Deny list - Magisk

So, recently i just got into rooting stuff and all. I loved the things with rooting but there is one problem in magisk that I'm facing which that the deny list isn't working for my banking apps it used to but now it's not. Kindly help me fix it.

Retr0_680 said:
So, recently i just got into rooting stuff and all. I loved the things with rooting but there is one problem in magisk that I'm facing which that the deny list isn't working for my banking apps it used to but now it's not. Kindly help me fix it.
Click to expand...
Click to collapse
[Discussion] Magisk - The Age of Zygisk.
This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...
forum.xda-developers.com
MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0
Universal SafetyNet Fix Magisk module Magisk module to work around Google's SafetyNet attestation. This module works around hardware attestation and recent updates to SafetyNet CTS profile checks. You must already be able to pass basic CTS...
forum.xda-developers.com
[Discussion] Google Pay Magisk Discussion Thread
This thread is inspired by the PoGo Magisk discussion thread. It's meant to keep the clutter of "Google Pay doesn't work" posts out of the main Magisk threads. Please use this to discuss issues with Google Pay and possible solutions. There's a...
forum.xda-developers.com
[Discussion] Magisk Delta - Another unofficial third-party Magisk fork
This is not an officially supported topjohnwu project. If you are looking for official Magisk source, please go to this page Introduction Custom Magisk fork by HuskyDG. Sync with official Magisk adding back MagiskHide...
forum.xda-developers.com
You have to do your own work because things tends to differ depending on a device. Basically, official Magisk does not do any hide anymore. Deny List itself does not serve for hiding root. Hiding usually requires additional modules. Also a Magisk fork called Magisk Delta has some success in this field since it restores MagiskHide funcionality. But be aware - hiding root is more and more difficult because Google step by step enforces security measurments. Search through these threads I linked, especially a few last pages

Related

No hide root option in new magisk?

There's no option in the updated magisk apk to hide root?
UnicornHub said:
There's no option in the updated magisk apk to hide root?
Click to expand...
Click to collapse
What version you are using? Go to Settings - Magisk Hide
There's been no new Magisk release recently...
There's the new beta, but that's not intended as a daily driver but for testing and aiding in the development until the next release.
If your using the beta, expect issues...
As I know you need pass safetynet first, then will appear
Thanks everyone I downloaded the older version.
chazarss said:
As I know you need pass safetynet first, then will appear
Click to expand...
Click to collapse
Magisk Hide aims to hide root for SafetyNet, so this doesn't make sense
I'm running OOS 3.5.4 on my Oneplus 3T with the latest Magisk but safetynet is not working. How can I fix it?
conephall said:
I'm running OOS 3.5.4 on my Oneplus 3T with the latest Magisk but safetynet is not working. How can I fix it?
Click to expand...
Click to collapse
Never write "the latest". Write the actual version. There might have been an update while you post...
At the moment it doesn't matter, because there seems to have been an update to SafetyNet (and the Magisk forums are a mess because of everyone posting "it doesn't work").
When asking for help, if you have a possibility to provide a log, so so (Magisk log in your case).

Xposed without breaking SafetyNet

Now, the standard disclaimer is that Xposed breaks SafetyNet which is true in all cases that I have seen. However, I still needed xposed for various reasons, primarily privacy purposes.
After searching for months finally got to try out Tai Chi Magisk module. It also requires the Tai Chi app and supports various xposed modules. I use XPrivacyLua.
Out of respect for the developer, I am not providing any direct links but rather urge you to search in repo and read the FAQs for better understanding. Thanks !
Tianhe said:
Now, the standard disclaimer is that Xposed breaks SafetyNet which is true in all cases that I have seen. However, I still needed xposed for various reasons, primarily privacy purposes.
After searching for months finally got to try out Tai Chi Magisk module. It also requires the Tai Chi app and supports various xposed modules. I use XPrivacyLua.
Out of respect for the developer, I am not providing any direct links but rather urge you to search in repo and read the FAQs for better understanding. Thanks !
Click to expand...
Click to collapse
Thank you for the suggestion! i also need to use xposed. can you tell me the installation process elaborately?

[24.1] Magisk from User perspective - Safety check not working ??

Hi folks,
I got the new update 24.1 of my good old Magisk on top of my Lineage OS on payton device.
But I guess the safetynet check is gone and/or no more working since last update as of the banking app and also the game i.n.g.r.e.s.s is no more working..
What do I have to do in order to get back a positive safetynet check?
I have no much experiencies behind the scenes but all you are made a great job in your laisure time but please give me a chance to understand how and what must I configure to get working Magisk (MagiskHide and SafetyNet Check passed). Maybe there is a additional module that makes the SafetyNet check being passed.
Thank you
Tom
Tom_Scott said:
Hi folks,
I got the new update 24.1 of my good old Magisk on top of my Lineage OS on payton device.
But I guess the safetynet check is gone and/or no more working since last update as of the banking app and also the game i.n.g.r.e.s.s is no more working..
What do I have to do in order to get back a positive safetynet check?
I have no much experiencies behind the scenes but all you are made a great job in your laisure time but please give me a chance to understand how and what must I configure to get working Magisk (MagiskHide and SafetyNet Check passed). Maybe there is a additional module that makes the SafetyNet check being passed.
Thank you
Tom
Click to expand...
Click to collapse
Please consult this thread, especially first few posts:
[Discussion] Magisk - The Age of Zygisk.
This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...
forum.xda-developers.com
Lord Sithek said:
Please consult this thread, especially first few posts:
Click to expand...
Click to collapse
Thank you for the answer, but I dont understand the thing being written in the discussion thread. Can you give a hint what do I have to do in order to solve the problem?
Thanks
Tom
Tom_Scott said:
Thank you for the answer, but I dont understand the thing being written in the discussion thread. Can you give a hint what do I have to do in order to solve the problem?
Thanks
Tom
Click to expand...
Click to collapse
Well... In short:
MagiskHide is gone now, replaced by Zygisk & DenyList. DenyList doesn't do any hide itself, but it can be used by additional modules to do it. SafetyNet check is also removed, but you can replace it by installing a checker from Play Store. Recommended one is YASNAC, search and install.
If you don't pass SafetyNet, first enable Zygisk & Enfoce DenyList, then go to Configure DenyList, tap on three dots in right upper corner and enable system apps. Then search for Google Play Services, expand the list of processes and mark com.google.android.gms and com.google.android.gms.unstable. [Additionally mark every app that search for root access]. Clear the data of Google Play Services and Google Play Store and check in YASNAC if you pass SafetyNet now. If not, download this module and flash in Magisk:
Releases · kdrag0n/safetynet-fix
Google SafetyNet attestation workarounds for Magisk - kdrag0n/safetynet-fix
github.com
Then reboot and check SafetyNet again.
Usually this should be enough to pass SafetyNet, but if not, let me know, we can try another things. If you use official LineageOS, probably you will have to spoof the device's fingerprint, but... one thing at a time
As for bank apps (and some games too), it depends how much enforcements they use. If they rely only on SafetyNet, passing it will be sufficient to run them. But many bank apps use addtional measures to prevent running on rooted devices nowadays. But there are other workarounds which we can try if just passing SafetyNet isn't enough.
Thank you very much. Your guide enables passing the Safety Net check so I can use my special apps again.
In order to understand the new working principle: Please, can you explain what the DenyList denies? And do you know why the CTS check is gone?
Thank you very much
Tom
Tom_Scott said:
Thank you very much. Your guide enables passing the Safety Net check so I can use my special apps again.
In order to understand the new working principle: Please, can you explain what the DenyList denies? And do you know why the CTS check is gone?
Thank you very much
Tom
Click to expand...
Click to collapse
I think you should get familiar with the Topjohnwu statement on Magisk: https://topjohnwu.medium.com/state-of-magisk-2021-fe29fdaee458
Those changes were obviously well-thought and although they may look like a step back, they will allow to achieve much progress in time

"Hide the Magisk app" feature does not work.

Lately I upgraded to Magisk 24.1 from 23 and lost the usual stealth features then reverted back to 23 again. Everything works fine except for hiding the app. Now some apps detect root and don't work. When I use the feature an extra icon for Magisk named "Settings" is created that does not open the app. The original icon is not removed and opens the app like usual. If I leave it like that, I eventually lose root, then I have to uninstall the Settings app for Magisk to work again. I tried to uninstall and reinstall Magisk many times but still experience the same behavior. Something is clearly broken but I don't know how to fix it. Anyone faced the same problem or has any idea what to try?
if the feature doesn't work please try to contact me later thank you!
koryonp10 said:
if the feature doesn't work please try to contact me later thank you!
Click to expand...
Click to collapse
It does not work. I've been fighting with it for a couple days now.
ok so you need to try to restart your phone and if that doesn't work please try to email me at [email protected] i know a lot more than people think
also send me a video
The solution to your issue has been posted here: https://forum.xda-developers.com/t/rename-hide-magisk-not-working-for-v23.4396841/
Why do you want to downgrade though? v24.1 has denylist which works similar to magisk hide. All you need to do is install Universal Safetynet Fix (Magisk modules) and everything should work.
simplydat said:
The solution to your issue has been posted here: https://forum.xda-developers.com/t/rename-hide-magisk-not-working-for-v23.4396841/
Why do you want to downgrade though? v24.1 has denylist which works similar to magisk hide. All you need to do is install Universal Safetynet Fix (Magisk modules) and everything should work.
Click to expand...
Click to collapse
Worked a treat, thank you very much! Basically I downgraded because everything worked fine with the old version of Magisk and I didn't bother to search for a different solution. Is that the best module to pass Safetynet? I think I saw there's a few solutions available.
ser848 said:
Worked a treat, thank you very much! Basically I downgraded because everything worked fine with the old version of Magisk and I didn't bother to search for a different solution. Is that the best module to pass Safetynet? I think I saw there's a few solutions available.
Click to expand...
Click to collapse
Magisk 23 + Magisk Hide was detected by many bank apps I have and I was tired of dealing with it, so I decided to upgrade.
Magisk 24 + Universal Safetynet Fix + Shamiko worked like a charm and everything has been hidden and I have a feeling I won't have to deal with root hiding for a long time.
simplydat said:
Magisk 23 + Magisk Hide was detected by many bank apps I have and I was tired of dealing with it, so I decided to upgrade.
Magisk 24 + Universal Safetynet Fix + Shamiko worked like a charm and everything has been hidden and I have a feeling I won't have to deal with root hiding for a long time.
Click to expand...
Click to collapse
Thanks a lot again, I will give it a try.
koryonp10 said:
if the feature doesn't work please try to contact me later thank you!
Click to expand...
Click to collapse
koryonp10 said:
ok so you need to try to restart your phone and if that doesn't work please try to email me at [email protected] i know a lot more than people think
also send me a video
Click to expand...
Click to collapse
Hello and a very warm welcome to XDA, @koryonp10. I hope you'll always get the assistance you require, and much more we appreciate your intentions to provide your knowledge and expertise to other members. Thanks very much for that!
Please allow me to share with you the principle of this website:
XDA Developers was founded on the simple principle that SHARING IS GOOD and when many people SHARE what they know, EVERYONE benefits. We exist upon this ethos. We RESPECT each other, we SHARE with each other, we do not judge one another, and we HELP all who ask.
Click to expand...
Click to collapse
In order to live this spirit, I suggest to consider to publicly share your knowledge in the threads and not to drag the XDA members to your email, private messages or outside of XDA. Only from what you publicly posts, all can learn and are able to ask corresponding questions. Thanks very much for your cooperation!
Regards
Oswald Boelcke
Senior Moderator
I have Magisk 24 + Universal Safetynet Fix + Shamiko installed on Android 11. It warns me that Shamiko not active as "denylist is enforced'. Regardless, I still get a warning message when I start my HSBC banking app.
simplydat said:
Magisk 24 + Universal Safetynet Fix + Shamiko worked like a charm and everything has been hidden and I have a feeling I won't have to deal with root hiding for a long time.
Click to expand...
Click to collapse
Hi, have read the changelog from magisk 24 that hide not included.
Saftynet Fix i think i have read this in past, i hope i find it. I have find this thread, but how get Shamiko?? And is Zygisk also needed?
At Moment i have HTC U11 with magisk 23 + riru lsexposed, because i need xprivacy.
richardmace said:
I have Magisk 24 + Universal Safetynet Fix + Shamiko installed on Android 11. It warns me that Shamiko not active as "denylist is enforced'. Regardless, I still get a warning message when I start my HSBC banking app.
Click to expand...
Click to collapse
Same issue here not on android 11 though.
richardmace said:
I have Magisk 24 + Universal Safetynet Fix + Shamiko installed on Android 11. It warns me that Shamiko not active as "denylist is enforced'. Regardless, I still get a warning message when I start my HSBC banking app.
Click to expand...
Click to collapse
Hi @richardmace have you fixed for HSBC Banking App? I had same issue
No, not fixed but not a major issue as app still works. I am now not enforcing the deny list and Shamiko is now active.
I am new to the subject but have similar issue. There is an medical application for diabetes in Google Play. It is called Freestyle Libre 3. "3" is important as there are "1" and "2" versions of this app. This app is used to monitor glucose with the help of external device that is placed on the body via bluetooth. The application has two "features" so far:
1) it is available only on a few smartphones (a few Apple's and a few Samsung's)
2) it is available only in few countries (GB, DE, NL, SE and just a few more)
All my bank apps work with zygisk but this medical app doesn't. I added this app and all google play services on deny list. YASNAC shows passed for basic integrity and cts profile. I tried Shamiko and Universal Safety Fix too. Hiding Magisk doesn't help. still no success. But once Magisk is uninstalled the app starts and works.
Could it be somehow an unusual case when application devs made up some one trick more than Magisk is assuming for apps that check for root? Is there any hope to have this app working on LineageOS with Magisk installed?
The working solution is to allow "USB Debugging" in "Developer options", and additionally by Xiaomi, turn off "MIUI Optimization".

Riru does not work with Zygisk. HELP! I Need advice.

I have a magisk v24.3. I need a list of programs from Edexposed. To pass the Safetynet check, I enable the zygisk function, but when I enable this function, the Riru module immediately stops working.
So, if I use edexposed, I cannot pass Safetynet check (because zygisk is disabled), but if I pass Safetynet check, I cannot use Edexposed. What if I have to change the version of Magisk to solve this problem? If this is the only solution to this problem, what version of Magisk do you recommend?
p.s Again, my main concern is that Edexposed can work and I can pass the Safetynet check.
________________________
I use the phone model Xiaomi redmi note 7 (MIUI Global 11)
Android version : 9
twrpdnyskqw said:
I have a magisk v24.3. I need a list of programs from Edexposed. To pass the Safetynet check, I enable the zygisk function, but when I enable this function, the Riru module immediately stops working.
So, if I use edexposed, I cannot pass Safetynet check (because zygisk is disabled), but if I pass Safetynet check, I cannot use Edexposed. What if I have to change the version of Magisk to solve this problem? If this is the only solution to this problem, what version of Magisk do you recommend?
p.s Again, my main concern is that Edexposed can work and I can pass the Safetynet check.
________________________
I use the phone model Xiaomi redmi note 7 (MIUI Global 11)
Android version : 9
Click to expand...
Click to collapse
Why dont you use LSPosed instead? EdXposed is probably disontinued (although not announced officially, its practically dead), LSPosed is much more up-to-date and you can easily pass SafetyNet with it. It works bit differently than EdXposed, so you'd have to read wiki.
By the way, Zygisk isn't compatible with Riru because they work in a similar manner. Riru is deprecated, use Zygisk version of modules
Lord Sithek said:
Why dont you use LSPosed instead? EdXposed is probably disontinued (although not announced officially, its practically dead), LSPosed is much more up-to-date and you can easily pass SafetyNet with it. It works bit differently than EdXposed, so you'd have to read wiki.
By the way, Zygisk isn't compatible with Riru because they work in a similar manner. Riru is deprecated, use Zygisk version of modules
Click to expand...
Click to collapse
Thanks for the feedback bro. I already tried LSposed but LSposed doesn't have the apps I need, for example I need Device ID Masker - it does the swapping of the device hardware (imei) and other parameters and it's a paid app. I also need RootCloak - it hides the root.
Do you think there is a good analogue for LSposed?
twrpdnyskqw said:
Thanks for the feedback bro. I already tried LSposed but LSposed doesn't have the apps I need, for example I need Device ID Masker - it does the swapping of the device hardware (imei) and other parameters and it's a paid app. I also need RootCloak - it hides the root.
Do you think there is a good analogue for LSposed?
Click to expand...
Click to collapse
All modules that works on EdXposed will work on LSPosed too (or almost all) since its the same Xposed Framework, just implemented differently. And Xposed modules aren't limited by those present in the repository. You can download them from another source and install, then enable in the manager and use.
For example, you can download both of your modules from this sources:
Device ID Masker Lite | Xposed Module Repository
repo.xposed.info
RootCloak (with 5.x and 6.x support) | Xposed Module Repository
repo.xposed.info
And by the way - both of these modules seems to be outdated (especially RootCloack). As a replacement for the first one, you can use Android Faker (https://repo.xposed.info/module/com.android1500.androidfaker) - updated regularly. As for hiding root, right now there are much more reliable solutions than Xposed modules. But what you need, depends on what apps/tools you need to hide root from. You should take a look on this thread: https://forum.xda-developers.com/t/discussion-magisk-the-age-of-zygisk.4393877/
Depending on your usage, you may need Universal SafetyNet Fix module, Shamiko or just to use Enforce DenyList in Magisk settings. In rare situations, there is a need to hide apps with root access from other apps (like bank apps), and HideMyApplist Xposed module helps in that cases
Lord Sithek said:
All modules that works on EdXposed will work on LSPosed too (or almost all) since its the same Xposed Framework, just implemented differently. And Xposed modules aren't limited by those present in the repository. You can download them from another source and install, then enable in the manager and use.
For example, you can download both of your modules from this sources:
Device ID Masker Lite | Xposed Module Repository
repo.xposed.info
RootCloak (with 5.x and 6.x support) | Xposed Module Repository
repo.xposed.info
And by the way - both of these modules seems to be outdated (especially RootCloack). As a replacement for the first one, you can use Android Faker (https://repo.xposed.info/module/com.android1500.androidfaker) - updated regularly. As for hiding root, right now there are much more reliable solutions than Xposed modules. But what you need, depends on what apps/tools you need to hide root from. You should take a look on this thread: https://forum.xda-developers.com/t/discussion-magisk-the-age-of-zygisk.4393877/
Depending on your usage, you may need Universal SafetyNet Fix module, Shamiko or just to use Enforce DenyList in Magisk settings. In rare situations, there is a need to hide apps with root access from other apps (like bank apps), and HideMyApplist Xposed module helps in that cases
Click to expand...
Click to collapse
Thanks bro, you're the best!
twrpdnyskqw said:
Thanks bro, you're the best!
Click to expand...
Click to collapse
You're welcome If you will need any help, let me know. I'm not an expert, but I can try to help. Good luck
Lord Sithek said:
All modules that works on EdXposed will work on LSPosed too (or almost all) since its the same Xposed Framework, just implemented differently. And Xposed modules aren't limited by those present in the repository. You can download them from another source and install, then enable in the manager and use.
For example, you can download both of your modules from this sources:
Device ID Masker Lite | Xposed Module Repository
repo.xposed.info
RootCloak (with 5.x and 6.x support) | Xposed Module Repository
repo.xposed.info
And by the way - both of these modules seems to be outdated (especially RootCloack). As a replacement for the first one, you can use Android Faker (https://repo.xposed.info/module/com.android1500.androidfaker) - updated regularly. As for hiding root, right now there are much more reliable solutions than Xposed modules. But what you need, depends on what apps/tools you need to hide root from. You should take a look on this thread: https://forum.xda-developers.com/t/discussion-magisk-the-age-of-zygisk.4393877/
Depending on your usage, you may need Universal SafetyNet Fix module, Shamiko or just to use Enforce DenyList in Magisk settings. In rare situations, there is a need to hide apps with root access from other apps (like bank apps), and HideMyApplist Xposed module helps in that cases
Click to expand...
Click to collapse
thank you so much it helped me too.

Categories

Resources