Universal SafetyNet Fix
Magisk module
Magisk module to work around Google's SafetyNet attestation.
This module works around hardware attestation and recent updates to SafetyNet CTS profile checks. You must already be able to pass basic CTS profile attestation, which requires a valid combination of device and model names, build fingerprints, and security patch levels.
If you still have trouble passing SafetyNet with this module, use MagiskHide Props Config to spoof a certified device profile. This is a common issue on old devices, custom ROMs, and stock ROMs without GMS certification (e.g. Chinese ROMs).
Android versions up to 13 Beta 3 are supported, including OEM skins such as Samsung One UI and MIUI.
How does it work?
The way this workaround works is relatively low-level. An in-depth explanation, as well as source code and ROM changes, can be found on GitHub.
Ideally, this workaround should be incorporated in custom ROMs instead of injecting code with a Magisk module. See the ProtonAOSP website for more information.
Downloads
Downloads and changelogs can be found on GitHub. The topmost release is the latest.
Latest release
v2.4.0
Spoiler: Changelog
Highlights
Play Integrity bypass without breaking device checks or causing other issues
Disabled use of hardware attestation on Pixel 7 and newer (@anirudhgupta109)
Other changes
Updated instructions for newer Android and Magisk versions
Better debugging for future development
This version only supports Zygisk (Magisk 24 and newer).
It's taken a while to find a way to bypass Play Integrity that doesn't require spoofing the build fingerprint permanently, but I wanted to make sure this module doesn't cause any unnecessary breakage. Just like the original goal of Universal SafetyNet Fix, this minimizes adverse effects by spoofing dynamically at runtime only when necessary. Enjoy!
If you found this helpful, please consider supporting development with a recurring donation for rewards such as early access to updates, exclusive behind-the-scenes development news, and priority support.
Alternatively, you can also buy me a coffee. All support is appreciated
Source code
Note 8 pro Android 9 and Android 10 not working
Tested succesfully on Pixel 4a 5G, but Google Pay says "Your phone doesn't meet security requirements" even though PayPal can be set up.
Magisk Hide is activated.
Magisk says SafetyNet passes but Google Pay still doesnt
Dydnlee said:
Note 8 pro Android 9 and Android 10 not working
Click to expand...
Click to collapse
Please test it again with this version: https://github.com/kdrag0n/safetynet-fix/archive/e82c3d0674e6452938e49bc6ee6848aa2a603c27.zip
[QUOTE = "kdrag0n, gönderi: 84286879, üye: 7291478"]
Lütfen bu sürümle tekrar test edin : https://github.com/kdrag0n/safetynet-fix/archive/e82c3d0674e6452938e49bc6ee6848aa2a603c27.zip
[/ALINTI]
İnstall failed
Thank you a lot, Universal SafetyNet Fix v1.1.0 working excellent on Xiaomi Mi 9T, Xiaomi.eu 21.1.6, MIUI 12.5 / Android 11 Beta
Device certified but not using Google Pay
Safety net fix 1.0.2 worked for miui Eu 12.0.3.0 Android 10 for Poco F1.
Only that the ocbc bank Singapore app still able to detect the root and became unusable.
But I know that this doesn't relate to safetynet fix here because the issue already existed before the CTS false.
tylerdurden said:
Tested succesfully on Pixel 4a 5G, but Google Pay says "Your phone doesn't meet security requirements" even though PayPal can be set up.
Magisk Hide is activated.
Click to expand...
Click to collapse
Clear app data from Google pay aswell as Google play services.
Tested on Samsung S9:
- 1.0.2 worked in MM, but Root Checker said 'cannot access GPS'.
- 1.1.0 fails ctsProfile in MM, but Root Checker now can access GPS, also returns ctsProfile fail.
Massive thanks for this. Version 1.1.0 confirmed working on my device:
- Pixel 3, stock room
- Magisk 21.2, magisk manager 8.0.5
- Magisk hide enabled and magisk manager renamed
All banking apps and google pay work correctly, including contactless payments.
working on poco f2 pro,android 11,rom one os thanks
Tested on Huawei Mediapad M5 with EMUI 9.1.0 and Magisk 20.4:
- 1.1.0 fails ctsProfile in MM, basic integrity is ok
Working OK on Mi Note 10 Lite, Android 10 and ROM xiaomi.eu
Thanks
I tried this on my Samsung Galaxy A6 (official samsung firmware patched with magisk) - and even version 1.1.0 causes bootloop when using zip inside Magisk Manager - Android 10
Good morning. Working on Redmi Note 9 Pro xiaomi.eu 12.0.1 Android 10. No MagiskHide Props Config needed: basicIntegrity passed, ctsProfile passed, evalType BASIC.
Thank you so much
MI10 Global with V12.2.8 xiaomi.eu , used V 1.0.2 works
Thank you!
Works on pixel 3a, last A10 patch, using magisk hide props config to force basic attestation. Was already using mhpc so not sure if it works without it. Fixed my CTS issue though, so thanks!
@kdrag0n Thank you so much for this awesome masterpiece!
I find it a bit interesting, that I experience a problem which nobody else seems to have reported so far. I'm using a Galaxy S10 (Exynos, G973F), rooted with latest canary Magisk, no EdXposed or whatsoever...
If I enable this module, no bootloop, basic attestation, CTS passes. "Yes", so I thought...
The problem now... My bank app tries to access the keystore and crashes. This does not happen without having this module enabled... I have attached a fully logcat and hope that you have some insights...
EDIT1: re-attached file, didn't work on the first go.
EDIT2: oh... search for "easybank" or "keystore"
EDIT3: Android 11, One UI 3
POCO F1 user here. After flashing the module the phone stucks on the Google logo at boot.
The MHPC module didn't solve the problem either.
ROM: Pixel Experience 11 Beta (20201223)/Encrypted
Related
Guys, as many of you will know, there is an unofficial port of Xposed to Nougat.
I wanted to let you know that a couple of us jumped ship, upgraded to Nougat and then flashed Magisk/Xposed.
Things worked out pretty well, all considered.
In my case, T819, Stock Nougat, Magisk 13.3 + systemless root + systemless Adaway, Xposed Sdk 24 for Magisk.
Basically all of my modules are working (with a few quirks).
For all of you who were waiting for Xposed before upgrading.
P. S. Be aware that this Xposed version is not the official release by Rovo, and is basically still a hack. You have been warned.
Could you name a few of your modules you are currently using?
Interested in Minminguard, RootCloak, and Youtube adaway.
I am currently using:
- Bootmanager : looks like it is working just fine
- Intelli3g : working fine
- Exi for SwiftKey : working fine
- AppSettings : works only with some apps
- NoDeviceCheck : works as expected, but it is best effort anyway
Roughly speaking, MinMinGuard behaves a lot like AppSettings: it definitely works, but I had a few FC, and so I have temporarily disabled it.
Greenify is not safe to enable yet. Amplify might be, but I didn't yet.
Does it need deodoxed rom?
Does SafetyNet pass?
I am on 6.0.1 and everythign is fine with Magisk until I try to install the xposed 23 module which results in a stuck booting screen.
No, I does not need deodex. In fact, I am on stock (no custom ROM for the T819).
Safety net check passes just right, until you activate Xposed, but this is known stuff.
For anyone that is interested, there is a thread in the Xposed forum with the list of modules that work with this port.
I also want to mention that rovo89 stepped in a few days ago, to announce that the official release of Xposed for Nougat is close, it will probably be out in a few weeks. I guess all of these Oreos are making Nougats start stinking a bit already... :laugh:
can you give a link?
Welcome to the MagiskFixes XDA thread!
This module applies a few patches to help Magisk work on GSIs, and maybe a few other devices (targeting Motorola oem at the moment, but more will be added as I get feedback). Obviously it's neither perfect nor universal yet.
Currently targets Motorola and Google devices running either phh or Erfan GSIs, but and Motorola devices running stock.
If you have a fix for a specific device, let me know here! I'll be happy to add it in
As usual, I'm not responsible for any bricking of devices, or things caused by that. No cats were harmed in the making of this module
Currently implemented fixes
- Added a few missing libs for GSIs
- Nuked a Motorola specific boot script (this may depend on how early the module mounts. May need reevaluated on execution)
- Add key layout for phh gsi on Google devices
V1. 2+ uses MMT-ex, and earlier versions used Unity
Thanks to @topjohnwu for Magisk and @Zackptg5 for the template
XDA:DevDB Information
MagiskFixes, Tool/Utility for all devices (see above for details)
Contributors
linuxandria
Source Code: https://github.com/Magisk-Modules-Repo/mgskfixes
Version Information
Status: Stable
Current Stable Version: 1.2.2
Stable Release Date: 2020-03-01
Created 2019-10-03
Last Updated 2020-03-17
Does it work with Moto x4 on PE?(Android 10)
Can you add fingerprint support for gsi on realme 3 pro (rmx1851)
What does should it fix on Motos?
I've two Moto Z2 Force with stock Pie on board and they seems to work fine with Magisk and EdXposed too...
What does should be addressed. on Motos by this module?!?
I'm interested and I can help with testing if needed...
Compatable with Metro PCS Moto e5 Play XT 1921-3 stock rom, rooted with Magisk?
If you're not going to respond to any questions or post about updates, etc then what's the actual point in this thread @linuxandria ?
Listy2021 said:
If you're not going to respond to any questions or post about updates, etc then what's the actual point in this thread @linuxandria ?
Click to expand...
Click to collapse
I've said it before in my other threafs I am significantly more active on telegram than XDA
Thejayyadav said:
Can you add fingerprint support for gsi on realme 3 pro (rmx1851)
Click to expand...
Click to collapse
Not unless I know what's needed
V1. 2.2 released!
Changelog:
- Rework fixes for generic and Motorola
- Add fixes for Google devices (only supports phh GSIs for now)
Wow greate idea
What exactly is fixed with this module the description is very vague if anyone could enlighten me it would greatly be appreciated
Sent from my Phh-Treble vanilla using Tapatalk
@linuxandria might you help out with sepolicy? kindly head over to my post
https://forum.xda-developers.com/t/edxposed-framework-not-recognizing-riru.4334587/post-86405127
I'd like to increase the privacy of my phone. I'm looking for a compatible open source ROM for the Xiaomi Mi 9T with the latest stock android firmware without any bloatware from google or xiaomi. Better if it's a popular ROM so I can find support more easily.
After I install the ROM I'll follow this phone hardening guide: https://lemmy.ml/post/128667
arturojr said:
I'd like to increase the privacy of my phone. I'm looking for a compatible open source ROM for the Xiaomi Mi 9T with the latest stock android firmware without any bloatware from google or xiaomi. Better if it's a popular ROM so I can find support more easily.
Click to expand...
Click to collapse
ArrowOS
arturojr said:
I'd like to increase the privacy of my phone. I'm looking for a compatible open source ROM for the Xiaomi Mi 9T with the latest stock android firmware without any bloatware from google or xiaomi. Better if it's a popular ROM so I can find support more easily.
Click to expand...
Click to collapse
davinci
This is the official rom from MicroG based on the latest LineageOS.
I run this now since 2 years. Its awesome. You wil get every month a new build and a notification to update. So you will get allways the latest Android security patches!
My privacy combination is:
-MicroG LOS Rom
-AuroraStore with local gnerated anon account - https://auroraoss.com/download/
-AuoraDroid - https://auroraoss.com/download/
-Aurora Services (for auto updates of apks) - https://gitlab.com/AuroraOSS/AuroraServices/-/releases
-AppManager - https://f-droid.org/en/packages/io.github.muntashirakon.AppManager/
-Bromite - https://www.bromite.org/
-NewPipe - https://github.com/polymorphicshade/NewPipe/releases/
I_did_it_just_tmrrow said:
davinci
This is the official rom from MicroG based on the latest LineageOS.
I run this now since 2 years. Its awesome. You wil get every month a new build and a notification to update. So you will get allways the latest Android security patches!
My privacy combination is:
-MicroG LOS Rom
-AuroraStore with local gnerated anon account - https://auroraoss.com/download/
-AuoraDroid - https://auroraoss.com/download/
-Aurora Services (for auto updates of apks) - https://gitlab.com/AuroraOSS/AuroraServices/-/releases
-AppManager - https://f-droid.org/en/packages/io.github.muntashirakon.AppManager/
-Bromite - https://www.bromite.org/
-NewPipe - https://github.com/polymorphicshade/NewPipe/releases/
Click to expand...
Click to collapse
Rumors are that LOS for davinci will no longer be maintained.
heinhuiz said:
Rumors are that LOS for davinci will no longer be maintained.
Click to expand...
Click to collapse
Yes that's true but just because a certain developer doesn't want to update to the next Android version, it doesn't mean it's over with LineageOS for davinci.
NeoArian is apparently working on an Android 12 LOS version:
shared files by arian
Download shared files by arian for free. mostly android related. None
sourceforge.net
GitHub - xiaomi-sm6150/android_device_xiaomi_davinci
Contribute to xiaomi-sm6150/android_device_xiaomi_davinci development by creating an account on GitHub.
github.com
The nice thing about MicroG is the fact that more apps still work. Yes, many other roms offer signature spoofing which is a prerequisite for microG but it never worked as well for me as the in-house LineageOS rom build from microG itself.
I've installed lineage-17.1-20220105-nightly-davinci-signed.zip. Thanks for the suggestions. Just to be sure, since I'm going to follow the 100% FOSS Smartphone Hardening non-root 4.0 guide now, is all the software in Lineage OS 17.1 FOSS (free and open source software)?
I_did_it_just_tmrrow said:
Yes that's true but just because a certain developer doesn't want to update to the next Android version, it doesn't mean it's over with LineageOS for davinci.
NeoArian is apparently working on an Android 12 LOS version:
shared files by arian
Download shared files by arian for free. mostly android related. None
sourceforge.net
GitHub - xiaomi-sm6150/android_device_xiaomi_davinci
Contribute to xiaomi-sm6150/android_device_xiaomi_davinci development by creating an account on GitHub.
github.com
The nice thing about MicroG is the fact that more apps still work. Yes, many other roms offer signature spoofing which is a prerequisite for microG but it never worked as well for me as the in-house LineageOS rom build from microG itself.
Click to expand...
Click to collapse
Thing is that the ROM has to become official (i.e. published on the LOS site) before the microG guys start building it. Many developers hesitate to make their version official, because it comes with responsibilities (in maintenance especially).
That said, there is a Magisk module available that adds microG to custom ROMs that seems to work well with LOS.
I've taken a look at rooting the phone to make adaway more energy efficient but since the device has no ramdisk I would have to boot to recovery every time I want to have root enabled. So I'm guessing most people just don't use this phone with root since it would be too inconvenient. And I'd like to know why Lineage OS doesn't offer a simple way to enable root.
arturojr said:
I've taken a look at rooting the phone to make adaway more energy efficient but since the device has no ramdisk I would have to boot to recovery every time I want to have root enabled. So I'm guessing most people just don't use this phone with root since it would be too inconvenient. And I'd like to know why Lineage OS doesn't offer a simple way to enable root.
Click to expand...
Click to collapse
I don't use LOS but I guess it uses the stock Xiaomi boot.img
If so, then it is absolutely not needed to install Magisk to recovery - as stated elswhere, patch the boot.img and then you boot directly to Magisk with no problem (don't worry that Magisk says Ramsisk No, patching boot.umg works with no problem)
Regarding to built-in Magisk to custom ROMs (old school) - that is discoursged by TJW Magisk documentation. One of the reason is troubles if user wants to update Magisk
(All assuming Magisk for root)
arturojr said:
I've taken a look at rooting the phone to make adaway more energy efficient but since the device has no ramdisk I would have to boot to recovery every time I want to have root enabled. So I'm guessing most people just don't use this phone with root since it would be too inconvenient. And I'd like to know why Lineage OS doesn't offer a simple way to enable root.
Click to expand...
Click to collapse
I'm using it with LOS17. 1 (+ microG) and Magisk, I just installed it following the instructions. I'm using stable 23.0 without problems. Magisk even reinstalls itself after OTA updates.
heinhuiz said:
I'm using it with LOS17. 1 (+ microG) and Magisk, I just installed it following the instructions. I'm using stable 23.0 without problems. Magisk even reinstalls itself after OTA updates.
Click to expand...
Click to collapse
How did you install MicroG? Just want to know if the process is still difficult on a normal LOS.
I_did_it_just_tmrrow said:
How did you install MicroG? Just want to know if the process is still difficult on a normal LOS.
Click to expand...
Click to collapse
I just used the prebuilt version from here. New builds are made approx. every 2 weeks, and install OTA.
i have been trying to update my S7E and S7 herolte and have run into a road block.
i love root and have been switching to the new magisk with zygisk, but it always fails for me
and i found this at the magisk github
[Wontfix] Zygisk cannot activate on some old Samsung devices with old kernel (3.19-) #5395Device: Samsung
Android version: N/A
Magisk version name: N/A
Magisk version code: 24102
For some old Samsung devices, there's a kernel restriction that whenever exec an ELF from /proc, the process can no longer call some systemcalls. For kernel 3.19+, the workaround is fexecve, but it does not exist for the old kernel. Users with those devices should use a custom kernel bypassing such a restriction or a newer version.
so if anyone knows of an android 11 or 12 rom for the S7 &S7E with a newer kernel please post it here. and ill test it out.
thanks for your efforts.
I'm using floyd rom android 10 with magisk 24.3 & zygisk. You also can use LOS 19.1 with magisk 24.1 & Zygisk.
Hi,
I'm planning to flash CarbonROM to my OP8P and wondering if the ROM comes with the following.
DRM Info - Security Level L1
YASNAC Safetynet - Basic Integrity & CTS profile match
I don't want to root my device, but still want to enjoy custom ROM with banking apps.
I've tried different profile for banking apps, but not quite satisfied.
Thanks
If you've got any of the 8 series. Just install EvoX.