Systemless Xposed triggering CTS - Magisk

When I turn Xpsed off and reboot, everything is fine. But when it is on, it triggers CTS. Is there any way to get Xposed pass Safety net or turn it on/off without reboot?

legitscoper said:
When I turn Xpsed off and reboot, everything is fine. But when it is on, it triggers CTS. Is there any way to get Xposed pass Safety net or turn it on/off without reboot?
Click to expand...
Click to collapse
It doesn't matter if xposed is systemless or not, it will trigger SN... The old way via suhide or root switch might still work provided your setup meets the requirement...
Sent from my MI 5 using Tapatalk

Short answer: No. And it doesn't matter that it's systemless...
Long answer: Maybe, if you use a combination of Magisk v12 (with the Universal SafetyNet fix module), SuperSU, suhide, a modified version of systemless Xposed and have an Android security patch from before November 2016. It's been discussed in the systemless Xposed thread, here.

Related

Magisk 11.0 upgrade from 10.2 destroyed my Nexus 5x CTS profile match

Just upgraded from 10.2 to 11.0 on a nexus 5x using magisk manager. CTS profile match triggered now I'm screwed. How to go back or how to fix?
Just uninstall magisk, wipe your system, and reinstall your ROM. You shouldn't have to wipe user data.
mickrussom said:
Just upgraded from 10.2 to 11.0 on a nexus 5x using magisk manager. CTS profile match triggered now I'm screwed. How to go back or how to fix?
Click to expand...
Click to collapse
Did you enable magisk hide again?
It broke cts on my tablet too so going to try a few things before I do what I said in the above post.
Edit: I could not get CTS back with the new Magisk so something is broken with Magisk hide.
I had the same problem on my OnePlus 2.
I had to clear Magisk Application data, then reboot, and reactivate Magisk Hide to get it back. No need to reboot when activating Magisk Hide.
Chiyo-chan said:
I had the same problem on my OnePlus 2.
I had to clear Magisk Application data, then reboot, and reactivate Magisk Hide to get it back. No need to reboot when activating Magisk Hide.
Click to expand...
Click to collapse
Yeah I tried that but sadly if I have to reboot for other reasons it breaks Magisk Hide unless I toggle and even that only fixes it half the time.
For me, magisk hide is still working after reboot.
I have the same problem when i reboot magisk hide break
There's currently a bug with Hide initialization that will be addressed. After a reboot toggle Hide off and on and you'll be fine.
Yeah I got it to work but hopefully the bug is fixed quickly is rather not go back to pre-10.2 days.
I had the same problem.. but before reinstalling everything I turned magisk hose off rebooted turned it on again and rebooted and it worked fine since.
Sent from my HTC6545LVW using Tapatalk
Now Magisk hide works but it's losing root again.
Link_of_Hyrule said:
Now Magisk hide works but it's losing root again.
Click to expand...
Click to collapse
Try disabling Busybox in the Manager. Other users that are loosing root on v11.1 are reporting that this helped. Sounds like a bug somewhere...
Magisk 11.1 and Magisk Manager 4.0 fixed my CTS profile issue. I was having CTS profile issues with 11.0 but after updating to 11.1, the issue disappeared. I can now play Pokemon Go on a rooted phone with limited Xposed support (using Root Switch to disable Xposed); Xposed module like Snorlax is working.
I believe topjohnwu did acknowledge that it's due to some bug in MagiskHide.
xstahsie said:
Magisk 11.1 and Magisk Manager 4.0 fixed my CTS profile issue. I was having CTS profile issues with 11.0 but after updating to 11.1, the issue disappeared. I can now play Pokemon Go on a rooted phone with limited Xposed support (using Root Switch to disable Xposed); Xposed module like Snorlax is working.
I believe topjohnwu did acknowledge that it's due to some bug in MagiskHide.
Click to expand...
Click to collapse
Which Xposed are u using
I mean standard or the systemless
I flashed the official Xposed and NOT the unofficial from topjohnwu. Being that I have a Nexus 6P w/ 6.0.1 , I flashed xposed-87-sdk23-arm64.zip. I don't think the unofficial xposed works w/ Root Switch.
Official Xposed link: https://forum.xda-developers.com/showthread.php?t=3034811
Yeah the 11.1 fixed the cts issues but still lose root occasionally. It's not as stable as the old version was hopefully the bugs get fixed.

Pass SafetyNet with Xposed?

I've been reading several threads here and in other forums as well, and I still not sure if this is possible at all, or it depends on the Xposed modules, etc.
I'm planning to do a clean install of the RR ROM, 6.0.1, try to remove all traces of root, then flash magisk and see if I can pass SafetyNet.
Does a custom kernel interfieres with that?
And if I pass it... any possibility to use Xposed (being active) and pass SafetyNet? Or at least hide it for problematic apps, like Netflix, or Mario Run?
Thanks in advance.
No, Xposed and SafetyNet is a no-go for now.
If you have a device, which ROM has security patches older than November 2016, you may try to use suhide along with Magisk and its MagiskHide, but no guarantees.
The ROM I plan to use is from september, you mean with suhide maybe SafetyNet could pass with Xposed enabled?
Thanks!
eXtremeDevil said:
I've been reading several threads here and in other forums as well, and I still not sure if this is possible at all, or it depends on the Xposed modules, etc.
I'm planning to do a clean install of the RR ROM, 6.0.1, try to remove all traces of root, then flash magisk and see if I can pass SafetyNet.
Does a custom kernel interfieres with that?
And if I pass it... any possibility to use Xposed (being active) and pass SafetyNet? Or at least hide it for problematic apps, like Netflix, or Mario Run?
Thanks in advance.
Click to expand...
Click to collapse
With Xposed Safetynet gone.
But you can use no device check module to pass ctsProfile True. But you can't anything about basicintegrity.
the ctsProfile in important. This mean you can play super Mario run or use Netflix in your device. But because of the basicintegrity you can't download or update this app from play store. You can download from apkmirror site.
Netflix and super Mario run in my phone.
Sent from my HTC U11 using Tapatalk
arianat said:
With Xposed Safetynet gone.
But you can use no device check module to pass ctsProfile True. But you can't anything about basicintegrity.
the ctsProfile in important. This mean you can play super Mario run or use Netflix in your device. But because of the basicintegrity you can't download or update this app from play store. You can download from apkmirror site.
Netflix and super Mario run in my phone.
Sent from my HTC U11 using Tapatalk
Click to expand...
Click to collapse
Let's see if I understood it correctly. Can I have custom ROM + Magisk + SuperSU + custom kernel + Xposed active and with this module I can use that kind of apps?
Thanks!
eXtremeDevil said:
Let's see if I understood it correctly. Can I have custom ROM + Magisk + SuperSU + custom kernel + Xposed active and with this module I can use that kind of apps?
Thanks!
Click to expand...
Click to collapse
Yes. I have custom kernel on ViperU 1.7 custom Rom in HTC U11
but I think you can't use superSu with magisk. You must use one of them. Why you want superSu? Magisk has superuser
Just install Xposed and install no device check module in Xposed installer
Sent from my HTC U11 using Tapatalk
arianat said:
Yes. I have custom kernel on ViperU 1.7 custom Rom in HTC U11
but I think you can't use superSu with magisk. You must use one of them. Why you want superSu? Magisk has superuser
Just install Xposed and install no device check module in Xposed installer
Sent from my HTC U11 using Tapatalk
Click to expand...
Click to collapse
I use an older Magisk that supports SuperSU. If I need newer Magisk for this to work, or if the module doesn't work with SuperSU, please let me know.
Thanks!
Best way really is root switch, requires reboot and disables xposed bit gets the job done.
kekistaneerefugee said:
Best way really is root switch, requires reboot and disables xposed bit gets the job done.
Click to expand...
Click to collapse
I don't want to be disabling Xposed and rebooting everytime...
eXtremeDevil said:
I use an older Magisk that supports SuperSU. If I need newer Magisk for this to work, or if the module doesn't work with SuperSU, please let me know.
Thanks!
Click to expand...
Click to collapse
The module worked with superuser and superSu
I tested
Sent from my HTC U11 using Tapatalk
Great, thanks, for now I will try MagiskSU. Just flashed ROM, removed su and SN passed. But installed boeffla kernel and not anymore. Is it normal? Can I avoid that? Gonna flash Magisk 13.3 now and check.
Thanks for everything guys!
Never mind, got SN again. But after installing Xposed systemless 87 I get bootloop Any idea why? Or is it really a very long boot? I have no Xposed modules at the time, just trying to boot it.
EDIT
Thanks to liveboot, I can see a boot error: Xposed: Can't find file.
Any clues???
Try install classic. If you don’t want disable xposed for pass basicintegrity , no need to install system less. Systemless xposed not active in my phone and I installed classic.
What’s your device? Do you wipe delvik & cache?
I flashed systemless Xposed from recovery and that did the trick.
If disabled, I pass SN. With the No device check module I pass cts profile.
But, Netflix does not work with that configuration. Maybe that app has extra checks? Thanks.
Sent from my ONE A2003 using Tapatalk
eXtremeDevil said:
I flashed systemless Xposed from recovery and that did the trick.
If disabled, I pass SN. With the No device check module I pass cts profile.
But, Netflix does not work with that configuration. Maybe that app has extra checks? Thanks.
Sent from my ONE A2003 using Tapatalk
Click to expand...
Click to collapse
What's do you mean extra configuration?
It's must work with pass ctsProfile. Just you can't update or download from play store.
Do you downloaded last version of Netflix for your device dpi and CPU architect from apkmirror?
Sent from my HTC U11 using Tapatalk
With Xposed disabled, and SafetyNet passing at 100%, Netflix says that my device is not compatible. Even installed from Google Play.
BTW, Mario Run only works if Magisk Hide is enabled for it, I guess that's normal (with Xposed active this time)
Thanks for all the clarifications, now I have a better understanding of it all
I guess this is the cause?
https://www.reddit.com/r/netflix/comments/69l2fp/all_netflix_no_longer_available_to_android/
Can anyone confirm?
Thanks!
eXtremeDevil said:
With Xposed disabled, and SafetyNet passing at 100%, Netflix says that my device is not compatible. Even installed from Google Play.
BTW, Mario Run only works if Magisk Hide is enabled for it, I guess that's normal (with Xposed active this time)
Thanks for all the clarifications, now I have a better understanding of it all
Click to expand...
Click to collapse
I don't know why Netflix not work for you. I have Netflix in my phone and using every day.
What's your phone Android build?
Netflix must work on your phone.
I have U11 and installed viperU magisk version custom rom. Android 7.1.1 and August patch.
Custom kernel and classic PurifyOS Xposed with so much modules like xprivacy, appsetting, hush sms, no device check , location report enabler, chromepie, native clipboard, and ...
Sent from my HTC U11 using Tapatalk
I have Resurrection Remix 6.0.1 from september 2016.
Is there a log or something where I can check what is cause Netflix refusal to work?
Do you have Magisk Hide enabled for those apps?
Thanks.
EDIT
Actually, Mario Run is now giving me the code error screen
CTS profile is passing.
EDIT 2
Additional info:
Super Mario Run works fine only for two levels, then is error 804-5100.
Netflix above version 4 (5 and later) says it is incompatible with my device.
- Both appear on Play Store.
- Store version is 8.1.73, installed this afternoon and cleared data.
- Bootloader is unlocked (maybe I should try to relock?).
- I can't find device verification in Play Store settings (is not there), even tried this:
https://forum.xda-developers.com/oneplus-2/help/module-fix-google-play-certification-t3602629
with no luck.
- Xposed installed with modules but disabled (from Xposed Manager).
- SafetyNet passing 100%.
- Tried both and without Magisk Hide enabled for the apps.
- Disabled superuser and enabled Magisk Core only.
- Build version: 6.0.1_r66 - MOB31E (my signature is outdated).
- I had Lucky Patcher but I uninstalled it.
- Also tried this:
https://forum.xda-developers.com/apps/magisk/xiaomi-safetynet-fix-t3600431
Nothing works.
Maybe some other app(s) is being detected by Netflix? Maybe a log would help? Or a full bug report?
Is it the ROM version? Maybe is device specific? Should I open a thread on the device's forum? Am I missing something?
Thanks in advance!
EDIT 3
Android Pay seems to work. I don't have NFC, I only got to the add card screen, but I guess that's enough.
EDIT 4
Kernel is Boeffla.
you need root switch

Help magisk and google pay

I got a problem. My Google Pay app doesn't work. I got magisk v18 with 2 modules: "universal safetynet fix v3-beta1 (magisk v17 fix)" and google face unlock. When I check the status it shows the two "ctsprofile" and "basicintegrity" as true both. In magisk hide, I selected "Google Pay" and "NFC service" apps, but also without their selection it isn't still recognized by a pos. Now, I'm really sure my payment card works, my bro one with a phone unrooted works fine.
How should I do for make pos recognize my LG H815 rooted Gpay?
Sorry my bad english
p.s. I haven't any xposed or similar installed.
On my OP6 with OOS 9.0.3, CTS returns false without any additional modules and Google Pay and other apps detect root and refuse to work. That happened with the update from 17.2 to 18.0
Unfortunately, I got no helping hint in the main support thread or in the other thread here reporting on failing banking apps.
Later... after downgrading to Magisk 17.2, MagiskHide is working again... an issue is open on Github on that.
Yeah but gpay still not working in my phone, also with magisk 17.2
theicecave said:
Yeah but gpay still not working in my phone, also with magisk 17.2
Click to expand...
Click to collapse
I'll try that when I'm next time in a shop here... but as Safetynet works, GPay should too...
akxak said:
I'll try that when I'm next time in a shop here... but as Safetynet works, GPay should too...
Click to expand...
Click to collapse
And that's the paradox. Lemme know.
Just was at a shop and paid successfully with Google Pay. 17.2 rocks.
Idk why mine is not recognized by pos. And for sure I can say that my NFC works, I use it with my headsets. It's a problem with my phone, it's rooted, and that's it. Gpay cannot be used with root, although it accepted my card payment card after I protected my ctsprofile etc. I lost hope
My OP6 is unlocked and rooted with Magisk. Back on 17.2 SafetyNet checks succeed again and I just could pay... with Magisk 18 though it failed.
What phone and how did you root?
akxak said:
My OP6 is unlocked and rooted with Magisk. Back on 17.2 SafetyNet checks succeed again and I just could pay... with Magisk 18 though it failed.
What phone and how did you root?
Click to expand...
Click to collapse
Which module do you use to protect safetynet, ctsprofile etc?
Just asking.. 'cause, as I told, also with magisk 17.2 it doesn't work.
No module, just plain Magisk and MagiskHide on Google Pay.
akxak said:
No module, just plain Magisk and MagiskHide on Google Pay.
Click to expand...
Click to collapse
No module? I need necessary to use "universal safetynet fix" to activating all 4 green checks on main page of magisk. Without it, last 2 (inside safetynet fix) are red: ctsprofile:false and basicintegrity:false.
And magisk hide with or not selecting gpay doesn't change anything.
However I'm considering the main problem is my rom, resurrection remix.
On OOS I have only two arrows...
ctsProfile and basicIntegrity
But I am on a stock rom
Yeah sorry my bad, I mean just these two.
I'm considering to flash my stock rom again. But it was Android 6. I should set nova launcher and lots of changes to modernize it : D
Also my bro used a stock one to let gpay work. Modded all ones seems not working.
I'm on Android 9 Pie... Nova is great, I use it myself.. with starting on the Oneplus, I stuck to the stock OS and had gold experiences... on the OP6 even mire as I can update it and keep it rooted from within the OS not needing TWRP anymore... allowing an easy upgrade process.
Just flashed up the stock rom of my H815. I installed magisk 17.2 (it's an android nougat). I activated MagiskHide only for Google Pay; now safety net says ctsProfile: false and basicIntegrity: true. I watched this thread and just at beginning of section Safetynet fix - changing device fingerprint seems to be my problem. But my phone hasn't fingerprint (rofl). So after installing modules MagiskHide Props Config and Busybox by osm0sis cts is still false. Watched this because seems the only well built guide about; this problem is splitted anywhere. No more ideas.
theicecave said:
Just flashed up the stock rom of my H815. I installed magisk 17.2 (it's an android nougat). I activated MagiskHide only for Google Pay; now safety net says ctsProfile: false and basicIntegrity: true. I watched this thread and just at beginning of section Safetynet fix - changing device fingerprint seems to be my problem. But my phone hasn't fingerprint (rofl). So after installing modules MagiskHide Props Config and Busybox by osm0sis cts is still false. Watched this because seems the only well built guide about; this problem is splitted anywhere. No more ideas.
Click to expand...
Click to collapse
If I understand you correctly, I think you've misunderstood... It's not about a fingerprint scanner, it's the device fingerprint property that needs to change. You'll have to run the props script and select a certified fingerprint from the list (the module is not a flash and forget module). But if you're on a stock ROM I would expect the CTS check to pass, so there might be something else going on. Anyway, try changing the device fingerprint and see if anything changes.
Didgeridoohan said:
If I understand you correctly, I think you've misunderstood... It's not about a fingerprint scanner, it's the device fingerprint property that needs to change. You'll have to run the props script and select a certified fingerprint from the list (the module is not a flash and forget module). But if you're on a stock ROM I would expect the CTS check to pass, so there might be something else going on. Anyway, try changing the device fingerprint and see if anything changes.
Click to expand...
Click to collapse
Idk how to do this and where is this list. He just attached a .zip on his thread.
Or maybe I do not understand english enough. Very probably.
theicecave said:
Idk how to do this and where is this list. He just attached a .zip on his thread.
Or maybe I do not understand english enough. Very probably.
Click to expand...
Click to collapse
If you're talking about the thread you linked, the "he" is me...
Take a look in the module documentation, most things should be covered there. But basically, what you need is a Terminal emulator where you just type 'props' and press enter. After that you can just follow the ui to do the rest.
Didgeridoohan said:
If you're talking about the thread you linked, the "he" is me...
Take a look in the module documentation, most things should be covered there. But basically, what you need is a Terminal emulator where you just type 'props' and press enter. After that you can just follow the ui to do the rest.
Click to expand...
Click to collapse
Solved following this. In effect, not so different on what were you talking about in your guide. At the moment both ctsprofile and basicintegrity are true, I just need to try Google Pay in a pos.

Oreo + edxposed = safetynet does not pass

I'm not sure what I'm doing wrong.
I was running xposed without issue. I decided to upgrade to edxposed to get safetynet pass working.
I uninstalled xposed, rebooted, and checked that safetynet passed.
Installed riru core, edxposed (sandyhook), and the sandyhook's link's edxposed manager. Rebooted. Opened edxposed manager and enabled all modules. Rebooted again. Saw that my gravitybox UI settings changed upon reboot, so I'm assuming all is good.
Checked safetynet, both fails.
-edit-
I restarted my phone a few times after enabling black listing and it works now.
anonxlg said:
I'm not sure what I'm doing wrong.
I was running xposed without issue. I decided to upgrade to edxposed to get safetynet pass working.
I uninstalled xposed, rebooted, and checked that safetynet passed.
Installed riru core, edxposed (sandyhook), and the sandyhook's link's edxposed manager. Rebooted. Opened edxposed manager and enabled all modules. Rebooted again. Saw that my gravitybox UI settings changed upon reboot, so I'm assuming all is good.
Checked safetynet, both fails.
-edit-
I restarted my phone a few times after enabling black listing and it works now.
Click to expand...
Click to collapse
Thank you for the info. Then I will also try on my Samsung S7 What is actually the difference between those Ed-xposed and regular xposed
1eSkip said:
Thank you for the info. Then I will also try on my Samsung S7 What is actually the difference between those Ed-xposed and regular xposed
Click to expand...
Click to collapse
If i'm not wrong, edxposed is a fork of xposed. Using xposed = no safetynet pass AND it modifies system files. Edxposed = safetynet pass BECAUSE it's a magisk module which means it's a temporarily modifies system files.
However, google recently updated their safetynet checks, so it may or may not work in the future.

Device not Certified [SOLVED]

I feel like I am at a loss and i need help,like 2 days ago I reverted back to stock from a custom rom on my pixel 4 xl and google play store keeps saying device not certified, now I have come across this issue before in the past and fixed it with guides posted on the internet but this time they are not working. here is everything I have done:
-registered device as per guides on the internet, cleared play store data and even play services data and rebooted. waited a literal day. rebooted and cleared data of both then rebooted again
- i redownloaded the april image and flashed it to both slots and manually wiped user data in fastboot, tried registering again and waited atleast 10 minutes before trying anything else
- downloaded march image and did everything listed above
- downloaded the android 12 dev beta and did everything listed above.
- tried making safetynet pass with magisk and stuff in between there
- checked safetynet right off the bat on a fresh flash with zero modifications and it failed too.
- as i am posting this i am flashing a fresh download of the april image + platform tools on a different computer and different cable
if anyone has any suggestions please let me know.
Did you flash the Universal SafetyNet Fix module after rooting? If not, try that. Also make sure you enable Magisk Hide in the Manager settings, clear data & cache of Play Store and reboot. Sometimes it takes a while for it to show up as certified.
MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0
Universal SafetyNet Fix Magisk module Magisk module to work around Google's SafetyNet attestation. This module works around hardware attestation and recent updates to SafetyNet CTS profile checks. You must already be able to pass basic CTS...
forum.xda-developers.com
Lughnasadh said:
Did you flash the Universal SafetyNet Fix module after rooting? If not, try that. Also make sure you enable Magisk Hide in the Manager settings, clear data & cache of Play Store and reboot. Sometimes it takes a while for it to show up as certified.
MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0
Universal SafetyNet Fix Magisk module Magisk module to work around Google's SafetyNet attestation. This module works around hardware attestation and recent updates to SafetyNet CTS profile checks. You must already be able to pass basic CTS...
forum.xda-developers.com
Click to expand...
Click to collapse
i will give that a shot in a little bit here and update
Lughnasadh said:
Did you flash the Universal SafetyNet Fix module after rooting? If not, try that. Also make sure you enable Magisk Hide in the Manager settings, clear data & cache of Play Store and reboot. Sometimes it takes a while for it to show up as certified.
MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0
Universal SafetyNet Fix Magisk module Magisk module to work around Google's SafetyNet attestation. This module works around hardware attestation and recent updates to SafetyNet CTS profile checks. You must already be able to pass basic CTS...
forum.xda-developers.com
Click to expand...
Click to collapse
Thank you so much that did the trick. I in all honesty did not know that module existed so thank you so very much! <3
Buddyjohn said:
Thank you so much that did the trick. I in all honesty did not know that module existed so thank you so very much! <3
Click to expand...
Click to collapse
No problem. Glad you got it going
Lughnasadh said:
No problem. Glad you got it going
Click to expand...
Click to collapse
I know im kinda late.. But gosh, thank you so much

Categories

Resources