topjohnwu / Magisk

The Magic Mask for Android
GNU General Public License v3.0
47.89k stars 12.16k forks source link

Security #5605

Closed murshid0987 closed 2 years ago

murshid0987 commented 2 years ago

Magisk version = 24301 Device = Zenfone max pro M1 Android version = 12 Safety net = pass Zygote = yes Magisk App Hide = yes Enforce Deny List = yes Configur Deny List = yes

Here is the issue A App called "Federal bank - Fed mobile" in Play Store only that app can detect root in my phone how is that possible cause all other banking apps are working perfectly

I think that app's security is beyond magisk I think they have something new root detect method to break all the magisk configurations

Is to be better if you team check how that app can detect when all magisk security configurations is enabled

MagiskBot commented 2 years ago

Invalid bug report, automatically closed. Please report issues using the latest canary Magisk version (version code: 24301).

HuskyDG commented 2 years ago

Magisk version = 24301 Device = Zenfone max pro M1 Android version = 12 Safety net = pass Zygote = yes Magisk App Hide = yes Enforce Deny List = yes Configur Deny List = yes

Here is the issue A App called "Federal bank - Fed mobile" in Play Store only that app can detect root in my phone how is that possible cause all other banking apps are working perfectly

I think that app's security is beyond magisk I think they have something new root detect method to break all the magisk configurations

Is to be better if you team check how that app can detect when all magisk security configurations is enabled

Magisk is no longer play hide, and DenyList feature is not for hiding. Maybe your app try to detect magisk-related traces (magisk stub, magisk modules, xposed hooks, su process,...) or system modification (core patch, disabled seccomp, selinux permissive, specific props,...) rather than just magisk.

murshid0987 commented 2 years ago

Whenever I completely uninstall the magisk then that app working perfectly 🤷🏼‍♂️

On Fri, Mar 18, 2022, 6:36 PM Takeda-senpai @.***> wrote:

Magisk version = 24301 Device = Zenfone max pro M1 Android version = 12 Safety net = pass Zygote = yes Magisk App Hide = yes Enforce Deny List = yes Configur Deny List = yes

Here is the issue A App called "Federal bank - Fed mobile" in Play Store only that app can detect root in my phone how is that possible cause all other banking apps are working perfectly

I think that app's security is beyond magisk I think they have something new root detect method to break all the magisk configurations

Is to be better if you team check how that app can detect when all magisk security configurations is enabled

Magisk is no longer play hide, and DenyList feature is not for hiding. Maybe your app try to detect magisk-related traces (magisk stub, magisk modules, xposed hooks, su process,...) or system modification (core patch, disabled seccomp, selinux permissive, specific props,...) rather than just magisk.

— Reply to this email directly, view it on GitHub https://github.com/topjohnwu/Magisk/issues/5605#issuecomment-1072391622, or unsubscribe https://github.com/notifications/unsubscribe-auth/AN4HXJGRQ4WIYDIAXAZPDSDVAR5UTANCNFSM5RA6QFDQ . You are receiving this because you authored the thread.Message ID: @.***>