RootBeer library detects Magisk - Magisk

I tried opening the Mastercard Pay with Rewards app, even with Magisk Hide, and it detected root.
In logcat I can see the following :
08-05 10:14:19.881 E/RootBeer(9758): b: a() [239] - com.topjohnwu.magisk ROOT management app detected!
So it seems that the app is using the RootBeer library which determines that the presence of the Magisk app is evidence enough of root. Is there anything I can do to avoid this? Could Magisk Hide be improved so the app can't tell Magisk itself is installed?

Have you looked in the Manager settings? There's an option to hide the Manager right there...

Download this script: https://github.com/Ingan121/UDSBypass/raw/master/bootudsbypass.sh
Put it in /data/adb/service.d
Give it permissions like:
0755
And uds detection is bypassed. Make sure you hide the rootbeer app in magisk hide and magisk manager is with a random name too. Here is a screenshot of how rootbeer won't detect root:
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

And while we're at it, a whole bunch of other root hiding tips:
https://www.didgeridoohan.com/magisk/MagiskHide#hn_Hiding_root_from_apps

Didgeridoohan said:
Have you looked in the Manager settings? There's an option to hide the Manager right there...
Click to expand...
Click to collapse
Thanks! I was not aware of that option, and it was enough to bypass detection.

latest ianmacd magisk build passed rootbeerfresh detection out of the box.

Dims_Camper said:
latest ianmacd magisk build passed rootbeerfresh detection out of the box.
Click to expand...
Click to collapse
Just want to point out that it's safer to use the official Canary builds (that also pass all Rootbeer checks), since the unofficial snapshots are built from code that's possibly not ready for release.

Didgeridoohan said:
Just want to point out that it's safer to use the official Canary builds (that also pass all Rootbeer checks), since the unofficial snapshots are built from code that's possibly not ready for release.
Click to expand...
Click to collapse
I see, I thought only unofficial snapshots are the only one passed rootbeer checks. Thanks!

If I hide Magisk manager, will I be able to enter this application? And will the applications have access to the root?
Ok, work ok hide Magisk manager.

Related

Magisk Hide

Magisk Hide doesn't seem to be working when it comes to my automobile's app, Uconnect. I'm rooted and now the Uconnect app states that I'm using an unsupported device. It worked before rooting.View attachment magisk_log_20181022_153305.log
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
tried clearing apps data?
kamilmirza said:
tried clearing apps data?
Click to expand...
Click to collapse
Yes. I even uninstalled, then reinstalled the Uconnect app.
destiple said:
Yes. I even uninstalled, then reinstalled the Uconnect app.
Click to expand...
Click to collapse
THIS great module might help :fingers-crossed:
Destiple, can you confirm whether MagiskHide Props Config, which kamilmirza referred you to, worked?
Alternately, did you find another solution to get Uconnect working?
If you haven't already you're probably better off testing the brand new MagiskHide (rewritten from scratch) in the Canary builds (currently at build 18110).
Didgeridoohan said:
If you haven't already you're probably better off testing the brand new MagiskHide (rewritten from scratch) in the Canary builds (currently at build 18110).
Click to expand...
Click to collapse
That's very good to know. I'm nervous about running a Canary build on my normal phone, but I'll see if I can find a spare to test it on.
Will the new MagiskHide be on the next Magisk update, or is it several versions away from being in the stable build?
Try using the "Hide Magisk Manager" option in the settings. I was having the same problem, but after doing that and restarting I can use the Uconnect app again.
Coop9 said:
Try using the "Hide Magisk Manager" option in the settings. I was having the same problem, but after doing that and restarting I can use the Uconnect app again.
Click to expand...
Click to collapse
Good to know! I tried it - hiding the manager by itself wasn't enough. But once I added Uconnect to the apps being hidden, *then* the app finally loaded.
Of course, upon trying to log in, the app immediately crashes. Would that have anything to do with it being added to the MagiskHide list?

[Solved] MicroG, Pie and safetynet

Hello!
Has anyone successfully passed safety.net with a pie rom (havocOS?) and microg?
I cannot get it to work. I'm using systemizer to put droidguard (nanodroid latest versions) as a system app and basically get everything to work properly (got the checklist of microg all checked) But safety.net is not passing. ANy clue?
I tried every props editor possible, and I'm using the latest magic module by @Nebrassy to change the fingerprint.
[ro.build.fingerprint]: [xiaomi/jasmine/jasmine_sprout:9/PKQ1.180904.001/V10.0.4.0.PDIMIXM:user/release-keys]
Thanks!
EDIT: and as I was starting to lose faith, I found this: https://github.com/microg/android_packages_apps_RemoteDroidGuard/pull/19#issuecomment-449368819
And it worked!
So to sum it up:
0. Make sure your os support signature spoofing (on HavocOS: Settings > havocOS settings > system > enable signature spoofing)
1. Install magisk v.18.x
2. install SafetyNet Fix for Jasmine magisk module
3. install Magisk systemizer module
5. install nanolx's Nanodroid GmsCore, DroidGuard and modified playstore from f-droid
6. run a terminal, type `su`, approve the root request, and execute `systemize`. Select the first options, and select the three apps you installed above
7. reboot
8. after reboot open microG settings and make sure the checklist is all checked (if not, do the appropriate changes (allow missing permissions, install location backends... etc)
9. open magisk, check for safetynet
10. enjoy
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Check with Magisk, are you passing basic integrity?
Nebrassy said:
Check with Magisk, are you passing basic integrity?
Click to expand...
Click to collapse
Yes, look at my screenshot
I was able to log-in with Snapchat for example, which was not possible before!
BTW: thanks a lot for your module!

Banking app is detecting root

Hi there
I am on LOS17, my bank app forced me to update, then it started detecting root
it was hidden through magisk, the safteynet is passed
deleted twrp folder
uninstalled - reinstalled
used island
no luck
if someone can check the app please
BankMuscat Mobile banking - Apps on Google Play
thanks
I checked with me on Samsung S7 9.0 Pie, Magisk root, tried different methods, does not work, detects root after entering login details
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Same issue with me in Bank Muscat app.
https://www.reddit.com/r/androidroot/comments/kq6gy3
thewise999 said:
Same issue with me in Bank Muscat app.
Click to expand...
Click to collapse
I do not know what is the method they are using
Thanks for your try
Spartacus500 said:
I checked with me on Samsung S7 9.0 Pie, Magisk root, tried different methods, does not work, detects root after entering login details
View attachment 5151217
Click to expand...
Click to collapse
Thanks for your try
It seems a server side
Can we spoof it?
I'm still stuck with bankmuscst, i remember last time there was a folder to be renamed, but can't recall which folder exactly
shiko0o said:
I'm still stuck with bankmuscst, i remember last time there was a folder to be renamed, but can't recall which folder exactly
Click to expand...
Click to collapse
any luck?
which rom you are you using?
i have passed all of the safety net test but this bank still is a pain
eraser0 said:
any luck?
which rom you are you using?
i have passed all of the safety net test but this bank still is a pain
Click to expand...
Click to collapse
Try this
Comdirect photoTAN app detecting root
Since version 8.3.0 additional measures to detect root have been added, do not update as MagiskHide won't be able to prevent detection. Until a solution is found I would recommend staying on the previous version for as long as possible. Finding...
forum.xda-developers.com
eraser0 said:
Hi there
I am on LOS17, my bank app forced me to update, then it started detecting root
it was hidden through magisk, the safteynet is passed
deleted twrp folder
uninstalled - reinstalled
used island
no luck
if someone can check the app please
BankMuscat Mobile banking - Apps on Google Play
thanks
Click to expand...
Click to collapse
Hi bro try this
Magisk App hidden (unhide is possible), Magisk Hide activated
Modules:
Riru
Riru LSPosed
Riru - Enhanced mode for Magisk Hide v2
XPrivacyLua activated via LSPosed and marked Get Applications for the Bankmuscat app in XPrivacyLua.
It's worked for me

Question How to gain root access PLUS pass Safety Net

Hi All,
Received this phone a couple of weeks ago and have successfully unlocked the bootloader. I've also obtained root access, but have never been able to pass SafetyNet. The traditional methods do nothing. Have made various attempts using suggestions here on XDA, as well as searching Google, but each and every one results in an "Attestation Failed" message.
Some posts state to use the Magisk canary build and then hide Magisk as well as verifying SafetyNet. Unfortunately, the canary build doesn't provide an option to check the SafetyNet, nor is there any way to hide Magisk, nor hide any Google services/apps. The MagiskHide Props Config also has never worked for me either. Even when selecting Pixel 3A which supposedly was passing the old SafetyNet attestation method.
So, does anyone have or know of any root method that actually works correctly for the Redmi Note 10 Pro?
Cheers and Happy New Year,
Amy
AmyS9 said:
Hi All,
Received this phone a couple of weeks ago and have successfully unlocked the bootloader. I've also obtained root access, but have never been able to pass SafetyNet. The traditional methods do nothing. Have made various attempts using suggestions here on XDA, as well as searching Google, but each and every one results in an "Attestation Failed" message.
Some posts state to use the Magisk canary build and then hide Magisk as well as verifying SafetyNet. Unfortunately, the canary build doesn't provide an option to check the SafetyNet, nor is there any way to hide Magisk, nor hide any Google services/apps. The MagiskHide Props Config also has never worked for me either. Even when selecting Pixel 3A which supposedly was passing the old SafetyNet attestation method.
So, does anyone have or know of any root method that actually works correctly for the Redmi Note 10 Pro?
Cheers and Happy New Year,
Amy
Click to expand...
Click to collapse
Canary with zygisk and deny list additional flash magisks safetynefix (Google it) is still working
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

Hotel app Marriott detects Magisk and root

Please see discussion already at
https://www.reddit.com/r/Magisk/comments/yf8gyu
Security message when running an app
Hello I installed the Marriott app this morning, and when I go to run it, i get that security message along the bottom third of the screen, and the app shuts down. What is causing that?
forum.xda-developers.com
Calling on the broader community to look at this, as I only start to have this today. I have also tried HuskyDG's Magisk Delta which is said to have brought back MagiskHide, but I failed. Thanks
try this https://forum.xda-developers.com/t/guide-howto-use-banking-apps-on-your-rooted-device.4530801/
supermansaga said:
Please see discussion already at
https://www.reddit.com/r/Magisk/comments/yf8gyu
Security message when running an app
Hello I installed the Marriott app this morning, and when I go to run it, i get that security message along the bottom third of the screen, and the app shuts down. What is causing that?
forum.xda-developers.com
Calling on the broader community to look at this, as I only start to have this today. I have also tried HuskyDG's Magisk Delta which is said to have brought back MagiskHide, but I failed. Thanks
Click to expand...
Click to collapse
Thanks. It does seem to work, except I didn't perform these following steps mentioned. Maybe they are not applicable to the latest 3.1.1 version on GitHub instead of play store? Also don't think I truly understand how to use template. Finally, there is a popup to ask me to uninstall Magisk? Probably not a good idea.
Under the Preference head, tap on Select hide methods -> Check API requests, Intent queries, ID detections -> Tap OK
Under the Template config head, tap on 0 additional apps invisible -> Check Magisk, LSPosed and HMA
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
lelakon666 said:
try this https://forum.xda-developers.com/t/guide-howto-use-banking-apps-on-your-rooted-device.4530801/
Click to expand...
Click to collapse
It worked several times but has since been busted. Maybe I didn't set it up correctly?
I heard Magisk Delta by HuskyDG could hide it from detection. Has anyone been brave enough to try? Well, I tried and it didn't work. I tried the whitelist mode by leaving Marriott out of the SuList and many other banking apps too. But it still detects root. Marriott app version 10.13.1. Older version say 10.12.0 and below should survive.
marriott’s new version 10.15.0 appears to have fixed the over-detection issue. Shamiko is now 0.7.1. not sure if relevant

Categories

Resources