Safetynet invalid - Magisk

I'm currently on custom ROM (Android 7+) and using latest magisk version v.16.7 with safetyney passed using 'magiskhide prop. Configuration' module...the magisk manager I use is also the latest one...but currently I'm seeing the safetyney check of the manager is giving invalid result.... I've discussed with some of the superiors about it...they said it's because the API used by the apps is the old one...which is of no use now...
So what will happen about it??shall it be fixed at next manager update?or have to do any trick??
PS- though safetynet check is invalid...I got to know safetynet still works... it's just about the checking process...
Thanks in advance

arij8das said:
So what will happen about it??shall it be fixed at next manager update?or have to do any trick??
Click to expand...
Click to collapse
You've already found why, so for now it's just to not bother with it. There might be an update to the SafetyNet checkers (including Magisk Manager) or there might not. For now it's just a cosmetical thing, MagiskHide is still working as it should.

Related

Magisk safety net fails not sure why.

Hi
I'm using a Samsung Galaxy S4
I rooted the stock Samsung rom with SuperSU prior to install Magisk
At first I couldn't install 13.3 I had to install 12.0 because of some unknown reason installing 13.3 I got the error image mount failed same with all previous 13. versions however now 13.3 is now installed and SuperSU isn't installed.
When I run the SafetyNet Check in Magisk it reports:
ctsProfile: false
basicIntegrity: false
I want to be able to use apps like Android pay and such
Can someone please help me with getting this to work
Thanks!
Magisk v12.0 can't pass SafetyNet without workarounds like Universal SafetyNet fix module (and since the last update to SafetyNet a few days ago I've no idea if that works either).
You can't use Magisk to pass SafetyNet with SuperSU installed.
Here's some reading for you:
https://forum.xda-developers.com/apps/magisk/magisk-magisk-hide-troubleshooting-tips-t3561828
Pro tip: Try using the search function and browse the stickied threads before posting. There are very few things that hasn't been covered already in one way or another...
Didgeridoohan said:
Magisk v12.0 can't pass SafetyNet without workarounds like Universal SafetyNet fix module (and since the last update to SafetyNet a few days ago I've no idea if that works either).
You can't use Magisk to pass SafetyNet with SuperSU installed.
Here's some reading for you:
https://forum.xda-developers.com/apps/magisk/magisk-magisk-hide-troubleshooting-tips-t3561828
Pro tip: Try using the search function and browse the stickied threads before posting. There are very few things that hasn't been covered already in one way or another...
Click to expand...
Click to collapse
I've got 13.3 installed and SuperSU isn't installed plus I've already read a lot on this subject and most of my searches did nothing for me that's why I thought I would make a thread to see if anyone could help me.
AyanamiRei0 said:
I've got 13.3 installed and SuperSU isn't installed plus I've already read a lot on this subject and most of my searches did nothing for me that's why I thought I would make a thread to see if anyone could help me.
Click to expand...
Click to collapse
That was not very clear from your first post...
If you haven't already, start by reading through the link I posted. You wan't post #4.
Didgeridoohan said:
That was not very clear from your first post...
If you haven't already, start by reading through the link I posted. You wan't post #4.
Click to expand...
Click to collapse
Interesting trying to start magiskhide manually does nothing.
You could have remnants of Su on your phone. Even if you use the full uninstall method you can have leftovers. Tried a complete fresh reinstall?
phuhcue said:
You could have remnants of Su on your phone. Even if you use the full uninstall method you can have leftovers. Tried a complete fresh reinstall?
Click to expand...
Click to collapse
Oh it's working fine now installing Lineage OS and then install Magisk and it works perfectly.
With me my experiments with magisk in the past left some files in my data partition behind which makes safetynet fail.
I found them by going into twrp recovery, starting and adb shell and then executing find . | grep -i magisk
the two files i found were:
data/data/com.google.android.gms/files/backup_diff_script/com.topjohnwu.magisk
data/property/persist.magisk.hide
i deleted them with rm and safety net worked again.
So I can confirm that for my phone, unlocked bootloader, custom modem and custom recovery does not matter at all. But if your filesystem still contains traces of magisk, is a nono for google safetynet, pretty silly this road they are taking here.
safety net
i have the same problem on galaxy note 3 with magisk 15.3 on my galaxy s7 everything is ok but in note 3 i have safety net false...
can anyone help me?
spanpana said:
i have the same problem on galaxy note 3 with magisk 15.3 on my galaxy s7 everything is ok but in note 3 i have safety net false...
can anyone help me?
Click to expand...
Click to collapse
Old device... If the kernel version is lower than 3.8 it'll likely not have support for mount namespace and MagiskHide won't work. A custom kernel or ROM might work...
Didgeridoohan said:
Old device... If the kernel version is lower than 3.8 it'll likely not have support for mount namespace and MagiskHide won't work. A custom kernel or ROM might work...
Click to expand...
Click to collapse
thank's for your reply...!
i have custom rom resurection remix v.5.8.2 but i didnt change the kernel can you explain me how to do that please because i don't know...?
spanpana said:
thank's for your reply...!
i have custom rom resurection remix v.5.8.2 but i didnt change the kernel can you explain me how to do that please because i don't know...?
Click to expand...
Click to collapse
Check your kernel version first (usually found in Settings - About Phone). If it's less than 3.8, ask for help in your device's forum for if there's any custom kernels or ROMs available with an updated kernel.
Didgeridoohan said:
Check your kernel version first (usually found in Settings - About Phone). If it's less than 3.8, ask for help in your device's forum for if there's any custom kernels or ROMs available with an updated kernel.
Click to expand...
Click to collapse
ok my friend thank you very much...!:laugh::good:
Didgeridoohan said:
Old device... If the kernel version is lower than 3.8 it'll likely not have support for mount namespace and MagiskHide won't work. A custom kernel or ROM might work...
Click to expand...
Click to collapse
That's interesting. I get the same message on my old phone (running the 3.4.113 kernel), but I'm unable to even open Mario Run if MagiskHide is disabled. But when it's enabled, the game runs just fine. Is that normal? I thought Mario Run made use of SafetyNet... I'm using microG + DroidGuard Helper. I've tried running Android Pay, but I get this error message. But I'm not even sure if Android Pay is supposed to work since I'm using microG... What other apps use SafetyNet so I can try them?
Thanks.
robotsrules said:
That's interesting. I get the same message on my old phone (running the 3.4.113 kernel), but I'm unable to even open Mario Run if MagiskHide is disabled. But when it's enabled, the game runs just fine. Is that normal? I thought Mario Run made use of SafetyNet... I'm using microG + DroidGuard Helper. I've tried running Android Pay, but I get this error message. But I'm not even sure if Android Pay is supposed to work since I'm using microG... What other apps use SafetyNet so I can try them?
Thanks.
Click to expand...
Click to collapse
MagiskHide can't do it's thing to hide itself on such an old kernel, but it can still hide sensitive prop values. That's why Mario Run works... IIRC it looks for ro.debuggable, on of the props changed to "safe" values by MagiskHide.
Didgeridoohan said:
MagiskHide can't do it's thing to hide itself on such an old kernel, but it can still hide sensitive prop values. That's why Mario Run works... IIRC it looks for ro.debuggable, on of the props changed to "safe" values by MagiskHide.
Click to expand...
Click to collapse
Oh, I get it now... Thanks

Galaxy S5 SafetyNet (Pass before Magisk install, Fail directly after?)

So I'm in the process of getting a GPS spoofer going and I flashed pre March 17' stock firmware (Safety net still passes), Installed TWRP (Safety net still passes), install Magisk Manager APK (Safety net still passes), boot into TWRP and install Magisk and Safety Net fails. All the guides I've read says this shouldn't happen? How do I fix it?
Please elaborate, send some screenshots, some logs or something useful...
But anyways, let's try one thing at least, have you tried going in: Magisk Manager > Settings > and enabling the "Hide Magisk Manager" option? If not, try it out. Does that make any difference?
Cheers
SpartanG01 said:
So I'm in the process of getting a GPS spoofer going and I flashed pre March 17' stock firmware (Safety net still passes), Installed TWRP (Safety net still passes), install Magisk Manager APK (Safety net still passes), boot into TWRP and install Magisk and Safety Net fails. All the guides I've read says this shouldn't happen? How do I fix it?
Click to expand...
Click to collapse
Which one fails? ctsProfile or basicIntegrity?
If ctsProfile fails, change device fingerprint using this https://forum.xda-developers.com/apps/magisk/module-magiskhide-props-config-t3789228
If both basicIntegrity and ctsProfile fails, well that can't be helped... Maybe try installing the latest beta version of magisk if you didn't already
abacate123 said:
Please elaborate, send some screenshots, some logs or something useful...
But anyways, let's try one thing at least, have you tried going in: Magisk Manager > Settings > and enabling the "Hide Magisk Manager" option? If not, try it out. Does that make any difference?
Cheers
Click to expand...
Click to collapse
I don't know how to pull the logs or what would be useful here? As for screen shots, I dunno it's pretty cut and dry lol it passes without magisk installed and then fails both tests as soon as i install it. I hid Magisk using the feature you suggested and it did not change anything. Lookout actually warned me it was risk ware after i hid magisk. (I just flashed stock firmware so yeah, lookout is on there)
n1Bb135 said:
Which one fails? ctsProfile or basicIntegrity?
If ctsProfile fails, change device fingerprint using this https://forum.xda-developers.com/apps/magisk/module-magiskhide-props-config-t3789228
If both basicIntegrity and ctsProfile fails, well that can't be helped... Maybe try installing the latest beta version of magisk if you didn't already
Click to expand...
Click to collapse
Yeah they both fail. I'll try the beta.
Edit: Beta Works!
SpartanG01 said:
I don't know how to pull the logs or what would be useful here?
Click to expand...
Click to collapse
There's a button called "Logs", right above the "Settings" button, when you open the Manager side menu.
Edit: Glad you got it working
SpartanG01 said:
So I'm in the process of getting a GPS spoofer going and I flashed pre March 17' stock firmware (Safety net still passes), Installed TWRP (Safety net still passes), install Magisk Manager APK (Safety net still passes), boot into TWRP and install Magisk and Safety Net fails. All the guides I've read says this shouldn't happen? How do I fix it?
Click to expand...
Click to collapse
Nice to see you got it sorted, but I just wanted to add that it's quite likely that you would have been able to get things working by just toggling MagiskHide off and on again. For future reference... :good:

Can't get Magisk to work on Pixel

I have pixel (sailfish) running lineage 15.1 w/ microG and I've followed the exact steps from the official Magisk install page using Magisk v18.1 with manager 7.0 only to get the same safetynet api error. Ive even tried other suggested installation methods from: https://android.gadgethacks.com/how-to/install-magisk-your-pixel-pixel-xl-0177522/
And it left me in a bootloop whereby I had to wipe and reinstall everything.
Anybody please help!
If you can get Magisk up and running, but get a SafetyNet API error when trying to check SafetyNet in the Manager, the problem lies elsewhere, most likely with your microG setup (or possibly that the Manager snet.apk hasn't downloaded properly, clear data for the Manager to fix that).
Test with a separate SafetyNet checker, and also test MagiskHide by adding a root app to the Hide list (if it can't detect root, MagiskHide works). If you get the same error with the other app we know that the problem likely isn't with Magisk.
Sorry for the newb question, but how do you clear Manager data? Thanks.
conundrew said:
Sorry for the newb question, but how do you clear Manager data? Thanks.
Click to expand...
Click to collapse
By going to the app information in the Android settings.
Still doesn't work. Getting the same message after everything you've suggested.
Even with a separate SafetyNet checker app? In that case it is very likely that it is your microG setup that isn't working. Ask for advice in your ROM thread.
Didgeridoohan said:
If you can get Magisk up and running, but get a SafetyNet API error when trying to check SafetyNet in the Manager, the problem lies elsewhere, most likely with your microG setup (or possibly that the Manager snet.apk hasn't downloaded properly, clear data for the Manager to fix that).
Test with a separate SafetyNet checker, and also test MagiskHide by adding a root app to the Hide list (if it can't detect root, MagiskHide works). If you get the same error with the other app we know that the problem likely isn't with Magisk.
Click to expand...
Click to collapse
Didgeridoohan said:
Even with a separate SafetyNet checker app? In that case it is very likely that it is your microG setup that isn't working. Ask for advice in your ROM thread.
Click to expand...
Click to collapse
Not sure exactly what I did but when I cleared Manager data and changed some microG settings, I was able to finally get SafetyNet Check Success but now it says: ctsProfile: false and basicIntegrity: false. Any advice?
conundrew said:
Not sure exactly what I did but when I cleared Manager data and changed some microG settings, I was able to finally get SafetyNet Check Success but now it says: ctsProfile: false and basicIntegrity: false. Any advice?
Click to expand...
Click to collapse
https://www.didgeridoohan.com/magisk/MagiskHide#hn_SafetyNet
Didgeridoohan said:
https://www.didgeridoohan.com/magisk/MagiskHide#hn_SafetyNet
Click to expand...
Click to collapse
So I did a clean install of LineageOS 16 only (no microG) and then installed Magisk following installation instructions and when I opened up Magisk Manager I don't see the option to do SafetyNet Check anymore. When I ran SafetyNet Test it said "GooglePlayServices is not available on this device". I was given the impression that microG was the problem which is why I installed LineageOS without microG, but it's still not working. Please help!
If you have neither Gapps or MicroG installed there's no way you can use anything SafetyNet related. It's Google's system, so you're going to have to install one or the other...
Didgeridoohan said:
https://www.didgeridoohan.com/magisk/MagiskHide#hn_SafetyNet
Click to expand...
Click to collapse
Didgeridoohan said:
If you have neither Gapps or MicroG installed there's no way you can use anything SafetyNet related. It's Google's system, so you're going to have to install one or the other...
Click to expand...
Click to collapse
Thank you!
Is there any benefit or even necessary to install a custom kernel, like ElementalX, for getting Magisk to work properly? Thanks.
conundrew said:
Thank you!
Is there any benefit or even necessary to install a custom kernel, like ElementalX, for getting Magisk to work properly? Thanks.
Click to expand...
Click to collapse
No.

Safetynet checks failing with Magisk 20.4

hi, i just flashed my xiaomi mix phone with Magisk 20.4. everything is new but the safetynet checks are failing.
i have previously tried on riru and edxposed. the checks say YES but i still cannot load pokemon go. i think those fixes are fake and not working, Google seems to be able to detect it still.
Can anyone help?
thanks.
jasonjiangyu said:
hi, i just flashed my xiaomi mix phone with Magisk 20.4. everything is new but the safetynet checks are failing.
i have previously tried on riru and edxposed. the checks say YES but i still cannot load pokemon go. i think those fixes are fake and not working, Google seems to be able to detect it still.
Can anyone help?
thanks.
Click to expand...
Click to collapse
Having the exact same issue with my Mix 3. Just flashed a few moments ago. Been looking at the other threads and it seems that no fix works as of now. Hoping that it isn't permanent as Google is cracking down on unlocked bootloaders.
Try to hide what you want via magisk hide.
Sorry, but that is not helpful. Same thing here. Device passed SafetyNet on 20.3. After upgrade to 20.4 it fails. What can I do to figure out what changed?
please refer here to set it up in your phone.
Be notice: If you don't use edxposed, just skip it. If you do, please remember to install canary version of edxposed in Edxposed manager !
Kris
Kris Chen said:
please refer here to set it up in your phone.
Be notice: If you don't use edxposed, just skip it. If you do, please remember to install canary version of edxposed in Edxposed manager !
Kris
Click to expand...
Click to collapse
Thank you! You were right, this was not caused by the Magisk upgrade, but by EdXposed. After upgrading to Canary version SafetyNet passes again.
I'd also like to add (in case someone stumbles across this thread looking for answers) that Magisk v20.4+ has MagiskHide disabled by default. On a fresh install you will have to enable it before Hide will be able to do it's thing.

Question [ROOT] Google Wallet on PX7?

Hi everyone! I have a rooted Pixel 7, with Magisk working perfectly. The only issue i have is with Google Wallet, even SafetyNetFix and Zygisk hide list didn't work. Can anyone with a rooted A13 device pay contactless?
Yes, it works perfectly with GPay/GWallet.
You shouldn't need to do anything else after enabling Zygisk, installing SafetyNetFix, then test if it passes the tests.
Which it should. If it doesn't, use the 2.3.1_MOD2-fix, not 2.4.0.
Had issues with 2.4.0 being inconsistent.
Download 'YASNAC' from the store, and run the test.
Does everything work?
If no, install 2.3.1_MOD2.
If yes, make sure you kill playstore and then wipe storage and buffer.
Do the same for gpay/wallet.
Reboot, and it should work.
Nothing should be added to the Zygisk hide-list.
Hi,
I also had the same problem.
Then I deleted the latest safetynetfix and used the version: v2.3.1
It works fine with this.
dmbardal said:
Yes, it works perfectly with GPay/GWallet.
You shouldn't need to do anything else after enabling Zygisk, installing SafetyNetFix, then test if it passes the tests.
Which it should. If it doesn't, use the 2.3.1_MOD2-fix, not 2.4.0.
Had issues with 2.4.0 being inconsistent.
Download 'YASNAC' from the store, and run the test.
Does everything work?
If no, install 2.3.1_MOD2.
If yes, make sure you kill playstore and then wipe storage and buffer.
Do the same for gpay/wallet.
Reboot, and it should work.
Nothing should be added to the Zygisk hide list.
Click to expand...
Click to collapse
Google Wallet still no worky after installing v2.3.1. Where can i find 2.3.1_MOD2?
LeoPeink said:
It doesn
Google Wallet still no worky after installing v2.3.1. Where can i find 2.3.1_MOD2?
Click to expand...
Click to collapse
https://forum.xda-developers.com/attachments/safetynet-fix-v2-3-1-mod_2-1-zip.5795137/
Link to comment by Displax:
MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0
Universal SafetyNet Fix Magisk module Magisk module to work around Google's SafetyNet attestation. This module works around hardware attestation and recent updates to SafetyNet CTS profile checks. You must already be able to pass basic CTS...
forum.xda-developers.com
Installed 2.3.1_mod2.
YASNAC gives me "pass" on Basic Integrity but "Fail" on CTS profile match.
Google Wallet still gives me the "your device does not meet security requirements to pay contactless".
Any further advice?
EDIT: Hide Props Configuration Module is configured to spoof the device as a Pixel 6.
EDIT 2: I will install the Feburary update on my rooted phone, I'll retry when it is up to date so i dont have to mess with fingerprints. Thank you who helped
seanho12345 said:
Did you reboot the phone after clearing it? I've been wiping it a few time but it still not seemed to work.
Click to expand...
Click to collapse
dmbardal said:
https://forum.xda-developers.com/attachments/safetynet-fix-v2-3-1-mod_2-1-zip.5795137/
Link to comment by Displax:
MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0
Universal SafetyNet Fix Magisk module Magisk module to work around Google's SafetyNet attestation. This module works around hardware attestation and recent updates to SafetyNet CTS profile checks. You must already be able to pass basic CTS...
forum.xda-developers.com
Click to expand...
Click to collapse
LeoPeink said:
Installed 2.3.1_mod2.
YASNAC gives me "pass" on Basic Integrity but "Fail" on CTS profile match.
Google Wallet still gives me the "your device does not meet security requirements to pay contactless".
Any further advice?
EDIT: Hide Props Configuration Module is configured to spoof the device as a Pixel 6.
EDIT 2: I will install the Feburary update on my rooted phone, I'll retry when it is up to date so i dont have to mess with fingerprints. Thank you who helped
Click to expand...
Click to collapse
not work with me
salamdiab said:
not work with me
Click to expand...
Click to collapse
Dont use props-modules.
Can you post your setup?
Like I've posted mine here

			
				
dmbardal said:
Dont use props-modules.
Can you post your setup?
Like I've posted mine here
Click to expand...
Click to collapse
Here's my current Magisk hidelist and module setup. I'm using Shamiko for hiding apps from root
I've had gpay working this entire time used it yesterday around 6PM EST. This morning went to the gas station and got the error the device doesn't meet the software requirements.
Just saw the update for Shimako and Safety net fix. Just ran it and cleared Gpay and Google Play. All looks good just need to test it out now.
canibuz said:
I've had gpay working this entire time used it yesterday around 6PM EST. This morning went to the gas station and got the error the device doesn't meet the software requirements.
Just saw the update for Shimako and Safety net fix. Just ran it and cleared Gpay and Google Play. All looks good just need to test it out now.
Click to expand...
Click to collapse
I'll try again later with Shimako.
To test Google Wallet, you can remove your credit card and add it back: if it does not give you the "unable to pay contactless on this device" you should be clear.
LeoPeink said:
I'll try again later with Shimako.
To test Google Wallet, you can remove your credit card and add it back: if it does not give you the "unable to pay contactless on this device" you should be clear.
Click to expand...
Click to collapse
Just tested it out and it failed.
Can confirm that the new 3.0 MOD from Displax works flawlessly. I just installed it and everything is working.
https://github.com/Displax/safetynet-fix/releases/download/v2.3.1-MOD_3.0/safetynet-fix-v2.3.1-MOD_3.0.zip
seanho12345 said:
Can confirm that the new 3.0 MOD from Displax works flawlessly. I just installed it and everything is working.
https://github.com/Displax/safetynet-fix/releases/download/v2.3.1-MOD_3.0/safetynet-fix-v2.3.1-MOD_3.0.zip
Click to expand...
Click to collapse
Ok it passes tests and lets me add a card to Google Wallet without warnings. I'll try to pay ASAP
If anyone else sees this thread, keep up to date here: https://github.com/Displax/safetynet-fix/releases
The latest version is v2.4.0-MOD_1.2 and works across all devices (not just Google Pixel) for passing safetynet / google pay etc...

Categories

Resources