DuckUSB Zygisk

Makes apps read USB debugging, wireless debugging and Developer Options as OFF while they stay really ON, and hides the persistent "USB debugging enabled" notification.

Detectors don't read any real adb state — they ask the settings provider for adb_enabled, adb_wifi_enabled and development_settings_enabled.

Two builds, same behaviour. Pick one:

Xposed (:app) APK. Enable in LSPosed, tick the system scope entry, reboot. Zygisk (:zygisk) Flashable zip for KernelSU / Magisk, plus a manager APK. Flash, reboot.

How

One hook in system_server, on the settings provider's call and query, so the getter and a direct cursor read agree. Results are rewritten per caller by uid.

Nothing is injected into the apps being fooled — they have no hook residue in their own memory to find. Callers below uid 10000 (root, shell, system) and the OS file-transfer components always read the truth, so adb, MTP and the Settings toggle keep working.

Tested on

OnePlus 15 (CPH2747), OxygenOS, Android 16, KernelSU Next + ReZygisk + LSPosed. Both variants report clean on Duck Detector. Other ROMs are unknown, though the provider is matched by authority and the guards key off uid rather than OEM package names.