can you tell me the installation process elaborately?

Related

[UNOFFICIAL] next version Magisk and MagiskManager snapshots

MOD EDIT: PLEASE MIGRATE TO THE OFFICIAL CANARY BUILDS
THIS THREAD IS ABOUT UNOFFICIAL COMMUNITY BUILDS. OFFICIAL BETAS THREAD IS HERE: https://forum.xda-developers.com/apps/magisk/beta-magisk-v13-0-0980cb6-t3618589.
This thread is dedicated to the community-built next versions of Magisk and MagiskManager using latest source files posted by @topjohnwu. If you want to contribute in any way -- create a PR/issue on github.
These might be very unstable builds, especially in the early stages of development. You're highly advised to read the rest of this post and at least a few last pages of the discussion.
Downloads are here: https://github.com/TheComputerGuy96/MagiskFiles. Keep reading if this is your first visit to this thread or for the updates at the bottom of this post.
Current builds are courtesy of @kantjer. This project wouldn't have happened without @Deic's module to track the snapshot updates (which may be hindered by recent @topjohnwu changes in versioning) and his contributions to the build script, as well as major contributions in supporting fellow community members by @Captain_Throwback, @Didgeridoohan and @DodoGTA.
Installation:
Magisk: flash magisk snapshot from recovery, it should install over any previous version just fine.
Magisk Manager: The snapshot APK is signed with a different key than the release APK so you can't install snapshot magisk manager over magisk manager from Play Store. You will need to uninstall existing Magisk Manager and install the snapshot APK afterwards.
Commits Logs:
Magisk (master branch)
Magisk Manager (master branch)
IF SOMETHING DOESN'T WORK AND/OR CRASHING:
No support of any kind is implied, however it's a community forum so some users (including local experts) might be willing to help your and/or your report might be helpful to @topjohnwu, but please make sure to follow the below:
Magisk Manager crashing? Problem with Magisk module? Post installed versions of magisk, magisk manager, versions of all installed modules and the magisk log + logcat.
Downloads: https://github.com/TheComputerGuy96/MagiskFiles
Source code: https://github.com/TheComputerGuy96/Magisk (branch travisci-dev)
Travis-CI link: https://travis-ci.org/TheComputerGuy96/Magisk
That's nice of you. What is the change log?
Cool! I'm gonna give this a try and see if some of my issues are resolved.
Filip013 said:
That's nice of you. What is the change log?
Click to expand...
Click to collapse
We can check the commits log for now: https://github.com/topjohnwu/Magisk/commits/master and https://github.com/topjohnwu/MagiskManager/commits/master.
@topjohnwu, what's the reasoning for disabling MagiskHide when SuperSu is installed?
gamer765 said:
@topjohnwu, what's the reasoning for disabling MagiskHide when SuperSu is installed?
Click to expand...
Click to collapse
Because Magisk Hide don't work with SuperSU? Maybe...
Viper4android is working well S7 nougat
Verstuurd vanaf mijn SM-G930F met Tapatalk
Didgeridoohan said:
Because Magisk Hide don't work with SuperSU? Maybe...
Click to expand...
Click to collapse
I have MagiskHide working perfectly with SuperSu 2.79 on Nougat. I can use PoGo and AP. The latest Github commit breaks it.
gamer765 said:
I have MagiskHide working perfectly with SuperSu 2.79 on Nougat. I can use PoGo and AP. The latest Github commit breaks it.
Click to expand...
Click to collapse
Ok, cool... Did not know that was possible. Since topjohnwu himself have stated that Magisk Hide can NOT hide SuperSU, I assume he has a good reason to do what he does.
Think about saying stupid things, you should have respect for the guy. Just turn on magisk hide, do not tick supersu in gui
Verstuurd vanaf mijn SM-G930F met Tapatalk
afcaajax said:
Think about saying stupid things, you should have respect for the guy. Just turn on magisk hide, do not tick supersu in gui
Verstuurd vanaf mijn SM-G930F met Tapatalk
Click to expand...
Click to collapse
Not sure if you're directing that at me, but no one here is saying stupid things, except maybe you. Plus, I'm a dev/hacker myself so it doesn't really bother me, since I can always fix it myself.
gamer765 said:
I have MagiskHide working perfectly with SuperSu 2.79 on Nougat. I can use PoGo and AP. The latest Github commit breaks it.
Click to expand...
Click to collapse
If you haven't yet, please consider creating an issue for that on github and let @topjohnwu know.
AFAIK you can checkout the code one commit before the problematic one and build your own v10.
PS. Please don't feed the trolls.
gamer765 said:
I have MagiskHide working perfectly with SuperSu 2.79 on Nougat. I can use PoGo and AP. The latest Github commit breaks it.
Click to expand...
Click to collapse
That's unexpected, it never worked previously, I just added the detection I should have done in ages.
I'll try it myself when I got time, once confirmed working I'll revert this change
gamer765 said:
I have MagiskHide working perfectly with SuperSu 2.79 on Nougat. I can use PoGo and AP. The latest Github commit breaks it.
Click to expand...
Click to collapse
I'm not sure how you're accomplishing this, but it shouldn't be possible, unless you're also using some other hiding method (suhide, RootSwitch). Magisk Hide cannot hide SuperSU. I just installed it and tried it to confirm, since your post piqued my curiosity, but not surprisingly, SafetyNet came up all red, and my AirWatch app shows compromised.
Can you explain in detail what your setup is and confirm you're ONLY using SuperSU and Magisk Hide, and pass with green for SafetyNet?
Ah, well I am using suhide and rootswitch as well and everything works perfectly fine for me.
I've attached screenshots of SafetyNet passing for me. By all means, it's your project, you may do whatever you wish with it, I'll just fork it and make my own private builds where SuperSU does not disable MagiskHide..
gamer765 said:
Ah, well I am using suhide and rootswitch as well and everything works perfectly fine for me.
I've attached screenshots of SafetyNet passing for me. By all means, it's your project, you may do whatever you wish with it, I'll just fork it and make my own private builds where SuperSU does not disable MagiskHide..
Click to expand...
Click to collapse
Let me take a moment and just lay my palm against my forehead...
I'm gonna go out on a limb and guess what you're really using Magisk Hide for is hiding your unlocked bootloader with resetprop. There are other ways of doing that, you don't need Magisk Hide.
No, I do not. I use it for other stuff as well. All my mods are systemless. I'm on completely stock system with a custom kernel that does not pass bootloader unlock flags. I'm not a dumb person, but I see I'm being treated that way. I do things the way I do them for a reason. I will no longer partake in this conversation, I have better things to do. Maybe it's better to just stick to stock because ignorance is bliss. I need a break anyways from my work. Bye and thank you.
gamer765 said:
No, I do not. I use it for other stuff as well. All my mods are systemless. I'm on completely stock system with a custom kernel that does not pass bootloader unlock flags. I'm not a dumb person, but I see I'm being treated that way. I do things the way I do them for a reason. I will no longer partake in this conversation, I have better things to do. Maybe it's better to just stick to stock because ignorance is bliss. I need a break anyways from my work. Bye and thank you.
Click to expand...
Click to collapse
Well if you want to use SuperSU with Magisk Hide, just manually revert the change that disallowed it. That takes 10 seconds to do.
Captain_Throwback said:
Well if you want to use SuperSU with Magisk Hide, just manually revert the change that disallowed it. That takes 10 seconds to do.
Click to expand...
Click to collapse
His question still stands, if MagiskHide does work with SuperSu installed and there're viable use cases for that, why disable it?
stangri said:
His question still stands, if MagiskHide does work with SuperSu installed and there're viable use cases for that, why disable it?
Click to expand...
Click to collapse
I don't think @topjohnwu was considering those extended use cases when he disabled it. Maybe now that he knows, he'll revert that change. I think he was thinking that Magisk Hide can't directly hide it so it would always be detected. With several other tools, it's apparently possible to hide it, which is good to know. Personally, I'll just be sticking with the open-source solution anyway, so it doesn't really affect me.
EDIT: Besides the fact that there are many people who will enable it, not knowing that Magisk Hide can't hide SuperSU. I think the change was in an effort to prevent those types of questions.

Xposed for pie?

Is Xposed for pie in the works?
Is development continuing?
Yes, already out check it out
TENN3R said:
Yes, already out check it out
Click to expand...
Click to collapse
Sort of misleading if he was thinking of official Xposed for Pie, which doesn't exist. But since he didn't specify...
Yeah, EdXposed seems to be working well for folks it seems.
Essential PH-1, /e/ 0.5-n ROM, microG (NoGapps), XDA Legacy
marcdw said:
Sort of misleading if he was thinking of official Xposed for Pie, which doesn't exist. But since he didn't specify...
Yeah, EdXposed seems to be working well for folks it seems.
Essential PH-1, /e/ 0.5-n ROM, microG (NoGapps), XDA Legacy
Click to expand...
Click to collapse
Yes, I meant official Xposed for pie. Thanks.
marcdw said:
Sort of misleading if he was thinking of official Xposed for Pie, which doesn't exist. But since he didn't specify...
Yeah, EdXposed seems to be working well for folks it seems.
Essential PH-1, /e/ 0.5-n ROM, microG (NoGapps), XDA Legacy
Click to expand...
Click to collapse
I have seen more people talk about "official Xposed" and each time I am wondering what is official about just a hobby project (told so by rovo89 himself) and what is less official about EdXposed.
EdXposed is actively developed, Xposed is not. EdXposed is open source, "recent" versions of Xposed are not. EdXposed works on Android Pie and Q, Xposed does not. EdXposed passes Safetynet, Xposed does not. If I take this as a measure, EdXposed is by far superior over Xposed and qualifies therefore more as "official" (not that I want to call it official, that is not the point).
Some people say that EdXposed is a fork or clone of Xposed, which is incorrect because EdXposed is an original, new work. EdXposed also works differently compared to Xposed.
So, if you had respect for Xposed (you should have had!), you should have respect for EdXposed too and not call it directly or indirectly "unofficial".
Just my 2 cents.
Note that this is a general remark, so not really a reply to the replied comment (this sounds awkward, but I hope it is clear want I mean).
Thanks Marcel for the clear explanation. It is very helpful to me. As the person who asked the question I just used the same term as the previous person, understanding what he meant by it.
I have used Xposed for a long time along with several of its modules (gravitybox, Xprivacylua, etc.) and it became comfortable to me. If unavailable for pie I have no problem using Edxposed when I finally root my new phone. It's a Moto G7, brand new, and I'm waiting for the rooting and unrooting procedures to become more certain, and twrp and lineageos to become available. Until then Im forced to use an unrooted phone with much less control than I'm used to.
Without Titanium Backup I can't even back up my app data! Avoiding Google where I can.
Thanks again Marcel.

[24.1] Magisk from User perspective - Safety check not working ??

Hi folks,
I got the new update 24.1 of my good old Magisk on top of my Lineage OS on payton device.
But I guess the safetynet check is gone and/or no more working since last update as of the banking app and also the game i.n.g.r.e.s.s is no more working..
What do I have to do in order to get back a positive safetynet check?
I have no much experiencies behind the scenes but all you are made a great job in your laisure time but please give me a chance to understand how and what must I configure to get working Magisk (MagiskHide and SafetyNet Check passed). Maybe there is a additional module that makes the SafetyNet check being passed.
Thank you
Tom
Tom_Scott said:
Hi folks,
I got the new update 24.1 of my good old Magisk on top of my Lineage OS on payton device.
But I guess the safetynet check is gone and/or no more working since last update as of the banking app and also the game i.n.g.r.e.s.s is no more working..
What do I have to do in order to get back a positive safetynet check?
I have no much experiencies behind the scenes but all you are made a great job in your laisure time but please give me a chance to understand how and what must I configure to get working Magisk (MagiskHide and SafetyNet Check passed). Maybe there is a additional module that makes the SafetyNet check being passed.
Thank you
Tom
Click to expand...
Click to collapse
Please consult this thread, especially first few posts:
[Discussion] Magisk - The Age of Zygisk.
This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...
forum.xda-developers.com
Lord Sithek said:
Please consult this thread, especially first few posts:
Click to expand...
Click to collapse
Thank you for the answer, but I dont understand the thing being written in the discussion thread. Can you give a hint what do I have to do in order to solve the problem?
Thanks
Tom
Tom_Scott said:
Thank you for the answer, but I dont understand the thing being written in the discussion thread. Can you give a hint what do I have to do in order to solve the problem?
Thanks
Tom
Click to expand...
Click to collapse
Well... In short:
MagiskHide is gone now, replaced by Zygisk & DenyList. DenyList doesn't do any hide itself, but it can be used by additional modules to do it. SafetyNet check is also removed, but you can replace it by installing a checker from Play Store. Recommended one is YASNAC, search and install.
If you don't pass SafetyNet, first enable Zygisk & Enfoce DenyList, then go to Configure DenyList, tap on three dots in right upper corner and enable system apps. Then search for Google Play Services, expand the list of processes and mark com.google.android.gms and com.google.android.gms.unstable. [Additionally mark every app that search for root access]. Clear the data of Google Play Services and Google Play Store and check in YASNAC if you pass SafetyNet now. If not, download this module and flash in Magisk:
Releases · kdrag0n/safetynet-fix
Google SafetyNet attestation workarounds for Magisk - kdrag0n/safetynet-fix
github.com
Then reboot and check SafetyNet again.
Usually this should be enough to pass SafetyNet, but if not, let me know, we can try another things. If you use official LineageOS, probably you will have to spoof the device's fingerprint, but... one thing at a time
As for bank apps (and some games too), it depends how much enforcements they use. If they rely only on SafetyNet, passing it will be sufficient to run them. But many bank apps use addtional measures to prevent running on rooted devices nowadays. But there are other workarounds which we can try if just passing SafetyNet isn't enough.
Thank you very much. Your guide enables passing the Safety Net check so I can use my special apps again.
In order to understand the new working principle: Please, can you explain what the DenyList denies? And do you know why the CTS check is gone?
Thank you very much
Tom
Tom_Scott said:
Thank you very much. Your guide enables passing the Safety Net check so I can use my special apps again.
In order to understand the new working principle: Please, can you explain what the DenyList denies? And do you know why the CTS check is gone?
Thank you very much
Tom
Click to expand...
Click to collapse
I think you should get familiar with the Topjohnwu statement on Magisk: https://topjohnwu.medium.com/state-of-magisk-2021-fe29fdaee458
Those changes were obviously well-thought and although they may look like a step back, they will allow to achieve much progress in time

"Hide the Magisk app" feature does not work.

Lately I upgraded to Magisk 24.1 from 23 and lost the usual stealth features then reverted back to 23 again. Everything works fine except for hiding the app. Now some apps detect root and don't work. When I use the feature an extra icon for Magisk named "Settings" is created that does not open the app. The original icon is not removed and opens the app like usual. If I leave it like that, I eventually lose root, then I have to uninstall the Settings app for Magisk to work again. I tried to uninstall and reinstall Magisk many times but still experience the same behavior. Something is clearly broken but I don't know how to fix it. Anyone faced the same problem or has any idea what to try?
if the feature doesn't work please try to contact me later thank you!
koryonp10 said:
if the feature doesn't work please try to contact me later thank you!
Click to expand...
Click to collapse
It does not work. I've been fighting with it for a couple days now.
ok so you need to try to restart your phone and if that doesn't work please try to email me at [email protected] i know a lot more than people think
also send me a video
The solution to your issue has been posted here: https://forum.xda-developers.com/t/rename-hide-magisk-not-working-for-v23.4396841/
Why do you want to downgrade though? v24.1 has denylist which works similar to magisk hide. All you need to do is install Universal Safetynet Fix (Magisk modules) and everything should work.
simplydat said:
The solution to your issue has been posted here: https://forum.xda-developers.com/t/rename-hide-magisk-not-working-for-v23.4396841/
Why do you want to downgrade though? v24.1 has denylist which works similar to magisk hide. All you need to do is install Universal Safetynet Fix (Magisk modules) and everything should work.
Click to expand...
Click to collapse
Worked a treat, thank you very much! Basically I downgraded because everything worked fine with the old version of Magisk and I didn't bother to search for a different solution. Is that the best module to pass Safetynet? I think I saw there's a few solutions available.
ser848 said:
Worked a treat, thank you very much! Basically I downgraded because everything worked fine with the old version of Magisk and I didn't bother to search for a different solution. Is that the best module to pass Safetynet? I think I saw there's a few solutions available.
Click to expand...
Click to collapse
Magisk 23 + Magisk Hide was detected by many bank apps I have and I was tired of dealing with it, so I decided to upgrade.
Magisk 24 + Universal Safetynet Fix + Shamiko worked like a charm and everything has been hidden and I have a feeling I won't have to deal with root hiding for a long time.
simplydat said:
Magisk 23 + Magisk Hide was detected by many bank apps I have and I was tired of dealing with it, so I decided to upgrade.
Magisk 24 + Universal Safetynet Fix + Shamiko worked like a charm and everything has been hidden and I have a feeling I won't have to deal with root hiding for a long time.
Click to expand...
Click to collapse
Thanks a lot again, I will give it a try.
koryonp10 said:
if the feature doesn't work please try to contact me later thank you!
Click to expand...
Click to collapse
koryonp10 said:
ok so you need to try to restart your phone and if that doesn't work please try to email me at [email protected] i know a lot more than people think
also send me a video
Click to expand...
Click to collapse
Hello and a very warm welcome to XDA, @koryonp10. I hope you'll always get the assistance you require, and much more we appreciate your intentions to provide your knowledge and expertise to other members. Thanks very much for that!
Please allow me to share with you the principle of this website:
XDA Developers was founded on the simple principle that SHARING IS GOOD and when many people SHARE what they know, EVERYONE benefits. We exist upon this ethos. We RESPECT each other, we SHARE with each other, we do not judge one another, and we HELP all who ask.
Click to expand...
Click to collapse
In order to live this spirit, I suggest to consider to publicly share your knowledge in the threads and not to drag the XDA members to your email, private messages or outside of XDA. Only from what you publicly posts, all can learn and are able to ask corresponding questions. Thanks very much for your cooperation!
Regards
Oswald Boelcke
Senior Moderator
I have Magisk 24 + Universal Safetynet Fix + Shamiko installed on Android 11. It warns me that Shamiko not active as "denylist is enforced'. Regardless, I still get a warning message when I start my HSBC banking app.
simplydat said:
Magisk 24 + Universal Safetynet Fix + Shamiko worked like a charm and everything has been hidden and I have a feeling I won't have to deal with root hiding for a long time.
Click to expand...
Click to collapse
Hi, have read the changelog from magisk 24 that hide not included.
Saftynet Fix i think i have read this in past, i hope i find it. I have find this thread, but how get Shamiko?? And is Zygisk also needed?
At Moment i have HTC U11 with magisk 23 + riru lsexposed, because i need xprivacy.
richardmace said:
I have Magisk 24 + Universal Safetynet Fix + Shamiko installed on Android 11. It warns me that Shamiko not active as "denylist is enforced'. Regardless, I still get a warning message when I start my HSBC banking app.
Click to expand...
Click to collapse
Same issue here not on android 11 though.
richardmace said:
I have Magisk 24 + Universal Safetynet Fix + Shamiko installed on Android 11. It warns me that Shamiko not active as "denylist is enforced'. Regardless, I still get a warning message when I start my HSBC banking app.
Click to expand...
Click to collapse
Hi @richardmace have you fixed for HSBC Banking App? I had same issue
No, not fixed but not a major issue as app still works. I am now not enforcing the deny list and Shamiko is now active.
I am new to the subject but have similar issue. There is an medical application for diabetes in Google Play. It is called Freestyle Libre 3. "3" is important as there are "1" and "2" versions of this app. This app is used to monitor glucose with the help of external device that is placed on the body via bluetooth. The application has two "features" so far:
1) it is available only on a few smartphones (a few Apple's and a few Samsung's)
2) it is available only in few countries (GB, DE, NL, SE and just a few more)
All my bank apps work with zygisk but this medical app doesn't. I added this app and all google play services on deny list. YASNAC shows passed for basic integrity and cts profile. I tried Shamiko and Universal Safety Fix too. Hiding Magisk doesn't help. still no success. But once Magisk is uninstalled the app starts and works.
Could it be somehow an unusual case when application devs made up some one trick more than Magisk is assuming for apps that check for root? Is there any hope to have this app working on LineageOS with Magisk installed?
The working solution is to allow "USB Debugging" in "Developer options", and additionally by Xiaomi, turn off "MIUI Optimization".

Deny list

So, recently i just got into rooting stuff and all. I loved the things with rooting but there is one problem in magisk that I'm facing which that the deny list isn't working for my banking apps it used to but now it's not. Kindly help me fix it.
Retr0_680 said:
So, recently i just got into rooting stuff and all. I loved the things with rooting but there is one problem in magisk that I'm facing which that the deny list isn't working for my banking apps it used to but now it's not. Kindly help me fix it.
Click to expand...
Click to collapse
[Discussion] Magisk - The Age of Zygisk.
This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...
forum.xda-developers.com
MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0
Universal SafetyNet Fix Magisk module Magisk module to work around Google's SafetyNet attestation. This module works around hardware attestation and recent updates to SafetyNet CTS profile checks. You must already be able to pass basic CTS...
forum.xda-developers.com
[Discussion] Google Pay Magisk Discussion Thread
This thread is inspired by the PoGo Magisk discussion thread. It's meant to keep the clutter of "Google Pay doesn't work" posts out of the main Magisk threads. Please use this to discuss issues with Google Pay and possible solutions. There's a...
forum.xda-developers.com
[Discussion] Magisk Delta - Another unofficial third-party Magisk fork
This is not an officially supported topjohnwu project. If you are looking for official Magisk source, please go to this page Introduction Custom Magisk fork by HuskyDG. Sync with official Magisk adding back MagiskHide...
forum.xda-developers.com
You have to do your own work because things tends to differ depending on a device. Basically, official Magisk does not do any hide anymore. Deny List itself does not serve for hiding root. Hiding usually requires additional modules. Also a Magisk fork called Magisk Delta has some success in this field since it restores MagiskHide funcionality. But be aware - hiding root is more and more difficult because Google step by step enforces security measurments. Search through these threads I linked, especially a few last pages

Categories

Resources