Magisk framework solution

[Murugan murugan.g]

Hi Team,

Is there any solution to fix Magisk framework's ability to bypass android root check. Can anyone please suggest some solution so that application should not be installed on rooted phone even though magisk framework is installed.

[Anant Shrivastava]

bypassing root checks and defeating root apps is a cat and mouse game. the best bet is to rely on google safetynet api. Magisk keeps bypassing it as magisk operates at a much much lower level most of the time but safetynet keeps catching up. So if you ask me i would still suggest safetynet. OWASP MSTG suggests a bunch of different check : https://github.com/OWASP/owasp-mstg/blob/master/Document/0x05j-Testing-Resiliency-Against-Reverse-Engineering.md they might fit your bill.

Disclaimer : i review OWASP MSTG content. 

Anant Shrivastava 
Web : http://anantshri.info

On Fri, May 18, 2018 at 1:18 AM Murugan murugan.g <gmuru...@gmail.com> wrote:

Hi Team,

Is there any solution to fix Magisk framework's ability to bypass android root check. Can anyone please suggest some solution so that application should not be installed on rooted phone even though magisk framework is installed.

--
______________________________________________________________________________
null - Spreading the right Information
null Mailing list charter: http://null.co.in/section/about/null_list_charter/
---
You received this message because you are subscribed to the Google Groups "null" group.
To unsubscribe from this group and stop receiving emails from it, send an email to null-co-in+...@googlegroups.com.
Visit this group at https://groups.google.com/group/null-co-in.
For more options, visit https://groups.google.com/d/optout.