Root access via Magisk unlocks XeraX's most powerful capabilities — keylogging, WhatsApp extraction, full stealth mode, and packet sniffing. Here's how to get there safely.
Why Root Matters for Surveillance
- Keylogger — capture every keystroke, including passwords
- Full stealth — suppress camera and microphone indicator icons
- WhatsApp extraction — access encrypted message database
- Password dump — extract saved WiFi and browser passwords
- Packet sniffer — capture network traffic in PCAP format
- Input injection — remote tap and type on the screen
Magisk vs SuperSU
Magisk is the modern standard for Android rooting. Unlike the older SuperSU, Magisk uses a "systemless" approach — it doesn't modify the system partition, making it invisible to SafetyNet checks and harder to detect. Always use Magisk, not SuperSU, for new installs.
Generic Rooting Steps
- Unlock the bootloader via developer options (Settings → About → tap Build Number 7x → Developer Options → OEM Unlock)
- Flash a custom recovery (TWRP) for your device model
- Download the latest Magisk APK/ZIP from the official GitHub
- Boot into recovery and flash the Magisk ZIP
- Reboot — install the Magisk Manager APK
Device-Specific Notes
- OnePlus: Bootloader unlock is in developer options. Easy root with Magisk via patched boot image.
- Samsung: Trips Knox permanently. Use only on non-Knox-critical devices. Exynos models easier than Snapdragon.
- Xiaomi: Requires Mi Unlock Tool and 72-hour wait. Straightforward after that.
SafetyNet and Detection
Use Magisk Hide (or Universal SafetyNet Fix module) to pass banking app checks. XeraX itself doesn't require SafetyNet to pass, but some target device apps may behave differently on rooted devices.