Stealth Root Concealment

Shamiko Zygisk Module Guide

Name: Shamiko
Author: LSPosed Team

Developed by the LSPosed team, Shamiko is the gold standard for stealth root hiding. It conceals Magisk daemon sockets, modified mount namespaces, and root artifacts from aggressive enterprise security scanners, banking apps, and heuristic anti-cheat engines.

The Shamiko DenyList Paradox Explained

Unlike standard Magisk DenyList (which disables Zygisk in target processes), Shamiko maintains Zygisk hooks in target processes to actively hide root binaries, isolated mount namespaces, and `su` sockets. To use Shamiko properly, you must configure your target apps in Magisk DenyList, but you MUST keep "Enforce DenyList" turned OFF in Magisk Settings.

Step-by-Step Installation & Configuration Guide

Step 1: Enable Zygisk in Magisk

Open Magisk App -> tap the gear icon in the top right.
Toggle ON: Zygisk.
Toggle OFF: Enforce DenyList (Critical: Shamiko enforces hiding itself).
Tap Configure DenyList -> Select all banking apps, Google Play Services, and games you wish to hide root from.

Step 2: Flash Shamiko Module

Download the latest Shamiko release zip (v1.1.1+ for 16KB kernel support).
In Magisk App -> tap Modules -> Install from storage -> select the Shamiko zip.
Reboot your device.

Step 3: Verify Shamiko Status

After rebooting, open the Magisk App -> Modules tab. Under Shamiko, you should see:
"Shamiko is working in blacklist mode" (or whitelist mode).

Blacklist vs Whitelist Mode

Blacklist Mode (Default): Hides root from apps selected in Magisk DenyList. All other apps have normal root access.
Whitelist Mode: Hides root from EVERY app on the phone except those explicitly granted root access in Magisk Superuser permissions. To enable whitelist mode, create an empty file at: /data/adb/shamiko/whitelist.