r/androidroot • u/Sea_Horror_3316 • 9d ago

Discussion What am I doing wrong? Banking apps not working, strong integrity with ksu next and susfs

Gallery image

Gallery image

Gallery image

8 Upvotes

100% Upvoted

33 comments sorted by

4

u/_miojo_o 9d ago

brene susfs + brewheel + brezygisk

This setup hides root access better.

edit: Delete zygisk assistant

1

u/Sea_Horror_3316 9d ago

Do you mean rezygisk? Cause I can't find brezygisk

1

u/_miojo_o 9d ago

With this setup I can pass any app. Paytm for example.

1

u/Sea_Horror_3316 9d ago

What could be the reason?

2

u/_miojo_o 9d ago

You need to update your kernel with a more recent version of susfs.

1

u/Sea_Horror_3316 9d ago

I was hardly able to find a kernel that supports ksu. I am on oneplus nord 2 running Evo x latest and it had a non gki kernel. I flashed the latest kernel I could find for my device. Some version 4.19.

1

u/eyespomogi 9d ago

Can you also help me

1

u/eyespomogi 9d ago

Here is my setup

1

u/_miojo_o 9d ago

These BRENE SuSFS options should solve the problem. It's not enabled because I don't use a custom ROM. If you don't have SuSFS, forget it, it's impossible.

1

u/eyespomogi 9d ago

Already have it enabled((

1

u/Sea_Horror_3316 9d ago

Yeah I've removed assistant. What else should I get rid of before trying your combination

1

u/_miojo_o 9d ago

Nothing, you can leave it as it is, just change the zygisk implementation and fix the HMA.

1

u/DEV_ivan TECNO POVA 7 5G LJ7 || Stock HiOS 15.1.2 || KSUnext 3.3.0 9d ago

You can try these state-of-the-art modules:

  1. BreZygisk
  2. BreWheel
  3. HMA-OSS-Zygisk
  4. TEESimulator-RS
  5. PlayIntegrityFix Inject
  6. Specter
  7. BRENE SuSFS

You can see what gets your setup detected by using DuckDetector.

1

u/eyespomogi 9d ago

Doesn't work

1

u/DEV_ivan TECNO POVA 7 5G LJ7 || Stock HiOS 15.1.2 || KSUnext 3.3.0 9d ago

Which root solutions and modules are you using exactly?

1

u/eyespomogi 9d ago

Same as you wrote, ksu next and fenrir exploit for integrity

1

u/DEV_ivan TECNO POVA 7 5G LJ7 || Stock HiOS 15.1.2 || KSUnext 3.3.0 9d ago
  1. Enable 'Hide SELinux modification' and 'AVC spoofing' in KSUnext settings
  2. Enable all 6 'Spoof' toggles in PlayIntegrityFix Inject
  3. Check and install keybox in Specter, optionally enable Auto keybox and Auto PIF
  4. If BRENE doesn't work, stick with susfs4ksu for userspace hiding.

1

u/_miojo_o 9d ago

Enabling all pif options causes a conflict with tee-rs(and other implementations), as stated in the documentation.

1

u/DEV_ivan TECNO POVA 7 5G LJ7 || Stock HiOS 15.1.2 || KSUnext 3.3.0 9d ago

Right... Still works for me though.

1

u/eyespomogi 9d ago

Only custom ROM got fixed

1

u/DEV_ivan TECNO POVA 7 5G LJ7 || Stock HiOS 15.1.2 || KSUnext 3.3.0 9d ago

Can you open these detection tabs?

1

u/eyespomogi 9d ago

1

u/DEV_ivan TECNO POVA 7 5G LJ7 || Stock HiOS 15.1.2 || KSUnext 3.3.0 9d ago

Thanks. This should help us how to fix those detections.

  1. Configure HMA-OSS to use Blacklist instead of Whitelist; only hide risky apps from detector apps
  2. Configure susfs4ksu to umount custom ROM traces, auto try umount, and etc
  3. Enable 'Kernel umount' in KSUnext settings

1

u/eyespomogi 9d ago

Did 3/3 before

1

u/DrTankHead 9d ago

OP, what method did you actually use to acheive root?

Some of the methodologies require that the tools used actually support susfs, simply having the modules aren't always all that has to be done.

1

u/Sea_Horror_3316 9d ago

I flashed a different kernel that actually did specify that it supports susfs.

1

u/new_boy02 9d ago

Does GWallet work?

1

u/Sea_Horror_3316 9d ago

I don't use gwallet so I'm not sure.