girlanddragon/maskmyscene

MaskMyScene is a Linux kernel module for rooted Android devices that hides specific network ports and file paths from detection tools. It is designed to prevent third-party apps from discovering that certain services, specifically those tied to a daemon called Scene, are running on the device. To use it, the device needs to be rooted through Magisk, KernelSU, or APatch, and the kernel must have CONFIG_KPROBES enabled, which is standard on most Android kernels. Only specific Android kernel versions are supported: 5.10, 5.15, 6.1, 6.6, and 6.12, each identified by the android plus KMI tag in the kernel version string. Installation is done by downloading the latest ZIP from the project's GitHub Actions page and flashing it through your root manager. After installation, you edit a configuration file to list which ports to hide and which app user IDs should be exempted from the hiding. Changes take effect after a device reboot. The module works by intercepting several low-level system calls. It rewrites connection attempts to the hidden ports so they fail, filters those ports from the proc filesystem entries that tools use to list active network connections, and blocks file path lookups for relevant Scene files. Apps whose user IDs appear on the whitelist see the system normally, without any interception. A bitmask value in the configuration lets you enable or disable each interception function individually, so you can turn off path hiding while keeping port hiding active, for example. The README is written in Chinese and covers the full setup process, configuration options, and how to verify the module is loaded and active after installation.