SafetyNet API Error after downgradind to 20.4 - Magisk

Hello,
I was on Magisk 20.4 and Magisk Manager 7.5.1 since June 2020 and everything worked fine. But then I installed EdXposed because I really need it and the result is
SafetyNet Check Success with
ctsProfile: false
basicIntegrity: false
Everything was working properly despite everything.
Yesterday April 26, I wanted to use MagiskHide 20.4 to hide the root from the applications that detect it.
It didn't work, so I updated Magisk 22.1 with the following result
SafetyNet API Error
basicIntegrity: false
ctsProfile: false
evalType N/A
Magisk 22.1 refused to grant root to any new installed applications.
MagiskHide 22.1 did not work with all applications and it left me 2 Magisk app.
I downgraded to Magisk 20.4 and Magisk Manager 7.5.1, but now I still have SafetyNet API Error.
Google Play Store and some applications take time to load too.
I'm really lost and sad to see these problems that didn't exist before.
Usually, I never updated ROM or Magisk after their first installation and that everything worked properly on each of my phones.
Thanks a lot in advance and really sorry for the inconvenience.
Cordially
Samsung Galaxy S10 G973FXXS5CTD1 ROM Stock exynos
Magisk 20.4 and Magisk Manager 7.5.1
EdXposed Manager 4.5.7 (45700) with 0.4.6.1 (4510) YAHFA

the api key expired on the old magisk hence the new version

I see, there is no solution to have the new api on an old version of Magisk ?
Because, Magisk 20.4 worked properly, but not Magisk 22.1 on my phone.
Moreover, SafetyNet Check is very important ?

I have the same result. Also I'm using Google Pay that still works... The Magisk code is broken for now... If you use 3rd party SafetyNet Checker from Google Play it probably fully pass safetynet, if you disable/remove edxposed before.
According by @Lord Sithek from my thread.

Thank you Danielisko

Related

[HELP] EdXposed Modules Not Working but Magisk Modules Work

OnePlus 7 Pro - 10.3.0
Magisk: 20.2
Magisk Manager: 7.5.0
EdXposed Manger: 4.5.3
Riru EdXposed: v0.4.6.0_beta(4471)(YAHFA)
Riru - Core: v19.5
So here's the breakdown, everything installed fine, Magisk and all SafetyNet test pass. Root checker passes. EdXposed shows a blue check saying that it's active.
I've installed Magisk Modules and they work as they should. But any EdXposed module i install installs correctly some I can even open the APK but they do not function. With the new Android Q GravityBox, it says that the framework is not responding meaning the apk doesn't see that the Xposed module is installed.
So far I've tried reinstalling Magisk, reinstalling EdXposed and nothing seems to work.
Anything anyone can think of that might fix this.
EDIT: Figured it out. Installed the latest Canary of EdXposed and that fixed it.
What was exactly this canary version?

edxposed v0.4.6.1 + EdXposed Manager = Safetynet Fail

Saw an update, thought cool finally out of beta, but upon upgrading, safetynet fails.
I didn't take a look too much into it, I did see on github that at least some users also had failing safetynet, but this was right at the same time as the google update to safetynet for magisk, so I couldn't rule that out for other users.
I've reverted back to v0.4.5.1 and edxposed installer and safetynet passes. I *think* it might be because edxposed installer has blacklist functionality. I couldn't find the equivalent setting on edxposed manager.
anonxlg said:
Saw an update, thought cool finally out of beta, but upon upgrading, safetynet fails.
I didn't take a look too much into it, I did see on github that at least some users also had failing safetynet, but this was right at the same time as the google update to safetynet for magisk, so I couldn't rule that out for other users.
I've reverted back to v0.4.5.1 and edxposed installer and safetynet passes. I *think* it might be because edxposed installer has blacklist functionality. I couldn't find the equivalent setting on edxposed manager.
Click to expand...
Click to collapse
Latest Xposed Manager try in settings menu scroll down to framework options enable:
App List mode
Pass Safetynet
To enable blacklist function - App List mode has to be enable. Then from main menu select Applications.
thanks, after some testing and restarting that did the trick.
I didn't see that the 'app list mode' is the blacklist and only turned on 'pass safetynet' thinking that was the only think I needed to do
I updated lineage and I can't get safetynet to pass again.
I verified that with edxposed disabled, it passes safetynet. I tried uninstalling/reinstalling edxposed and tried both sandhook and yahfa versions and it doesn't pass.
Scratching my head on how it doesn't working work anymore because from lineage update (my only guess).
anonxlg said:
I updated lineage and I can't get safetynet to pass again.
I verified that with edxposed disabled, it passes safetynet. I tried uninstalling/reinstalling edxposed and tried both sandhook and yahfa versions and it doesn't pass.
Scratching my head on how it doesn't working work anymore because from lineage update (my only guess).
Click to expand...
Click to collapse
In Edxposed Manager try downloading the canary release and flash through Magisk.
Also note that Google is starting to tighten it's grip in regards to Safety Net. Very basically it will fail with an unlocked bootloader.
https://mobile.twitter.com/topjohnwu/status/1237830555523149824
spawnlives said:
In Edxposed Manager try downloading the canary release and flash through Magisk.
Also note that Google is starting to tighten it's grip in regards to Safety Net. Very basically it will fail with an unlocked bootloader.
https://mobile.twitter.com/topjohnwu/status/1237830555523149824
Click to expand...
Click to collapse
I'm aware of that, but in my case, phone passed safetynet (with magisk, edxposed, and all modules the same) before updating lineage.
I should note that this is lineage 15.1 (A8.1) if it matters.
And that phones pre-pie are currently immune to that safetynet check because of old security hardware.
this work: https://repo.xposed.info/module/com.cofface.ivader
anonxlg said:
I'm aware of that, but in my case, phone passed safetynet (with magisk, edxposed, and all modules the same) before updating lineage.
I should note that this is lineage 15.1 (A8.1) if it matters.
And that phones pre-pie are currently immune to that safetynet check because of old security hardware.
Click to expand...
Click to collapse
On my spare S8 I've reinstall unofficial lineage 17.1 ( Android 10 ).
Using latest:
Stable version of magisk / manager
Edxposed manager - 4.5.7
Edxposed canary - 0.4.6.3 ( 4545 ) - Yahfa
Riru core - 19.8
This combination at the moment is passing safety net. Checked using magisk manager + two other apps from playstore. Also have Device is certified through play store. The latest play store version is 19.5.13 for my region.
Edxposed modules installed at moment
Xprivacylua
Minminguard
Resolver Activity Tweaks
installing HiddenCore Module did the trick, but i'm still curious why updating lineage broke safetynet or that using the older rirucore + edxposed passes safety net
I might have figured this problem, let me know if it helps you pass safetynet too as it did work on my device ( OP6T ):
Install everything just as the above steps,
-config magiskhide, install the fingerprints
-Install riru etc, install the canary version of sandhook
-put in airplane mode as soon as you reboot
-enable applist and blacklist google framework and services and playstore (also assuming you have done hidden these in magisk too)
-clear data from services, framework, playstore
- open playstore and check if youre logged in and its working
- Go check safetynet
Gpay is working for me flawlessly
As of april 25 this solution seems to work for me.
nousernamesorry said:
I might have figured this problem, let me know if it helps you pass safetynet too as it did work on my device ( OP6T ):
Install everything just as the above steps,
-config magiskhide, install the fingerprints
-Install riru etc, install the canary version of sandhook
-put in airplane mode as soon as you reboot
-enable applist and blacklist google framework and services and playstore (also assuming you have done hidden these in magisk too)
-clear data from services, framework, playstore
- open playstore and check if youre logged in and its working
- Go check safetynet
Gpay is working for me flawlessly
As of april 25 this solution seems to work for me.
Click to expand...
Click to collapse
I followed your order, but in magisk I have passed safetynet, but CTS and basicIntegrity is false
This the screenshot... S9 rooted + custom rom android 10 + kernel custom
Without xposed I had both positives
bmw320cd said:
I followed your order, but in magisk I have passed safetynet, but CTS and basicIntegrity is false
This the screenshot... S9 rooted + custom rom android 10 + kernel custom
Without xposed I had both positives
Click to expand...
Click to collapse
Sorry man, this solution no more works. It broke after April 27th.
So is there no current method to have edxposed/ru working while passing safetynet? Thanks
djjohnnyblaze said:
So is there no current method to have edxposed/ru working while passing safetynet? Thanks
Click to expand...
Click to collapse
At the moment still passing safety net using latest Riru core module + latest canary release of Edxposed.
System Crashes
nousernamesorry said:
I might have figured this problem, let me know if it helps you pass safetynet too as it did work on my device ( OP6T ):
Install everything just as the above steps,
-config magiskhide, install the fingerprints
-Install riru etc, install the canary version of sandhook
-put in airplane mode as soon as you reboot
-enable applist and blacklist google framework and services and playstore (also assuming you have done hidden these in magisk too)
-clear data from services, framework, playstore
- open playstore and check if youre logged in and its working
- Go check safetynet
Gpay is working for me flawlessly
As of april 25 this solution seems to work for me.
Click to expand...
Click to collapse
My system UI is crashing sometimes. Is it because of edxposed? I followed these steps and successfully passed the SafetyNet check. But my system is crashing sometimes!
I'm using sudohide module only!
romee_ahuja said:
My system UI is crashing sometimes. Is it because of edxposed? I followed these steps and successfully passed the SafetyNet check. But my system is crashing sometimes!
I'm using sudohide module only!
Click to expand...
Click to collapse
Hey, it could be that, maybe you have a module like gravitybox installed which is conflicting with your system configurations.
If not that, try disabling edxposed modules from magisk itself. If that fixes the solution, then it might be edxposed
One solution is disable module like gravitybox or update gravitybox

SafetyNet evaltype: N/A bug?

Hello! Some weeks ago i had passed safetynet API. Now i have both ctsprofile and basicintegrity to false and for evaltype is N/A. So I installed another SafetyNet checker from Google Play and it pass the SafetyNet API... Magisk internal bug?
Magisk v22.1 is installed
Magisk Manager v22.1 (22100) is installed
Magisk modules only:
- MagiskHide Props Config (spoofed from dreamlte to greatlte only) - latest version
- Systemless Hosts
- Universal SafetyNet Fix - latest version
- Viper4android fx - latest version
Magisk Hide is enabled
Device is Samsung Galaxy Note 8 (SM-N950F)
ROM: latest LineageOS 17.1 from this zip
Danielisko said:
Hello! Some weeks ago i had passed safetynet API. Now i have both ctsprofile and basicintegrity to false and for evaltype is N/A. So I installed another SafetyNet checker from Google Play and it pass the SafetyNet API... Magisk internal bug?
Magisk v22.1 is installed
Magisk Manager v22.1 (22100) is installed
Magisk modules only:
- MagiskHide Props Config (spoofed from dreamlte to greatlte only) - latest version
- Systemless Hosts
- Universal SafetyNet Fix - latest version
- Viper4android fx - latest version
Magisk Hide is enabled
Device is Samsung Galaxy Note 8 (SM-N950F)
ROM: latest LineageOS 17.1 from this zip
Click to expand...
Click to collapse
You're most probably passing Safety Net. It's just API Magisk issue, will be corected soon. There is a lot of discussion about this on the Magisk support thread. If you checked SafteyNet with third party app from Play Store and it's passing, all is ok
Lord Sithek said:
You're most probably passing Safety Net. It's just API Magisk issue, will be corected soon. There is a lot of discussion about this on the Magisk support thread. If you checked SafteyNet with third party app from Play Store and it's passing, all is ok
Click to expand...
Click to collapse
Strangely enough, it happens only on v22.1 but not v22.0, if I use v22.1 then update it to canary channel then it shows all test failed, but if I use v22.0 then doing the same thing it shows all passed. All this confuses me.

Passing SafetyNet on android 12 beta 1 with magisk and lsposed

Hi,
I'm running the new android 12 beta 1 on my pixel 4xl. I got magisk hide working for most things and can also use gpay without any workarounds. I have lsposed installed in order to use fingerface.
I now have one app that's still detecting that my phone is rooted but I'm also not passing ctsintegrity, I have the Magisk prop hide module installed but I'm not quite sure what to do next.
Can anyone point! Me in the right direction?
Peter
Did you try installing MagiskHide Props Config
From the magisk modules I was having the same problem on Android 11 and that fixed it so maybe it will work for you too on 12
You will never pass safetynet with lsposed, it modifies too many core components. This is pretty widely known.

MAGISK 25.2 - SafetyNET not passed

I have Redmi Note 7.
It was running on xiaomi.eu_multi_HMNote7_V11.0.6.0.PFGCNXM_v11-9. I had magisk installed, there were no problems with root detection.
I installed xiaomi.eu_multi_HMNote7_V11.0.7.0.PFGCNXM_v11-9 using OrangeFox Recovery.
Then my problems with Magisk began. I uninstalled magisk completely via orangefox recovery and install again v21.4 as zip. Finally I updated magisk manager and magisk module with success and now it is latest version 25.2. I can't check safetynet via magisk app, cuz there is no option, so I used app called YSNAC. It shows: Basic integrity: failed, CTS profile match: failed. I perform hide Magisk app, named new app as "Settings", but the old Magisk icon did not disappear (I don't know if it's ok).
I activate Zygisk and enforce deny list and set deny list (banking apps, play services, google play store).
I installed modules like MagiskHide Props Config and Universal SafetyNet Fix.
BTW. Why there is no more online searching modules via magisk manager?
Root working ok.
I don't know what can I do more. My banking apps detects that I have root.
mcichy10 said:
I have Redmi Note 7.
It was running on xiaomi.eu_multi_HMNote7_V11.0.6.0.PFGCNXM_v11-9. I had magisk installed, there were no problems with root detection.
I installed xiaomi.eu_multi_HMNote7_V11.0.7.0.PFGCNXM_v11-9 using OrangeFox Recovery.
Then my problems with Magisk began. I uninstalled magisk completely via orangefox recovery and install again v21.4 as zip. Finally I updated magisk manager and magisk module with success and now it is latest version 25.2. I can't check safetynet via magisk app, cuz there is no option, so I used app called YSNAC. It shows: Basic integrity: failed, CTS profile match: failed. I perform hide Magisk app, named new app as "Settings", but the old Magisk icon did not disappear (I don't know if it's ok).
I activate Zygisk and enforce deny list and set deny list (banking apps, play services, google play store).
I installed modules like MagiskHide Props Config and Universal SafetyNet Fix.
BTW. Why there is no more online searching modules via magisk manager?
Root working ok.
I don't know what can I do more. My banking apps detects that I have root.
Click to expand...
Click to collapse
I have the same issue since today on Galaxy s21 Ultra!
I decided to uninstall completely Magisk. Unfortunately SafetyNet still doesn't pass, banking aps not working. Only thing I can do is wipe all data, format to factory and install MIUI again. Maybe I'll try MIUI 12.
mcichy10 said:
I decided to uninstall completely Magisk. Unfortunately SafetyNet still doesn't pass, banking aps not working. Only thing I can do is wipe all data, format to factory and install MIUI again. Maybe I'll try MIUI 12.
Click to expand...
Click to collapse
try using Shamiko together with Zygisk and without forcing the denylist
I tried this before with zero success
With the MagiskHide Props config, you need to open a terminal, enter "su" and then "props". Then set the fingerprint to the certified one.
neelchauhan said:
With the MagiskHide Props config, you need to open a terminal, enter "su" and then "props". Then set the fingerprint to the certified one.
Click to expand...
Click to collapse
yup, I did that. Didn't work for me.
I performed "Format Data", flashed latest MIUI for my device, installed Magisk, Hided Magisk, activated Zygisk, Forced deny list and it's working well.
i tried like 4 different ways and NONE work
Universal SafetyNet Fix (didnt work)​zydisk (didnt work)
denylist (didnt work)
magiskhide proops config (didnt work)
i have a mi 9 with miui 13+android 12
EDIT: it just takes trial and error, had to try a couple of different devices and one that worked for me was mi 9 europe
I can pass safety net on magisk 25.2 . I don't install magisk hide props. I have few things installed and a modified Verison of universal safety fix and I am using zygisk.
Alot times I forget about messages on here . Telegram me if I don't get back to u on @Assassin4Hire
GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
Google SafetyNet attestation workarounds for Magisk - GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
github.com
Flash this.
Enjoy.
yot2703 said:
GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
Google SafetyNet attestation workarounds for Magisk - GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
github.com
Flash this.
Enjoy.
Click to expand...
Click to collapse
I tried this workaround in my Samsung SM-G531H with Android 7.1 and I tested it with the previously mentioned YASNAC app, and the SafetyNet Attestation tests (Basic Integrity and CTS profile match) PASSED!
Now, I'm able to use my bank app (BBVA) Thanks.

Categories

Resources