Skip to main content

How to use Xposed/Edxposed to hide root access from an application in Genymotion PaaS?

  • Updated

Warning

GENYMOBILE SAS assumes no liability whatsoever resulting from the download, install and use of Xposed/Edxposed framework and RootCloak module. Use it at your own risk.

In order to hide root from an application, you need to use a Xposed/Edxposed module called RootCloak.

1. Install Xposed/Edxposed framework

Xposed (Android 5.1/6.0/7.0)

Important

Genymotion PaaS image architecture is x86_64 and Xposed 3.1.5 does not exist for this architecture. However, we have compiled specific 64 bits versions. For the moment, our build only supports Android 5.1, 6.0 and 7.0.
For Android 8.0, 8.1, 9.0 and 10, you need to use Edxposed instead (see "Edxposed" chapter).

Prerequisites

  • Xposed framework for x86_64. There is no public build for x86_64. You need to contact the support team and we will provide one for you.
  • Xposed installer 3.1.5 APK (XposedInstaller_3.1.5.apk)
  • Connect your instance to ADB. See Accessing an instance from ADB.

Installation

  1. Drag'n drop the Xposed framework zip file (android-X.X-XXXXXXXX-xposed-v65-sdkXX-x86_64.zip) to your instance display to flash it.
  2. Drag'n drop Xposed Installer APK (XposedInstaller_3.1.5.apk). This should install and launch Xposed Installer application. At this stage, it will display that the Xposed framework is installed but disabled:
    screenshot-2020-07-20_10.32.55.544.png
  3. Reboot the instance. Do not reboot from Xposed Installer as this will freeze the instance.
  4. Launch Xposed installer. It should display "Xposed Framework version XX is active":
    screenshot-2020-07-01_14.33.54.615.png

Edxposed (Android 8.0 - 10)

Important

There are no builds for ARM architecture for the moment. Use only with x86_64 instance types.

Prerequisites

Installation

  1. Drag'n drop Edxposed framework zip file, riru_X.XX_edxposed_Yahfa_X.X.X.zip to the instance display.
  2. When flash is complete, reboot the instance.
  3. Drag'n drop Edxposed manager APK file (EdXposedManager-X.X.X-XXXXX-org.meowcat.edxposed.manager-release.apk) to the instance display.
  4. Launch Edxposed manager. It should display "Edxposed framework is active":
    screenshot-2020-07-01_14.32.33.213.png

2. Install RootCloak module (All Android)

Installation

  1. Launch Xposed Installer or Edxposed manager and go to the Download section:
    Download.png
  2. In the search field, type "Rootcloak" and click on "Rootcloak (with 5.x and 6.x support)"
    Find_rootlcoak.png
  3. Go to the Version subsection and click on Download:
    Download_rootcloak.png
  4. After download, you will need to authorize Rootcloak module installation:
    Security.png
    Security_2.png
  5. Go back and click on Install:
    Install_rootcloak.png
  6. Once installed, you will still need to activate Rootcloak module. Go to the Modules section:
    screenshot-2020-07-01_09.49.32.165.png
    Activate Rootcloak module.
    screenshot-2020-07-01_09.53.24.785.png
  7. Reboot the instance. Do not reboot from Xposed installer or Edxposed manager: this will freeze the instance.
  8. After reboot, launch RootCloak application.

Usage

  1. Select Add/Remove Apps.
    screenshot-2020-07-02_13.36.53.554.png
  2. If your app is not in the list, you must then click the "+" sign to add it.
    mceclip1.png
  3. Exit RootCloak settings. If the app you just added to the list was already running, you need to FORCE CLOSE it for the settings to take effect.
  4. Run your application.

For more details on how to use RootCloak, please visit https://github.com/devadvance/rootcloak.

Note

Using RootCloak will likely not work with modern banking applications or games as they use complex anti-root and anti-emulation routines. It is more suitable for developers who wish to test their applications in a non-rooted environment.

Related articles