Skip to main content

How to use Xposed/Edxposed to hide root access from an application? (Genymotion Desktop)

  • Updated

Warning

GENYMOBILE SAS assumes no liability whatsoever resulting from the download, install and use of Xposed/Edxposed framework and RootCloak module. Use it at your own risk.

In order to hide root from an application, you need to use a Xposed/Edxposed module called RootCloak.

1. Install Xposed/Edxposed framework

Xposed (Android 5.0 - 8.1)

Important

Xposed 3.1.5 only works for Android 5.0 (Lollipop), 6.0 (Marshmallow), 7.0 (Nougat), 7.1 (Nougat), 8.0 (Oreo) and 8.1 (Oreo). Please refer to this thread for details.
For Android 4.4, you need a previous version of Xposed. 
For Android 9.0 (Pie) and 10, you need to use Edxposed instead (see "Edxposed" chapter).

Prerequisites

  • Xposed framework for x86 only

    Note

    You need to download the framework that matches the virtual device Android version.

  • Xposed installer APK

Installation

  1. Drag'n drop the Xposed framework zip file (xposed-vXX-sdkXX-x86.zip) to your virtual device display to flash the device.
  2. Drag'n drop Xposed Installer APK (XposedInstaller_*.apk). This should install and launch Xposed Installer application. At this stage, it will display that the Xposed framework is installed but disabled.
  3. Reboot the device with adb reboot command. Do not reboot from Xposed Installer as this will freeze the device.
  4. Launch Xposed installer. It should display "Xposed Framework version XX is active":
    screenshot-2020-07-01_14.33.54.615.png

Edxposed (Android 8.0 - 10)

Note

Edxposed can also be used with Android 8.0 and 8.1, instead of Xposed.

Prerequisites

Installation

  1. Drag'n drop Edxposed framework zip file, riru_X.XX_edxposed_Yahfa_X.X.X.zip to the device display.
  2. When flash is complete, reboot the device with adb reboot command.
  3. Drag'n drop Edxposed manager APK file (EdXposedManager-X.X.X-XXXXX-org.meowcat.edxposed.manager-release.apk) to the device display.
  4. Launch Edxposed manager. It should display "Edxposed framework is active":
    screenshot-2020-07-01_14.32.33.213.png

2. Install RootCloak module (All Android)

Installation

  1. Launch Xposed Installer or Edxposed manager and go to the Download section:
    Download.png
  2. In the search field, type "Rootcloak" and click on "Rootcloak (with 5.x and 6.x support)"
    Find_rootlcoak.png
  3. Go to the Version subsection and click on Download:
    Download_rootcloak.png
  4. After download, you will need to authorize Rootcloak module installation:
    Security.png
    Security_2.png
  5. Go back and click on Install:
    Install_rootcloak.png
  6. Once installed, you will still need to activate Rootcloak module. Go to the Modules section:
    screenshot-2020-07-01_09.49.32.165.png
    Activate Rootcloak module.
    screenshot-2020-07-01_09.53.24.785.png
  7. Reboot the device with adb reboot. Do not reboot device from Xposed installer or Edxposed manager: this will freeze the device.
  8. After reboot, launch RootCloak application.

Usage

  1. Select Add/Remove Apps.
    screenshot-2020-07-02_13.36.53.554.png
  2. If your app is not in the list, you must then click the "+" sign to add it.
    mceclip1.png
  3. Exit RootCloak settings. If the app you just added to the list was already running, you need to FORCE CLOSE it for the settings to take effect.
  4. Run your application.

For more details on how to use RootCloak, please visit https://github.com/devadvance/rootcloak.

Note

Using RootCloak will likely not work with modern banking applications or games as they use complex anti-root and anti-emulation routines. It is more suitable for developers who wish to test their applications in a non-rooted environment.

Related articles