darvincisec/DetectMagiskHide

Magisk Canary (22002) + Riru Core (v. 23.9) + Riru Unshare Module is able to bypass root detection using isolated process

redmare27 opened this issue · 2 comments

redmare27 commented

the lastest Magisk Canary (22002) + Riru Core (v. 23.9) + Riru Unshare Module by vvb2060 definitely kill the root detection by this app.

Riru unshare module allows Magisk Hide to handle isolated processes.

any idea to handle this issue?

darvincisec commented

I havent tried it yet. If it is addressed in magisk, then this app goes into the dead pool !

febryanasaperdana commented

the lastest Magisk Canary (22002) + Riru Core (v. 23.9) + Riru Unshare Module by vvb2060 definitely kill the root detection by this app.

Riru unshare module allows Magisk Hide to handle isolated processes.

any idea to handle this issue?

I think this isolated process can no longer detect MagiskHide. Looks like it's finally a dead end. You can use SafetyNet for full protection, but it may block your users that are not rooted, but have their device tampered (unlocked bootloader)