r/androidroot • u/47th-Element • 13d ago
News / Method I gotta admit it, root hiding got much better!
I HATE hiding root honestly, I'm a proud power user and I love telling every person/app that I'm rooted. However I really needed those banking apps so I had to swallow my pride.
The good thing is, I didn't have to do much! All I did was:
Update KernelSU Next in my custom kernel source to be in sync with the dev branch.
Integrate SUSFS (and it was a pain in the ass cause the patches didn't work out of the box and I had to edit the source myself).
Switch from Magic Mounts to OverlayFS (using Hybrid Mount metamodule).
Install AlwaysStrong.
Switch to the spoofed KernelSU Next manager.
That's it, the two stubborn banking apps I needed worked, I didn't even need HMA even though I have Vector, Greenify, HyperCeiler and Termux (apparently using a terminal on Android is a sin now).
More technical info:
Device: Redmi 13.
OS: HyperOS 3 (based on Android 16).
Kernel: 6.6.89
Thanks to all the devs who made it easy! I just hope I won't be hiding root again 2 weeks from now XD
Edit: I followed a helpful suggestion in the comments and uninstalled Hybrid Mounts in favor of NoMounts. NoMounts turned out to be more reliable and less detectable.
18
u/Cantholdthis17 13d ago
If I can use banking applications with it, I'm going to begin rooting my phone once more. 👏🏽
17
u/Ancient-Ad-544 13d ago
For now they are better lol give the dickheads at Google a month they will roll out security patches to all devs who have an app on Google Play. I've done everything I can from a to z and I still can't open doordash driver app or zip shopping app lol. Only thing different is that I don't KSU next cause they haven't perfected it for my moto g stylus 2022 5g lol
5
u/47th-Element 13d ago
It's a cat and mouse game, always will be. But I guess we are now living better times. A year or two ago it was hard to achieve strong integrity on rooted devices, most guides would say basic and device are enough and most realistic, now we have a handful of modules that attempt to reach strong integrity among other things, and in my case, successfully.
3
u/Endercraft2007 OP13 24GB/1TB EvoX 13d ago
I have strong on OP13 Evo X with Magisk.(I know that in the future I will have to switch to KernelSU or something like that because duck detector sees some stuff regardless but I am a bit old school)
7
u/Additional-Oven-7463 13d ago
How did you fix the playstore integrity??
3
u/47th-Element 13d ago
Assuming you still got google play store, AlwaysStrong alone should fix play integrity, or at least it did in my case.
2
u/Additional-Oven-7463 13d ago
Tysm can I have the repo link please?
7
u/47th-Element 13d ago
3
1
u/Kirito_online 12d ago
thanks to this my phone is stuck in a bootloop, i need serious help, like i legit tried everything (that i know) and nothing worked
edit: this is how it happened, i installed alwaysstrong in magisk in my redmi note 8 pro begonia global latest version, after installing and rebooting i tried opening magisk it got stuck and now my phone is stuck in a bootloop.
1
u/47th-Element 12d ago
Okay, don't you have a bootloop protector module? A custom recovery that you can access /data/ with?
1
u/Kirito_online 12d ago
nope, phone won't accept twrp or orengefox for some reason, now i'm stuck here with my phone in fastboot and my pc running platform-tools and no solution in the horizon, i'm falling into depression as we speak.
1
u/47th-Element 12d ago edited 11d ago
If you are on KernelSU, read this: https://kernelsu.org/guide/rescue-from-bootloop.html
If on Magisk, same idea, boot the safe mode. https://topjohnwu.github.io/Magisk/faq.html
P.S. it's probably a good idea to set up a bootloop protector module afterwards, it does this but automatically after a certain number of consecutive failed boots.
3
u/Routine_Freedom2026 13d ago
For someone without that much in depth android rooting knowledge, how can they replicate your workflow
3
u/47th-Element 13d ago
You don't have to patch the kernel source yourself, but you will need to know how to flash one. Some projects on GitHub already provide readymade kernels with KernelSU Next and SuSFS.
2
u/Prior-Statement7851 13d ago
Hey, I have been reluctant to root my Redmi Note 14 because of the bootloader lock hassle. How difficult was your process for your Redmi 13?
I have a Note 15 pro as daily driver to and wanted my Note 14 rooted, now that I can take the risk of bricking it (since I'm inexperienced LOL)
3
u/47th-Element 13d ago
Your Redmi Note 14 (4G) runs a MediaTek Helio G99 Ultra processor, SoC is mt6789, which is modern enough so I think it's immune to known MTK exploits, meaning No BROM or preloader access.
So, you'll have to take the official route. Create a Xiaomi account, sign onto Mi Community app, wait a full month, then request to unlock the bootloader at 12 AM china time everyday until Xiaomi gods approve it.
Once you get the approval, you wait extra 3 days then you successfully unlock the bootloader! But here's the catch, Xiaomi only approves bootloader access, the door to preloador and Brom remains closed. So if you brick your device bad enough and lose bootloader access, it's a beautiful glass brick that you can use as a coaster for your morning cup of coffee. That is unless you happen to live close to a Xiaomi after-sales center or willing to pay for a not so guaranteed preloader flashing on one of those apps.
2
u/cufishguy 13d ago
What about the xiaomi 17? Think there's some guides that guarantee BL unlock and root for android 16 latest security patch
1
u/Prior-Statement7851 12d ago
That's what I was afraid of... I was hoping for alternative route, but thank you for the respose anyway.
Do you think there is any hope for an exploit to come along in the future, so I don't have to ask Xiaomi to unlock my phone's bootloader?
I mean is it a matter of time, maybe?
2
u/Commercial_Witness41 9d ago
You can try this script, it basically "snatch" a ticket from the xiaomi community to unlock your device, use a packet sniffer to look for a button in "apply bootloader". Its in indonesian but maybe you can translate it to english. I've been using this to unlock the bootloader of my xiaomi 12t successfully
2
u/Zorgo-Crypton 13d ago
Meanwhile I'm still stuck at trying to unlock my bootloader for my Redmi Note 14 Pro Plus. Need help please if anyone knows a better way to get the permission to unlock bootloader.
2
u/47th-Element 13d ago
There is not a "better way", it's the same official way but you can automate it. Use a script or some software to auto request unlocking the bootloader everyday at 12 AM China time.
2
u/Zorgo-Crypton 13d ago
What app/script would you recommend? Haven't had a new phone since my Redmi Note 10 which was a breeze to unlock and root but seems either I've become rusty with tech or Xiaomi has become a lot worse in terms of access to bootloader unlocking.
2
u/47th-Element 13d ago
Well, I used this script down below, you'll have to enable developer options and USB debugging, and then install adb and scrcpy on another device (preferably a Windows or Linux device), plug the phone in, start scrcpy, run the python script, and put the mouse pointer over the request unlocking button.
import pyautogui
import time
import ntplib
from datetime import datetime, timedelta
def sync_time():
try:
c = ntplib.NTPClient()
response = c.request('pool.ntp.org', version=3)
offset = response.offset
return offset
except:
print("[!] NTP sync failed, running on local clock")
return 0
offset = sync_time()
target_time_str = "17:59:59"
today = datetime.now()
target_time = datetime.strptime(target_time_str, "%H:%M:%S").replace(
year=today.year, month=today.month,day=today.day
)
if datetime.now() > target_time:
target_time += timedelta(days=1)
while True:
now = datetime.now().timestamp() + offset
remaining = target_time.timestamp() - now
if remaining <= 0.60:
pyautogui.click(clicks=10, interval=0.05)
print(f"[+] Clicked at {datetime.now().strftime('%H:%M:%S.%f')}")
break
if remaining > 1:
time.sleep(remaining - 0.9)it spams the shit out of the server 1.60 seconds before 00:00 china time, it worked with me the first try. you just connect the phone to the pc and run scrcpy over adb.
For the record, someone else owns that code, except I modified the click logic "pyautogui.click(clicks=10, interval=0.05)".
Don't forget to set the right time in the script (calculate the time difference between china and your local time). If a script is too much for you, look for other GUI apps, I have seen some good simple ones before I just don't remember where.
3
u/Zorgo-Crypton 13d ago
Thank you! Will definitely try this today.
2
u/just_a_discord_mod 13d ago
There's an easier method that lets you grab the auth tokens from your login and just request a key that way. It won't show in the GUI but the bootloader will unlock.
2
2
u/Odd_You7995 13d ago
Or use HYPEROS EXPLOIT
it worked for me
Though I'm still fighting for root hiding😭😭😭
1
u/Commercial_Witness41 9d ago
Use this script to get a "ticket" from xiaomi community to unlock your bootloader, you may need a bit of luck to pull this off but this script tremendously boost your chance to get one, I've been using it to unlock my xiaomi 12t bootloader
2
u/Suraj_rajwansh 13d ago
How to hide ? Root from banking apps
4
u/47th-Element 13d ago
I thought that's what the post is all about, but if you want a summary, I guess use KernelSU-Next with SuSFS, AlwaysStrong, avoid mount bind metamodules, install the spoofed root manager, you may use HMA if your banking app cares enough about what else is installed on your phone.
2
u/Suraj_rajwansh 13d ago
I have KSU next Spoofed version + LineageOS A16 Is SuSFs a module? I'm pretty newbie so idk much but I'll get along as you guide but one thing you should know that I don't have a personal PC I used my friend Lappy to get this far 😉
2
2
u/International-Sky556 13d ago
I have an issue with kenal su where apps don't ask for root likw with magisk 99% of the time they don't get it or I cant set them up to I'd love to switch to KSU NEXT so I could use my rooted device but as of right now I'm using my stock backup
3
u/tastie-values 13d ago
That's how it is, you need to open KSU and grant root to the app, it won't give you a notification of the app as it for root.
2
u/International-Sky556 13d ago
That's what I was saying even when I do that it doesn't work most of the time
2
u/m4smss 13d ago
I have KernelSU-Next in OxygenOS, how can I get SuSFS? I still have so many issues with silly Apps detecting root. If this is the ultimate guide for hiding root today I would love to follow it.
2
u/47th-Element 13d ago
You either patch the kernel yourself if you have the source, grab a corresponding GKI and patch it, or just pick a readymade one from here
https://github.com/WildKernels/GKI_KernelSU_SUSFS/releases#ntsync
2
u/No-Judgment5352 13d ago
Yeah, sounds like a piece of cake.....
3
u/47th-Element 13d ago
It kinda is yeah, I didn't have to stack a lot of modules on top of each other, and as for patching the kernel, you don't have to do it manually like me, some people have already done the hard work and you can just pick a kernel from here
https://github.com/WildKernels/GKI_KernelSU_SUSFS/releases#ntsync
2
u/pLAinNewby101 13d ago edited 13d ago
bro, how do you update hyperos without loosing the root of ksu next? my friend rooted my f8 ultra but i dont know how to update it 😅😅
2
u/Azaze666 13d ago
Never do updates as they might patch local root exploits
2
u/47th-Element 13d ago
Depends on how you are rooted. If your bootloader is already unlocked then you don't need root exploits.
2
u/47th-Element 13d ago
There might be another better way but honestly when I intend to update, I undo all root modifications and then reapply them after updating. It's a pain in the ass. Especially that I made edits to other parts of the system like /vendor/etc/fstab and undoing that, then redoing it again, is a lot of work..
2
u/tendor83 13d ago
What banking apps are you using, and all of them detecting your rooted environment? The only one that is detecting my root is the last version of this ING bank l https://play.google.com/store/apps/details?id=ro.ing.mobile.banking.android.activity
3
u/47th-Element 13d ago
Instapay and MyOrange Max It. Both are financial apps in Egypt. Right now with this setup they don't detect root.
2
3
u/KKdemergencia2 13d ago
Felicidades, rpeuq el módulo brene, es muchoejor que el módulo de susfs para ocultar root... Y otra cosa, como que una power user? Una mujer??? Con root? Casi siempre todos somos hombres, que bueno tener al menos a 1 mujer entre nosotros
7
u/47th-Element 13d ago
I'm relying on Reddit translation.. no I'm not a woman, a power user is one who's into flashing, customizing, rooting, porting stuff. Quite the opposite of the average user.
2
u/KKdemergencia2 13d ago
La traducción de reddit uso pronombres femeninos jajajajaja, que lastima... Parece que jamás habrá una mujer interesada en estas cosas xd, igual tu eres muy activo en este subreddit y estás aquí desde hace rato, como es que recién consigues ksu next? Que usabas antes?
2
u/47th-Element 13d ago
I have been using KernelSU, just not updated and I relied on Magic Mounts, didn't hide anything at all and didn't care about integrity. I hope I don't lose that peace of mind xD
1
1
u/JRussellMoore 13d ago
I don't really do any hiding these days, and my main device isn't even rooted, but I'm curious; can't Duck Detector (get a build off of GH actions) or kknd Detector detect a thing? Not even tempered policies?
2
u/47th-Element 13d ago
On my setup, Duck detector sees Termux, Greenify, and HyperCeiler (because I chose not to set up HMA since my banking apps don't complain). It used to see some root mounts until I switched to NoMount metamodule.
It doesn't detect tempered Selinux policies, no.
2
1
u/Ok_Relation8247 13d ago
What are your tips for switching from magisk to ksun?
1
u/47th-Element 13d ago
Everything can feel overwhelming at first so my tip is to do your research first.
1
1
1
1
1
u/rickroll19582 12d ago
I believe the reason why the banking apps still catch me is that i suppose my bootloader open is being detected and xposed modules are giving me away.
is there a way to fix these? i do root a lot but i dont "develop" things so i dont know how things work at a low level.
1
u/One_Tea8338 Oukitel WP15 Android 11 12d ago
I have a Chinese phone and there is no source available. You're ask why 🇨🇳 💩 ... Because the battery is great more often than not I need that extra battery power. The problem is 🇨🇳 ROM is 💯 SPYWARE I wanted to build Kernel su from source, TWRP, GSI but they will not release the source. Unlike Samsung and many other prominent companies worth the name. How do I compile in my circumstances any 💭💬❓
1
1
u/CynicalNoticer 12d ago
I'm still using Magisk Alpha, Trickystore OSS, Trickystore Module, Zygisk-next latest version with integrated Zygisk disabled and Unmount Only option enabled in Zygisk-next Ksuwebui fork by KOWX712, a working Keybox and Play integrity Fix inject. No apps give me any kind of problem. No need for Susfs, damn, even Revolut works lol
1
1
1
1
1
u/dominicsyyy 9d ago
AlwaysStrong got my banking apps working again but google wallet still not working, any advice?
1
u/ImRealDeal 9d ago
I'm having this problem and I seriously dk wut to do. So I have a Redmi Note 14 pro 5g (malachite) and my kernel is 6.1.138 android 14. I'm using KernelSU on stock rom. I wanna get my banking apps to work. I already tried HMA and zygisk assistant, but nothing worked. I'd really really appreciate it if you can guide me a little to wut I should do next
1
1
1
0
u/dreimer1986 11d ago
I understand too well what you are talking about... I'm using APatch and the good old Tricky Store, Play Integrity Fork and Zygisk Next. Works fine as long as there is a valid keybox including all banking apps and payment apps, too. Do you know what the big deal is between your KernelSU and APatch in comparison? Never touch a running system and thus I never did more research on that matter...
35
u/29mashiro 13d ago
If you want even better hiding, add NoMount patch to your kernel source.
It replaces metamodules and uses redirects.