New method to hide the root


Tears Burn

Members
15 Jan 2020
180
55
This is for educational purposes only, I take no responsibility for any damage caused.


Hello guys, let's talk about again for how to hide root in proper way in 2025 :D It's been a long time since Magisk was the only option for hiding root But times change. With each passing year, Google constantly creates obstacles and updates its requirements for the proper functioning of its applications as well as various banking applications and government applications. By defining Magisk fork as rooting solutions including Magisk, KSU, Apatch, and their branches, the development of bypassing can be briefly described as follows.

1. Magisk + Xposed (2018 and before)
2. Magisk + Edxposed (2019)
3. Magisk + Edxposed + Anti-blocking plugins (2020)
4. Magisk + LSPosed (2021)
5. Magisk Fork + LSPosed (2022)
6. Magisk Fork + LSPosed + Shamiko (2023)
7. Magisk Fork + LSPosed + Shamiko + PIF + TS (2024)
8. Magisk Fork + LSPosed + SUSFS/Shamiko/NoHello + PIF + TS + VBMeta Fixer + Cleaning up (2025)

Currently, even with the state-of-the-art bypassing techniques, the following problems still cannot be solved with appropriate solutions

1. Hide custom ROMs​
2. Hide USB debugging and even developer options without injection traces detected
3. Hide accessibility mode (even the affected application cannot detect accessibility mode) without injection traces detected
4. Solve the problem that WeChat fails to enable fingerprint payment while all other applications can use it normally
5. Solve the problem that the STRONG integrity check cannot be passed on devices with the bootloader unlocked when there is no valid keybox
6. Hide injection traces for applications injected at the application level

While following the tutorials, please also consider referring to the documentation and the Actions tab of the GitHub repositories for each rooting solution, module, and plugin, if there are.
Currently, SukiSU + ReZygisk + SUSFS is the optimal solution, follwed by Magisk Alpha + Zygisk Next + Shamiko, Apatch + Cherish Peekaboo + NoHello, and Magisk Delta. source

Yesterday I installed SukiSU - Ultra and I was amazed at how well it works, how much better it does compared to Magisk Alpha and how well it hides the root. At the time of writing this post, I can definitely say that this is the best method for hiding the root. ( I use poco f6 pro Vermeer ) So, you can read the source or continue reading here. How to install SukiSU - Ultra that's the question :emoji_confounded: For more advanced users it will not be a problem but for inexperienced users it will be a bit complicated. So, I will try to explain in the most understandable way possible for novice users. Let`s Start the tutorial :emoji_blush:



Тhis method is based on kernel rooting

First of all let's see if your device is supported. Open your phone settings, go to my device, detailed info and specs and see which kernel version you have ( in my case android13-5.15.167 ) Ok, now we know that the kernel of Poco F6 Pro Vermeer uses Android 13 version 5.15.167 Go in the supported kernels in sukisu-ultra github page and search for your kernel device. Be careful look for your version specifically to see if it is available. Once you have checked for your kernel version and it is officially supported, you can download it with the extension AnyKernel3.zip Check carefully what android kernel 12, 13, 14, 15 is for and the version numbers accordingly. In my case is ( android13-5.15.167-2024-11-AnyKernel3.zip ) So download the file and save it somewhere for now. Download and install SukiSU-Ultra
Go to the folder where you unzipped xiaomi.eu.rom enter the folder images and search for init_boot.img file. Copy that file somewhere in your phone internal directory ( for exemple Download ). Open SukiSU-Ultra app and you gonna see the red box Not Installed one click on the red box and you gonna receive a Warning, pick proceed, pick select a file and pick the init_boot.img file witch you copy early on your phone and patch it. Now copy the patched file on your computer. Reboot your phone in fastboot mode and connect it to the PC via usb cable. Open the terminal and type fastboot devices to see if your PC recognize your phone. If yes just type the command

fastboot flash init_boot ( drag and drop your patched file in the terminal ) and hit enter to flash it

Now type fastboot reboot recovery enter in your recovery and flash the kernel with you download before. Reboot your device.

Congrats now you successfully installed SukiSU - Ultra on your device. :emoji_blush: Its time to flash some modules download and flash via sukisu this modules ReZygisk , VBMeta-Fixer, susfs, Play Integrity inject, TrickyStore, Tricky-Addon, Zygisk-LSPosed and reboot your device.


Input *#*#5776733#*#* in the dialer (do not call) or click the action button in the module detail in the SukiSU manager to open the LSPosed daemon if necessary (or in case the desktop shortcut is missing) also Install the latest HMA plugin (the latest build in its Telegram) in the LSPosed layer

Configure

video tutorial

after install all moduls just open SukiSU find tricky store Select All, Set AOSP Keybox, Set Valid Keybox and you are good to go :) if no valid keybox found install yurikey reboot open SukiSU find Play Integrity generate new pif file test it if you have device integrity. If you dont have device integrity reboot and test it again generate new pif test again. you must have device integrity

If you have some problems with the wallet uninstall it and clean data of the google services. Open Settings, Open Apps, Manage Apps, search for Google Play Services and Clear Data, go to setings on you phone google profile manage profile google log out. Open play store and log in again. Open play store again payments and subscriptions, purchase confirmation switch biometric verification off and on. Install Wallet

Thats All and Enjoy :emoji_blush:

edit: 05.07.2025 install yurikey to generate valid keybox also remove PlayIntegrityFork and install Play Integrity inject and generate new pif

Also if you find your supported kernel there have a second method to flash your kernel just download boot.img of the kernel in my case android13-5.15.167-2024-11-boot.img enter in fastboot mode and flash it directly with the comand

fastboot flash boot_ab (drag and drop the file in the terminal or enter the name of the file)
 
Last edited:
What if your kernel is older and not in the list? Mine is Android13 4.14.180. All the releases start from 5.10
you can try with android12-5.10.136-2022-11-AnyKernel3.zip but first make a bakup of your kernel if something gone wrong you gonna restore it easy. so you can try. the worst that can happen is a bootloop you restore from backup and that's it.
 
What if your kernel is older and not in the list? Mine is Android13 4.14.180. All the releases start from 5.10
You can also try the easiest way download the boot img android12-5.10.136-2022-11-boot.img conect your phone on the pc enter in fastboot and type

fastboot flash boot_ab android12-5.10.136-2022-11-boot.img

and restart your phone if start you are ok and install SukiSU-Ultra and you are good to go if the phone dos not start just flash the original img from the folder in the rom

fastboot flash boot_ab boot.img

and you are ok
 
Last edited:
Thanks for the reply. The kernel refused to flash and the boot.img led to the screen being unresponsive... I don't think it will work without it's own modified kernel
 
Thanks for the reply. The kernel refused to flash and the boot.img led to the screen being unresponsive... I don't think it will work without it's own modified kernel
if its not work yea what can we do. you can try with diferent version only bigest not lowest so... thats it then
 
something unique, something very strange happened today. I couldn't pay with my phone, wallet stopped working. just wonderful :emoji_blush: most couch professors don't even ask themselves why wallet stops working. This is because they don't understand how the apps work and what Google is. I had to investigate the case myself. of course with the help of a friend who is a guru in these things. what we found and how this problem can be fixed. the problem is in the Play Integrity. Nothing more. For all applications to work, you only need a device integrity. For some reason, everyone crying for strong integrity. :emoji_cry::emoji_face_palm: I uninstall Wallet before to do that i clean cashe and data from the app, and so i use sukisu ultra which is the best method to hide a root. But we dont have a problem with root right ? We have a problem with play Integrity right ? So i just uninstall Play Integrity Fork reboot my phone. I install PlayIntegrityFix-inject and reboot my phone. After reboot i check my integrity how is it ? i have only basic i generate new pif with PlayIntegrityFix-inject i install again tricky store and tricky addon and restart my phone i open tricky store set aosp keybox set valid keybox if not have just set unknown keybox reboot my phone and i have device integrity which is enough for me. ( if you have device integrity you are ok ) I clean all data of google play services also i clean all cash and data from playstore reboot my phone. After reboot i open my playstore enter in my account paymants & subscriptions, purchase verification and i diasable 1 time biometric verification and enable it again. Google need to scan your fingerprint again to verify. So i install Wallet again i open tricky store mark all apps and save. Now i open my Wallet and Booom All is good. The worst is you need to add the card again.

Will this work in Magisk - You tell me

I use the best method only :emoji_blush:

Good Luck To All

Best Regards
 
Last edited:
  • Haha
Reactions: Bec de Xorbin
Integrity-Box no longer exists.
I tried pif-next 2.1, trickystore 1.3.0+addon 4.0, yurikey 1.4 and getting strong but with YASNAC I'm getting "google play services api error" and cant add cards :(
 
ok try without Integrity-Box install PlayIntegrityFix-inject generate new pif file.check integrity if is basic only uninstall tricky store reboot generate new pif file again. check integrity. if is basic again install again tricky store with add on awso. reboot check integrity if you have device integrity you are ok. if no generate new pif file again reboot the phone and check integrity i must edit the guild
 
Last edited:
So
Integrity-Box no longer exists.
I tried pif-next 2.1, trickystore 1.3.0+addon 4.0, yurikey 1.4 and getting strong but with YASNAC I'm getting "google play services api error" and cant add cards :(
uninstall pif-next install PlayIntegrityFix inject generate new pif if its not ok uninstall tricky store reboot check integrity if is not ok generate new pif install again tricky store and tricky addon reboot check integrity. if you have google play services api error just open setings on your phone go on google account and log out and log in again this gonna fix your problem and check integrity



VIDEO
 
Last edited:
F6 Pro here
Magisk - PIF, TrickStore & Add-on and ReZygisk

I had basic this morning but re-actioned Trickystore and now have Device.

Wallet is tapping as it should.

Not entirely sure what's allowing it to work though
 
So

uninstall pif-next install PlayIntegrityFix inject generate new pif if its not ok uninstall tricky store reboot check integrity if is not ok generate new pif install again tricky store and tricky addon reboot check integrity. if you have google play services api error just open setings on your phone go on google account and log out and log in again this gonna fix your problem and check integrity



VIDEO
Nothing changes. Play integrity passes Basic but Revolut still detects root :(
 
Last edited:
  • Like
Reactions: doveman
how what ? the correct settings :)
I finally get "meets device integrity" but not sure the keybox part is correct as its not showing as yours, just bootloader locked. Cleared data and deleted google store, wallet, revolut rebooted reinstalled still detecting.
So 2 questions
1. Where did you get the keybox file from as it might be my problem
2. Maybe I have not cleaned all packages/services needed to restore the integrity check for all google services? Can you specify what packages/apps are you cleaning exactly?

Extra: have you updated to the recent revolut app and its still working?

Thank you in advance
 

Attachments

  • Screenshot_2025-07-05-03-51-51-608_com.henrikherzig.playintegritychecker.jpg
    Screenshot_2025-07-05-03-51-51-608_com.henrikherzig.playintegritychecker.jpg
    461 KB · Views: 25
  • Screenshot_2025-07-05-03-51-29-510_io.github.vvb2060.keyattestation.jpg
    Screenshot_2025-07-05-03-51-29-510_io.github.vvb2060.keyattestation.jpg
    427.8 KB · Views: 22
I finally get "meets device integrity" but not sure the keybox part is correct as its not showing as yours, just bootloader locked. Cleared data and deleted google store, wallet, revolut rebooted reinstalled still detecting.
So 2 questions
1. Where did you get the keybox file from as it might be my problem
2. Maybe I have not cleaned all packages/services needed to restore the integrity check for all google services? Can you specify what packages/apps are you cleaning exactly?

Extra: have you updated to the recent revolut app and its still working?

Thank you in advance
i use latest apps of course always update to the latest app revolut wallet. you can get keybox from yuri or another moduls there have many. Why your bootloader look like this i dont have an idea but your playintegrity is ok. You need to clean google services. and playstore enter in playstore login with you acount go to payments purchase confirmations and on biometric verification 1 time off and on. thats it
 
I've tried every possible root solution! Nothing works! Magisk nor SukiSU!
I gave up.
 

Attachments

  • 1.jpg
    1.jpg
    229.9 KB · Views: 23
  • 2.jpg
    2.jpg
    215.8 KB · Views: 23
  • 3.jpg
    3.jpg
    147.4 KB · Views: 22
  • 4.jpg
    4.jpg
    225.9 KB · Views: 21
  • 5.jpg
    5.jpg
    203.5 KB · Views: 22
@Tears Burn,
I did the process that you wrote, at the end I have basic + device integrity, but still when I open wallet I get an error:
Your device doesn’t meet security requirements

I'm using:
Using SukiSU Ultra 3.1.7
Bindhosts 2.0.5
Play Integrity Fix [Inject ] (manual) 3.3
Tricky Store 1.3.0
TrickyAddonModule 4.0
Yuri Keybox Manager 1.4

Any Idea?
 

Attachments

  • 1.png
    1.png
    158.4 KB · Views: 15
  • 2.png
    2.png
    40.1 KB · Views: 16
@Tears Burn,
I did the process that you wrote, at the end I have basic + device integrity, but still when I open wallet I get an error:
Your device doesn’t meet security requirements

I'm using:
Using SukiSU Ultra 3.1.7
Bindhosts 2.0.5
Play Integrity Fix [Inject ] (manual) 3.3
Tricky Store 1.3.0
TrickyAddonModule 4.0
Yuri Keybox Manager 1.4

Any Idea?
very well clean data from google services and you are good to go :)
 
I've tried every possible root solution! Nothing works! Magisk nor SukiSU!
I gave up.
i dont use magisk so i dont now how is there install playintegrity-inject you have key box so you are good and use magisk alpha if you are on magisk on my old phone redmi not 7 revolut wotking fine with magisk alpha so just try. when generate new pif if you have basic reboot phone if is still basik install yuri modul generate new pif if you have device integrity you are good to go. you miss something so just try don't give up you are in the final stage
 
Thanks for the reply. The kernel refused to flash and the boot.img led to the screen being unresponsive... I don't think it will work without it's own modified kernel
Hi, same problem here (Kernel 4.X). If you found any working solution, I would be happy to know. I keep on searching ... THX!
 
i dont use magisk so i dont now how is there install playintegrity-inject you have key box so you are good and use magisk alpha if you are on magisk on my old phone redmi not 7 revolut wotking fine with magisk alpha so just try. when generate new pif if you have basic reboot phone if is still basik install yuri modul generate new pif if you have device integrity you are good to go. you miss something so just try don't give up you are in the final stage
Thanks dude,
The shots are from SukiSU Ultra, as I said.
But the same was with Magisk.
Simple, nothing works.
Everything reports OK, but in reality, nothing works.
banking apps cant connect through Google services and Revolut still detecting root/custom firmware
 
Thanks dude,
The shots are from SukiSU Ultra, as I said.
But the same was with Magisk.
Simple, nothing works.
Everything reports OK, but in reality, nothing works.
banking apps cant connect through Google services and Revolut still detecting root/custom firmware
What can I tell you, you haven't followed a single step and it's normal for nothing to work for you.
 
My Note 13 Pro 5G ROM doesn't have a init_boot.img file, so I can't patch it with SukiSU-Ultra app.

Should I just download the boot.img for my kernel and flash it with 'fastboot flash boot_ab android12-5.10.209-2024-05-boot.img'? Is that a pre-patched file?

EDIT: I'm currently using Magisk and when I try set valid keybox in Tricky Addon v4 it says "no valid keybox" and that doesn't change after I install and Action yurikey. However, now when I open Tricky Addon everything is ticked!
 
My Note 13 Pro 5G ROM doesn't have a init_boot.img file, so I can't patch it with SukiSU-Ultra app.

Should I just download the boot.img for my kernel and flash it with 'fastboot flash boot_ab android12-5.10.209-2024-05-boot.img'? Is that a pre-patched file?

EDIT: I'm currently using Magisk and when I try set valid keybox in Tricky Addon v4 it says "no valid keybox" and that doesn't change after I install and Action yurikey. However, now when I open Tricky Addon everything is ticked!
thats corect uninstall magisk and flash your kernel with the comand you post.

when install yurikey just pick action after that generate new pif with playintegrity-inject and restart your phone done