IIIImmmyyy / Riru-MomoHider

A Riru module tries to make Magisk more hidden.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Riru - MomoHider (aka IsolatedMagiskHider)

Background

Many applications now detect Magisk for security, Magisk provided "Magisk Hide" to hide the modified traces but not completely hidden, magisk still can be detected by MagiskDetector. This module tries to make it more hidden.

Features:

Config name Description
isolated Apply Magisk Hide for isolated process and app zygotes. This feature is deprecated because it will unmount Magisk modified files for every isolated processes, and the unmounting time cannot be well controlled, which may cause some modules to not work. For almost apps, Magisk Alpha or the latest Magisk canary + Riru-Unshare is enough.
setns Faster new way to hide Magisk in isolated processes. Requires config "isolated" is enabled.
app_zygote_magic Make a app named "Momo" cannot detect Magisk hide is running.
initrc Hide the modified traces of init.rc

Note: Since 0.0.3, all features are disabled by default, you need to create a file named /data/adb/(lite_)modules/riru_momohider/config/<config name> to enable it.

Requirement

Rooted Android 7.0+ devices with Magisk and Riru V25+.

Test

Momo is the strongest detection app known.

Troubleshoot

Find the "config dir"

The really config dir is $MODULES/riru_momohider/config. For magisk lite, the $MODULES is /data/adb/lite_modules; For the original and almost everything, the $MODULES is /data/adb/modules.

If the module doesn't work, please check the config dir first. You should see a file called magisk_tmp under the config dir.

Momo shows "environment is broken, service not responding"

Please check your "overlay modules" first. Iterate through $MODULES and check each of its subfolders. For overlay modules, you should see system/vendor/overlay or system/product/overlay under it.

If you can't find any overlay modules, please go to the "without overlay modules" section.

With overlay modules

  1. Check your android version. For Android < 10, Magisk Alpha or the latest Magisk canary + Riru-Unshare is almost enough. After installing the recommended things, you can turn off isolated and try again.
  2. Disable overlay modules if possible. Or, we can't support this case yet.
  3. Try again. If the problem not solved, please try the "without overlay modules" section.

Note: We needs more info to try to support overlay modules, please file a issue with the full log and stacktrace to help me to solve it even if you have solved the problem.

Without overlay modules

  1. Turn on setns and try again.
  2. If the problem not solved, please file a bug with your device info and full log.

Momo still shows "environment is modified"

MomoHider only hide "MagiskHide is enabled", "Found su file", "Found Magisk" and "init.rc is modified" for momo. If you not see these, this is not our problem, please hide it yourself.

But if you see these after enabling these features... please check the following steps:

  1. Try run magiskhide exec which su, if you see something found, this usually indicates that there are other superuser programs in your system that cause magiskhide not work properly. Please remove other superuser programs.
  2. Try installing MagiskDetector, if you see "magiskhide not working", then report to Magisk.
  3. Report to me with your device info and logs.

There is our suggestion:

  1. Always keep SELinux is enforcing and make sure any sepolicy rules is necessary.
  2. Use modern Xposed framework implementations (like LSPosed or Dreamland ) and do not use "global mode", only enables Xposed for actually needed apps.

Build

Run gradle task :module:assembleMagiskRelease from Android Studio or command line, magisk module zip will be saved to module/build/outputs/magisk/.

Discussion

Credits

License

The project uses Magisk's source code, so its license follows Magisk's license.

Magisk, including all git submodules are free software:
you can redistribute it and/or modify it under the terms of the
GNU General Public License as published by the Free Software Foundation,
either version 3 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program.  If not, see <http://www.gnu.org/licenses/>.

About

A Riru module tries to make Magisk more hidden.


Languages

Language:C++ 67.0%Language:Shell 27.3%Language:C 2.9%Language:CMake 2.8%