search

snake-4 / Zygisk-Assistant

A Zygisk module to hide root for KernelSU, Magisk and APatch, designed to work on Android 5.0 and above.
MIT License
1.19k stars 83 forks source link

Won't be able to work with BootloaderSpoofer? #25

Closed scruel closed 6 months ago

scruel commented 6 months ago

Describe the bug https://github.com/chiteroman/BootloaderSpoofer After applied this to momo & hunter, zygisk will be detected.

Steps To Reproduce

  1. Install momo/huter, enable Zygisk-Assistant, reboot
  2. Open BootloaderSpoofer, select momo/huter app.
  3. Open momo & hunter, you will see results.

Detection apk files: Detect.zip

Context

snake-4 commented 6 months ago

Well, if you inject an Xposed module to an app, it will be able to detect that. There's not much we can do about that as the injected modules will reside in the address space of the target app.

ThePedroo commented 5 months ago

Well, if you inject an Xposed module to an app, it will be able to detect that. There's not much we can do about that as the injected modules will reside in the address space of the target app.

You are right, however Shamiko is able to hide it from Momo, where Zygisk Assistant fails. I am unsure if that's the case for the OP though, but it is for me.

Should I open a new issue or only send a logcat here?

snake-4 commented 5 months ago

Well, if you inject an Xposed module to an app, it will be able to detect that. There's not much we can do about that as the injected modules will reside in the address space of the target app.

You are right, however Shamiko is able to hide it from Momo, where Zygisk Assistant fails. I am unsure if that's the case for the OP though, but it is for me.

Should I open a new issue or only send a logcat here?

No. Momo has outdated detection methods. Injected Xposed modules are always detectable even with Shamiko.

ThePedroo commented 5 months ago

That is a rather controversial statement, as Momo is still one of the best apps to detect rooting.

Even if we agree with "it outdated detection methods", it would still be neat to patch those detection methods, don't you agree?