simplydat said:

Hi @VD171

1. May I know what these two files are? These also came up on my device after the scan. I cannot get rid of them.

/system/lib/libsigchain.so
/system/lib64/libsigchain.so

2. How to properly use xprivacylua?

You mentioned it's the best. However xprivacylua needs to hook LSposed into the app you wish to hide e.g bank app in order to work. But most app checks for the presence of exposed at runtime.

So the problem is if I hook LSposed to the app, I can hide whatever xprivacy designs to hide, e.g applist. But LSposed gets detected.

If I don't hook LSposed to the app, Xprivacy doesn't work at all.

Also Xprivacy creates a folder called xlua in /data/system which also gets detected by VD Infos.

Click to expand...

The file libsigchain.so works on art modifications, so this file can appears with luckypatchers, xposed, custom recoveries or some other type of customization.

XprivacyLua does NOT work alone. You need to choose what to block.
Certainly, you need custom hooks made by other users.
I suggest you to try all hooks made by @Fif_
You can find them on XprivacyLua repository:
https://lua.xprivacy.eu/repo/

Apparentely, XprivacyLua needs an auto self-hiding, because it can be detected easily too.

Hello hoping someone can help me. I've got a stubborn app that keeps kicking me out because of root detected.

I'm running latest Canary magisk for example safetynet fix, magiskhide, etc. both result in both CTS and Safetynet passing. and Gpay works okay but another app does not.

But what does the test below mean? I did do magiskhide and safetynet fix using the latest magisk Canary build.

Thank you.
Chris

crypticc said:

Hello hoping someone can help me. I've got a stubborn app that keeps kicking me out because of root detected.

I'm running latest Canary magisk for example safetynet fix, magiskhide, etc. both result in both CTS and Safetynet passing. and Gpay works okay but another app does not.

But what does the test below mean? I did do magiskhide and safetynet fix using the latest magisk Canary build.

Thank you.
Chris

Click to expand...

Means you have a rooted device.

VD171 said:

Means you have a rooted device.

Yeah thanks.
But shouldn't magisk hide have, well, hidden it?

Btw... When this APK tried to grab SU and request phone and storage permissions etc I denied so was a little surprised it managed to Cat the folders and mount points at all.
Rootbeer doesn't find rooted but this APK does

crypticc said:

Yeah thanks.
But shouldn't magisk hide have, well, hidden it?

Btw... When this APK tried to grab SU and request phone and storage permissions etc I denied so was a little surprised it managed to Cat the folders and mount points at all.
Rootbeer doesn't find rooted but this APK does

Exactly.
Magiskhide hides that.
Check your settings.

VD171 said:

Exactly.
Magiskhide hides that.
Check your settings.

Okay thanks again. When I installed this app I had forgotten to tick the app in Magisk deny list. Fixing that and now all that's left now is "emulator detected".
This is running system properties, classes, processes, and files basic. Files aggressive didn't complete but I think the phone decided to just terminate the app so not a big deal.

So what is that "emulator" and do you think that's what would be triggering the root detection on the other app?

Now sorted the basics please feel free to redirect me or even just tell me to go away if you don't want the question in your app thread as I do realise the question is now no longer about the app.

By the way... Before you do. Very insightful app

Chris

VD171 said:

About Magisk v24+ and Zygisk:
Actually, you can hide root and xposed, using XPrivacyLua together the Magisk module: SHAMIKO !
And, you can fix safety net, using the Magisk module: UNIVERSAL SAFETYNET FIX !

I've installed Magisk v24.2, LSPosed v1.7.2, Shamiko v0.4.4, XPrivacyLua v1.30, Universal SafetyNet Fix v2.2.1 and everything is working perfectly.

(Keep Attention ! You need to ENABLE Zygisk, ENABLE DenyList and DISABLE Enforcing DenyList.)

LSPosed developers and community of contributors are doing an INCREDIBLE work with LSPosed and Shamiko, I have no words to say how I love them.

If you want to hide something else, you can try custom hooks written in Lua on XPrivacyLua.
If you want to hide something more, certainly you can write your own lua script for XPrivacyLua.
XPrivacyLua is really extensible, so you can build your own Xposed script without compiling anything.
If you never try XPrivacyLua, certainly you should it !
If you are a regular user of XPrivacyLua, you should try new lua scripts too, you can see some custom lua scripts uploaded by community on XPrivacyLua repository: https://lua.xprivacy.eu/repo/

Good luck

Magisk: https://github.com/topjohnwu/Magisk/releases
Author: @topjohnwu

LSPosed: https://github.com/LSPosed/LSPosed/releases
Author: LSPosed Developers (@Dr-TSNG, canyie, kotori2, vvb2060, yujincheng08)

Shamiko: https://github.com/LSPosed/LSPosed.github.io/releases
Author: LSPosed Developers (@Dr-TSNG, canyie, kotori2, vvb2060, yujincheng08)

XPrivacyLua: https://forum.xda-developers.com/t/app-xposed-6-0-xprivacylua-android-privacy-manager.3730663/
Author: @M66B

Universal SafetyNet Fix: https://github.com/kdrag0n/safetynet-fix/releases
Author: @kdrag0n


PS: Do NOT expect SHAMIKO to be open source ! It will keep the source closed, because as @topjohnwu already said it's a cat-and-mouse game.

Click to expand...

any tutorial to hide custom hooks ?
my banking app still able to detect root after i use all of the apps above.

locolyric said:

any tutorial to hide custom hooks ?
my banking app still able to detect root after i use all of the apps above.

Hooks are made to hide something.

doggydog2 said:

I'd like the app to try location. With XPrivacyLua now unusable for a long time (with LSPosed), I am using permission managers and there are now many combinations of Coarse and Fine location in Android12. Here's what i apply:
- Coarse=Allow, Fine=Allow for apps that really need location like Uber
- Coarse=Allow, Fine=Ignore for apps that only need to connect to devices like any bluetooth app operating hardware
- Coarse=Allow, Fine=deny (somewhat corresponding to unchecked [ ] Precise location in settings) for apps that i want "almost" fine location like Weather
- Coarse=Ignore, Fine=ignore for most other apps
But VDInfo® will always report my city. I'd hope to see what location any app can really get.

Click to expand...

The city name is shown as a name or as a geo position?
Probably it is now shown by the location.