Magisk root and modules

Opensource Root, better than SuperSu, with modules xposed style. Mark the 'HIDE' option in its configuration to pass safetynet test

https://forum.xda-developers.com/apps/magisk/official-magisk-v7-universal-systemless-t3473445

Magisk zip (flash with twrp)
http://tiny.cc/latestmagisk

Magisk app
http://tiny.cc/latestmanager

Magisk uninstaller (flash with twrp)
http://tiny.cc/latestuninstaller


- Modules
In Magisk app-> downloads
Also here:

https://forum.xda-developers.com/apps/magisk

📡 t.me/NoGoolag
#magisk #root

Magisk root and modules

XDA
https://forum.xda-developers.com/apps/magisk/official-magisk-v7-universal-systemless-t3473445

XDA magisk modules
https://forum.xda-developers.com/apps/magisk

⬇️ Download Magisk Github Release page:
https://github.com/topjohnwu/Magisk/releases

📖 Magisk Documentation
https://topjohnwu.github.io/Magisk/

📖 Magisk and MagiskHide Installation and Troubleshooting guide
https://www.didgeridoohan.com/magisk/HomePage#


☢ Canary builds download:
https://github.com/topjohnwu/magisk_files/tree/master/canary_builds

Canary builds notes:
https://github.com/topjohnwu/magisk_files/blob/master/canary_builds/notes.md

Canary Release Channel:
https://raw.githubusercontent.com/topjohnwu/magisk_files/master/canary_builds/release.json`


📡 @Libreware
#magisk #root

John Wu @topjohnwu
Magisk Developer

https://mobile.twitter.com/topjohnwu/status/1105947979679191041

Bad news: Android Q root won't come anytime soon. Android Q has switched to logical partitions for the system block, which means there is no easy way to mount the block by any means. I'm currently thinking of what tricks can I do other than implement everything from scratch....

Things are not looking good 😅, even if I could, I might have to create a complete new Magisk just for Android Q. Android Q switched to this stupidly complicated logical device (device-mapper) + overlayfs madness just to support "Previewing GSIs" from data partition.

It will take me an extreme amount of time to figure out how to workaround all this mess. I won't expect Magisk to be even able to boot on Q in months.

After stepping back and taking a breath, I think I'll just have to figure out how to mount logical partitions and things should work. With normal EXT4 Android Q system images, things works just fine as previously demonstrated. Time to read some device-mapper documents...

#magisk #root #android #q

SafetyNet’s dreaded hardware attestation is rolling out, making it much harder for Magisk to hide root

https://www.xda-developers.com/safetynet-hardware-attestation-hide-root-magisk


#safetynet #root #magisk #android

https://www.nitter.net/topjohnwu/status/1278849731305672705

#safetynet #root #bootloader #magisk

https://www.nitter.net/topjohnwu/status/1278850785430786049

#safetynet #root #bootloader #magisk

How to turn off the ANDROID TRACKING SERVICES [ROOT required]

Let's start:

👉🏼 Download Termux from Google Playstore and install and open it.

Install Packages:

pkg install aapt jq tsu curl -y

( Asks for root privileges, allow this ❗️👇🏽)

cd /data/data/com.termux/files/usr/bin
cp -R aapt /system/xbin/aapt
cp -R jq /system/xbin/jq
cp  -R curl /system/xbin/curl
chmod +x /system/xbin/aapt
chmod +x /system/xbin/jq
chmod +x /system/xbin/curl

👉🏼 Download the script from here:
https://drive.google.com/drive/folders/1_G6-M8ToF0PsjY0HIrZIAVrTHT6nbptE

💡 (Please always use the latest version)

👉🏼 Unpack to 👉🏼 /sdcard and then enter the following command...:

termux-setup-storage (grant permission)

👉🏼 Then enter:

 cd /sdcard

(with root) 👇🏽

tsu

bash DisableTrackers.sh sys (Add ❗️)

After that, just reboot your device and the job is done.

#root #android #tracking #services #guide
📡@cRyPtHoN_INFOSEC_FR
📡@cRyPtHoN_INFOSEC_EN
📡@cRyPtHoN_INFOSEC_DE
📡@BlackBox_Archiv
📡@NoGoolag

Beware of Applications Misusing Root Stores

We have been alerted about applications that use the root store provided by Mozilla for purposes other than what Mozilla’s root store is curated for. We provide a root store to be used for server authentication (TLS) and for digitally signed and encrypted email (S/MIME). Applications that use Mozilla’s root store for a purpose other than that have a critical security vulnerability. With the goal of improving the security ecosystem on the internet, below we clarify the correct and incorrect use of Mozilla’s root store, and provide tools for correct use.

....(....)

Misuse of Root Stores: We have been alerted that some applications are using root stores provided by Mozilla or an operating system (e.g. Linux) for purposes other than what the root store is curated for. An application that uses a root store for a purpose other than what the store was created for has a critical security vulnerability. This is no different than failing to validate a certificate at all.

https://blog.mozilla.org/security/2021/05/10/beware-of-applications-misusing-root-stores/

#mozilla #root #store #applications
📡 @nogoolag 📡 @blackbox_archiv

hsu

Magisk module for hiding Magisk and root by entirely disabling and hiding them

https://github.com/rmnscnce/hsu

#hsu #hide #magisk #root

New Linux bug gives root on all major distros, exploit released.

A new Linux vulnerability known as 'Dirty Pipe' allows local users to gain root privileges through publicly available exploits.

Today, security researcher Max Kellermann responsibly disclosed the 'Dirty Pipe' vulnerability and stated that it affects Linux Kernel 5.8 and later versions, even on Android devices.

The vulnerability is tracked as CVE-2022-0847 and allows a non-privileged user to inject and overwrite data in read-only files, including SUID processes that run as root.

Kellerman discovered the bug after tracking down a bug that was corrupting web server access logs for one of his customers.

Kellerman states that the vulnerability is similar to the Dirty COW vulnerability (CVE-2016-5195) fixed in 2016.

https://www.bleepingcomputer.com/news/security/new-linux-bug-gives-root-on-all-major-distros-exploit-released/
https://dirtypipe.cm4all.com/

📡@cRyPtHoN_INFOSEC_EN

#linux #root #vulnerability

Physical Attacks Against Smartphones

Android devices are constantly improving their security to protect against attackers with physical access, with new protection techniques being added year-by-year. This talk aims to demonstrate vulnerabilities in modern Android smartphones that are still viable, despite the mitigations in place.

In the first phase of this talk, we will discuss the analysis and exploitation of vendor-customized versions of Android's Recovery mode, demonstrating weaknesses that allow for privilege escalation to root, and traversal from Recovery to Android, without Bootloader access....

By: Christopher Wade

Full Abstract and Presentation Materials:https://www.blackhat.com/us-23/briefings/schedule/#physical-attacks-against-smartphones-32485

#Android #Vulnerabilities #RecoveryMode #Exploit #PrivilegdeEscalation #Root

KernelSU

A kernel-based #root solution for #Android

https://kernelsu.org/guide/installation.html

https://github.com/tiann/KernelSU

@KernelSU
@KernelSU_group