A04
Xposed / LSPosedPending
An LSPosed-hooked process raises hooking_xposed.
Pendingandroid
How to read this page
A scenario is one test case: prepare the environment, run the steps, then compare the expected result (written before the run) with the observed result (copied from the run, with screenshots).
- A04 · A
- Run on a real phone that's been attacked or modified — rooted, jailbroken, hooked or hidden.
- Pending
- Not run yet. The expected result is written down; there is no observed result.
Why it matters
Xposed modules are widely used to patch apps at runtime.
Environment
- Device
- Rooted with Magisk + Zygisk + LSPosed
Setup
Prepare the environment.Then run the steps.
- 01Install LSPosed and scope a module to the app.
Steps
What to run.What to read.
- 01Run the check.
Expected result · written before the run
Status: compromised1 signal.
Observed result
Not run yet.No observed result.
Checks this scenario covers
Every check this test case touches — including ones that aren't expected to fire here. The expected and observed results above say which ones should and did. Each links to how the check works.