Download Magisk Renef: Dynamic Instrumentation for Android

Magisk Renef is a root module that automatically packages and runs the renef dynamic instrumentation toolkit on Android. Designed for reverse engineers and modders, it launches the renef server on boot via Unix Domain Sockets for direct process manipulation.

I've been running this on my testing device as a solid, lightweight alternative to magisk-frida. Hooking into live processes via UDS works reliably right after a reboot, saving me the headache of manually pushing binaries every time a new renef version drops. Just keep an eye on your device's SELinux status, as enforcing mode occasionally blocked my script injections on heavily customized ROMs.

Core Features

• Zero manual setup since a daily GitHub action pulls and packages the latest server and agent libraries for you.
• UDS auto-start means the service boots automatically in the background on the @com.android.internal.os.RuntimeInit socket.
• Attach or spawn directly from your host machine to inject custom Lua scripts into running apps.
• Built-in status checks right inside your root manager's app UI let you know instantly if the server is healthy or failed.

Usage

Execute commands using the renef client on your host computer:

• Spawn a target app:

renef -s com.example.app -l your-script.lua

• Attach to a running app:

adb shell su 0 sh -c "pidof com.example.app"
renef -a <PID> -l your-script.lua

Module Status

After booting up, check your module list inside Magisk, KernelSU, or APatch:

• ✅ renef_server is running (UDS): Server is up and ready.
• ❌ renef_server failed to start: Server process died on boot.

Important Troubleshooting

• Reading server logs: Grab the error log directly via ADB:

adb shell su 0 cat /data/local/tmp/renef_server.log

• Failed to find libc base error: Usually happens when SELinux is set to Enforcing. Temporarily set SELinux to permissive to fix process injection:

adb shell su -c setenforce 0

• Spawning fails on banking or hardened apps: High-security apps block activity spawning. Skip the -s spawn flag—open the app manually on your phone, find its PID, and use -a to attach instead.

How It Works

A automated GitHub Actions workflow checks daily for updates in the upstream renef project. When a new build drops, it fetches the renef_server and libagent.so binaries for ARM64, structures them into a standard flashable module zip, and releases it automatically.

Support & Requirements

• Android Version: Android 10 or newer (Recommended).
• Architecture: ARM64 devices ONLY.
• Root Support: Magisk, KernelSU (including KSU Next), and APatch.

How to Install

1. Download the latest MagiskRenef-{version}.zip from the official releases page.
2. Flash the zip file using Magisk, KernelSU, or APatch.
3. Reboot your device to boot up the background socket service.