Database Develop

Magisk safetynet no longer passing

Within the past month Magisk can no longer pass the safetynet check. Ctsprofile fails and basicintegrity fails. I am on Magisk v20(20000) and Magisk manager v7.3.5(243). I've performed the following steps...
1. Turned off USB debug
2. Confirmed root check fails when hidden by Magisk and does NOT fail when not hidden by Magisk.
Any suggestions?

I found out it was Riru Exposed module. I went into Edexposed, enabled black/whitelist, rebooted, black listed Google play and Google play services, rebooted and safetynet check passed in Magisk.

JDubbed said:
I found out it was Riru Exposed module. I went into Edexposed, enabled black/whitelist, rebooted, black listed Google play and Google play services, rebooted and safetynet check passed in Magisk.
Click to expand...
Click to collapse
I was just about to post the same. Blacklisting those in Edxposed worked for me when nothing else did.
Does this indicate that Google is deploying countermeasures against Xposed framework?

I swapped out the Xposed installer for the Xposed manager and now the blacklist method is working at the moment. Google pay works.

gboybama said:
Does this indicate that Google is deploying countermeasures against Xposed framework?
Click to expand...
Click to collapse
Google has ALWAYS updated SafetyNet to block root users and Xposed users-- That's a large reason why both Magisk and edXposed were created, in the first place. LOL! While it's there to prevent hacking/abuse to understandably legitimate sources (banking apps, auction sites and storefronts, etc.), it's collaborated heavily with Niantic (developers of Pokémon GO) and updated a bunch of its more strict checks because of Pokémon GO.
Thanks to everyone for the tips, though!
Sent from my LG V20 (VS995), Alpha Omega ROM, Oreo 8.0, rooted (Magisk 19.3), using Tapatalk

Cant access local government app due to magisk root

Hi all
I have samsung galaxy a22 5g rooted with magisk and my local government app service nsw which carries a bunch of licenses and stuff I need for work is unaccessable now. It says die to not using official software.
Is there something I can do to get this app working with magisk root?
TIA

Try to use magisk hide, which is in the app

Champdroid said:
Is there something I can do to get this app working with magisk root?
Click to expand...
Click to collapse
I think Magisk v23 stable was the last release with MagiskHide. For newer releases Zygisk to the rescue...
[Discussion] Magisk - The Age of Zygisk.
This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...
forum.xda-developers.com
You'll probably need the safetynet-fix and Props Config modules.
In Magisk v24 enable Zygisk along with Enforce DenyList then Configure DenyList and select the app. You may need to uninstall the app and reinstall, then add it to DenyList before starting the app fresh. An alternative to reinstalling that usually works is clearing the app's storage in Settings/Apps.
If the app still won't play ball it may not be possible to spoof it.

manjaroid said:
I think Magisk v23 stable was the last release with MagiskHide. For newer releases Zygisk to the rescue...
[Discussion] Magisk - The Age of Zygisk.
This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...
forum.xda-developers.com
You'll probably need the safetynet-fix and Props Config modules.
In Magisk v24 enable Zygisk along with Enforce DenyList then Configure DenyList and select the app. You may need to uninstall the app and reinstall, then add it to DenyList before starting the app fresh. An alternative to reinstalling that usually works is clearing the app's storage in Settings/Apps.
If the app still won't play ball it may not be possible to spoof it.
Click to expand...
Click to collapse
^

manjaroid said:
I think Magisk v23 stable was the last release with MagiskHide. For newer releases Zygisk to the rescue...
[Discussion] Magisk - The Age of Zygisk.
This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...
forum.xda-developers.com
You'll probably need the safetynet-fix and Props Config modules.
In Magisk v24 enable Zygisk along with Enforce DenyList then Configure DenyList and select the app. You may need to uninstall the app and reinstall, then add it to DenyList before starting the app fresh. An alternative to reinstalling that usually works is clearing the app's storage in Settings/Apps.
If the app still won't play ball it may not be possible to spoof it.
Click to expand...
Click to collapse
Legend that did the trick. Thank you very much.

Question OP10PRO, NE2210->NE2211, Google Pay doesnt work.

Hi.
I have a problem to add a Card to Google Pay. There is info "couldn't finish setup to pay in shops"
Fix problems with tap to pay transactions - Google Wallet Help
If you can’t complete a contactless payment, use these steps to help you solve the problem. Step 1: Check that your app & Play Services are up to date Make sure that your Google Wallet app
support.google.com
Is there a chance to add a card?
Who had similar problem?
BTW:
I see now, that I have to app (GPAY (only for India, Indonesia and US) and Google Pay).
Google pay show me"The phone does not meet the security requirements"
BR
Krys

flashka78 said:
Hi.
I have a problem to add a Card to Google Pay. There is info "couldn't finish setup to pay in shops"
Fix problems with tap to pay transactions - Google Wallet Help
If you can’t complete a contactless payment, use these steps to help you solve the problem. Step 1: Check that your app & Play Services are up to date Make sure that your Google Wallet app
support.google.com
Is there a chance to add a card?
Who had similar problem?
BTW:
I see now, that I have to app (GPAY (only for India, Indonesia and US) and Google Pay).
Google pay show me"The phone does not meet the security requirements"
BR
Krys
Click to expand...
Click to collapse
You need to turn on zygisk in magisk.flash safety net fix then You need to add gpay and Google pay to the denylist then toggle the enforce denylist toggle off then flash the shamiko module and reboot
GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
Google SafetyNet attestation workarounds for Magisk - GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
github.com
GitHub - LSPosed/LSPosed.github.io
Contribute to LSPosed/LSPosed.github.io development by creating an account on GitHub.
github.com

toolhas4degrees said:
You need to turn on zygisk in magisk.flash safety net fix then You need to add gpay and Google pay to the denylist then toggle the enforce denylist toggle off then flash the shamiko module and reboot
GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
Google SafetyNet attestation workarounds for Magisk - GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
github.com
GitHub - LSPosed/LSPosed.github.io
Contribute to LSPosed/LSPosed.github.io development by creating an account on GitHub.
github.com
Click to expand...
Click to collapse
Is any tutorial for it? Can u help me for OnePlus10PRO?
Do I need any Recovery Project? Like Team Win Recovery Project?
Or can I just lock bootloader for NE2211? It will not help?
Screenshot
Captured with Lightshot
prnt.sc
Problem is with CTS profile match.
Thx in advance for help.

Flash safety net fix module.
There is no custom recovery for this device

toolhas4degrees said:
Flash safety net fix module.
There is no custom recovery for this device
Click to expand...
Click to collapse
How? (Flash safety net fix module). Can u drop me tutorial?
There is no TWRP for ONEPLUS?
Thx

I gave you the link to the magisk module. If you are not rooted via magisk nothing will work from what I told you. Google search it. I have to go to work. Later

flashka78 said:
How? (Flash safety net fix module). Can u drop me tutorial?
There is no TWRP for ONEPLUS?
Thx
Click to expand...
Click to collapse
There's no TWRP yet for the 10 Pro. Hopefully there will be something developed for us...

galaxys said:
There's no TWRP yet for the 10 Pro. Hopefully there will be something developed for us...
Click to expand...
Click to collapse
So how to install magisk?

flashka78 said:
So how to install magisk?
Click to expand...
Click to collapse
OnePlus 10 Pro NE2215 ***ROOTED*** (EX01 Update! READ BEFORE UPDATING)
This is for the NE2215 Rom. Step 1: Unlock your bootloader. Step 2: Download and install Magisk Stable or Canary. Your choice, but I used Canary. https://github.com/topjohnwu/Magisk Step 3: You can use either patch the stock boot or use my...
forum.xda-developers.com
Unlock bootloader, enable USB debugging, and then:
adb reboot bootloader
fastboot boot bootimagename.img
then you install Magisk, open Magisk and choose to install, do the direct install.
The image linked there should be fine for booting just to get root even though it's not for your specific device so just don't flash it.
Recovery flashing of Magisk is not supported anymore even on devices that have working TWRP. You either have to temporarily boot an already patched boot image like we are doing here or extract the payload.bin of the ROM you want to patch and copy the files to the phone, install Magisk, and have it patch the boot image and then manually flash with fastboot. Much easier to just get an image that someone already patched.

EtherealRemnant said:
OnePlus 10 Pro NE2215 ***ROOTED*** (EX01 Update! READ BEFORE UPDATING)
This is for the NE2215 Rom. Step 1: Unlock your bootloader. Step 2: Download and install Magisk Stable or Canary. Your choice, but I used Canary. https://github.com/topjohnwu/Magisk Step 3: You can use either patch the stock boot or use my...
forum.xda-developers.com
Unlock bootloader, enable USB debugging, and then:
adb reboot bootloader
fastboot boot bootimagename.img
then you install Magisk, open Magisk and choose to install, do the direct install.
The image linked there should be fine for booting just to get root even though it's not for your specific device so just don't flash it.
Recovery flashing of Magisk is not supported anymore even on devices that have working TWRP. You either have to temporarily boot an already patched boot image like we are doing here or extract the payload.bin of the ROM you want to patch and copy the files to the phone, install Magisk, and have it patch the boot image and then manually flash with fastboot. Much easier to just get an image that someone already patched.
Click to expand...
Click to collapse
Hi. Done.
Google pay and Revolut doesnt work .
Please check photos...
Any idea what next?
Thx in advance.

flashka78 said:
Hi. Done.
Google pay and Revolut doesnt work .
Please check photos...
Any idea what next?
Thx in advance.
Click to expand...
Click to collapse
I don't have this device but all you should need to do is install Universal SafetyNet Fix module and hide Google Play Store and Google Play Services in the DenyList.
Pass Safetynet with Magisk
Hi guys, did someone managed to pass Safetynet test with rooter oneplus 10 pro ? I tried to hide Magisk and use zygisk like I was doing with my op3t. But not passing safetynet here. I'm with last Magisk version (24.3) Managed to pass basic...
forum.xda-developers.com

EtherealRemnant said:
I don't have this device but all you should need to do is install Universal SafetyNet Fix module and hide Google Play Store and Google Play Services in the DenyList.
Pass Safetynet with Magisk
Hi guys, did someone managed to pass Safetynet test with rooter oneplus 10 pro ? I tried to hide Magisk and use zygisk like I was doing with my op3t. But not passing safetynet here. I'm with last Magisk version (24.3) Managed to pass basic...
forum.xda-developers.com
Click to expand...
Click to collapse
I have a magisk version 23.0 (23000) there is no Deny List at the setting.
Should I update to version 24.3 (24300) and hide at DenyList? (what application? Revolut, Google Play, Google Pay? ANy services?)
Should I also hide Magisk?
Thx for help.

Install magisk 24300
The zygisk and safety net fix.
If you've got Riru installed then it may cause issues.

flashka78 said:
I have a magisk version 23.0 (23000) there is no Deny List at the setting.
Should I update to version 24.3 (24300) and hide at DenyList? (what application? Revolut, Google Play, Google Pay? ANy services?)
Should I also hide Magisk?
Thx for help.
Click to expand...
Click to collapse
Yes. Enable zygisk on new one. Also add both Google pay apps to the dentlist

MAGISK 25.2 - SafetyNET not passed

I have Redmi Note 7.
It was running on xiaomi.eu_multi_HMNote7_V11.0.6.0.PFGCNXM_v11-9. I had magisk installed, there were no problems with root detection.
I installed xiaomi.eu_multi_HMNote7_V11.0.7.0.PFGCNXM_v11-9 using OrangeFox Recovery.
Then my problems with Magisk began. I uninstalled magisk completely via orangefox recovery and install again v21.4 as zip. Finally I updated magisk manager and magisk module with success and now it is latest version 25.2. I can't check safetynet via magisk app, cuz there is no option, so I used app called YSNAC. It shows: Basic integrity: failed, CTS profile match: failed. I perform hide Magisk app, named new app as "Settings", but the old Magisk icon did not disappear (I don't know if it's ok).
I activate Zygisk and enforce deny list and set deny list (banking apps, play services, google play store).
I installed modules like MagiskHide Props Config and Universal SafetyNet Fix.
BTW. Why there is no more online searching modules via magisk manager?
Root working ok.
I don't know what can I do more. My banking apps detects that I have root.

mcichy10 said:
I have Redmi Note 7.
It was running on xiaomi.eu_multi_HMNote7_V11.0.6.0.PFGCNXM_v11-9. I had magisk installed, there were no problems with root detection.
I installed xiaomi.eu_multi_HMNote7_V11.0.7.0.PFGCNXM_v11-9 using OrangeFox Recovery.
Then my problems with Magisk began. I uninstalled magisk completely via orangefox recovery and install again v21.4 as zip. Finally I updated magisk manager and magisk module with success and now it is latest version 25.2. I can't check safetynet via magisk app, cuz there is no option, so I used app called YSNAC. It shows: Basic integrity: failed, CTS profile match: failed. I perform hide Magisk app, named new app as "Settings", but the old Magisk icon did not disappear (I don't know if it's ok).
I activate Zygisk and enforce deny list and set deny list (banking apps, play services, google play store).
I installed modules like MagiskHide Props Config and Universal SafetyNet Fix.
BTW. Why there is no more online searching modules via magisk manager?
Root working ok.
I don't know what can I do more. My banking apps detects that I have root.
Click to expand...
Click to collapse
I have the same issue since today on Galaxy s21 Ultra!

I decided to uninstall completely Magisk. Unfortunately SafetyNet still doesn't pass, banking aps not working. Only thing I can do is wipe all data, format to factory and install MIUI again. Maybe I'll try MIUI 12.

mcichy10 said:
I decided to uninstall completely Magisk. Unfortunately SafetyNet still doesn't pass, banking aps not working. Only thing I can do is wipe all data, format to factory and install MIUI again. Maybe I'll try MIUI 12.
Click to expand...
Click to collapse
try using Shamiko together with Zygisk and without forcing the denylist

I tried this before with zero success

With the MagiskHide Props config, you need to open a terminal, enter "su" and then "props". Then set the fingerprint to the certified one.

neelchauhan said:
With the MagiskHide Props config, you need to open a terminal, enter "su" and then "props". Then set the fingerprint to the certified one.
Click to expand...
Click to collapse
yup, I did that. Didn't work for me.

I performed "Format Data", flashed latest MIUI for my device, installed Magisk, Hided Magisk, activated Zygisk, Forced deny list and it's working well.

i tried like 4 different ways and NONE work
Universal SafetyNet Fix (didnt work)​zydisk (didnt work)
denylist (didnt work)
magiskhide proops config (didnt work)
i have a mi 9 with miui 13+android 12
EDIT: it just takes trial and error, had to try a couple of different devices and one that worked for me was mi 9 europe

I can pass safety net on magisk 25.2 . I don't install magisk hide props. I have few things installed and a modified Verison of universal safety fix and I am using zygisk.

Alot times I forget about messages on here . Telegram me if I don't get back to u on @Assassin4Hire

GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
Google SafetyNet attestation workarounds for Magisk - GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
github.com
Flash this.
Enjoy.

yot2703 said:
GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
Google SafetyNet attestation workarounds for Magisk - GitHub - kdrag0n/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
github.com
Flash this.
Enjoy.
Click to expand...
Click to collapse
I tried this workaround in my Samsung SM-G531H with Android 7.1 and I tested it with the previously mentioned YASNAC app, and the SafetyNet Attestation tests (Basic Integrity and CTS profile match) PASSED!
Now, I'm able to use my bank app (BBVA) Thanks.

Question MEETS_DEVICE_INTEGRITY fails after Feb update

For anybody with unlocked bootloaders and root no longer passing the usual 2 out of 3 Play Integrity checks, maybe this helps.
After flashing yesterday's TQ1A.230205.002 update, MEETS_DEVICE_INTEGRITY consistently failed which was something new. Sometimes it would pass after repeated attempts and/or clearing the app's storage, but mostly it failed. Long story short, it's now passing after 1) switching from safetynet-fix 2.40 back to Displax's modified 2.3.1; and 2) uninstalled and reinstalled the Integrity Check app. Either one, the other or both seems to have helped. Occasionally I'll get a fail but it's mostly passing now instead of the other way around.

manjaroid said:
For anybody with unlocked bootloaders and root no longer passing the usual 2 out of 3 Play Integrity checks, maybe this helps.
After flashing yesterday's TQ1A.230205.002 update, MEETS_DEVICE_INTEGRITY consistently failed which was something new. Sometimes it would pass after repeated attempts and/or clearing the app's storage, but mostly it failed. Long story short, it's now passing after 1) switching from safetynet-fix 2.40 back to Displax's modified 2.3.1; and 2) uninstalled and reinstalled the Integrity Check app. Either one, the other or both seems to have helped. Occasionally I'll get a fail but it's mostly passing now instead of the other way around.
Click to expand...
Click to collapse
Yeah, a lot of people are having issues with USNF 2.4.0.

manjaroid said:
For anybody with unlocked bootloaders and root no longer passing the usual 2 out of 3 Play Integrity checks, maybe this helps.
After flashing yesterday's TQ1A.230205.002 update, MEETS_DEVICE_INTEGRITY consistently failed which was something new. Sometimes it would pass after repeated attempts and/or clearing the app's storage, but mostly it failed. Long story short, it's now passing after 1) switching from safetynet-fix 2.40 back to Displax's modified 2.3.1; and 2) uninstalled and reinstalled the Integrity Check app. Either one, the other or both seems to have helped. Occasionally I'll get a fail but it's mostly passing now instead of the other way around.
Click to expand...
Click to collapse
Hi,
may I ask exactly which version you went back to:
- v2.3.1-MOD_2.1
- v2.3.1-MOD_2.0 or
- v2.3.1-MOD
Greetings

jofa news said:
Hi,
may I ask exactly which version you went back to:
- v2.3.1-MOD_2.1
- v2.3.1-MOD_2.0 or
- v2.3.1-MOD
Greetings
Click to expand...
Click to collapse
I went back to 2.3.1-MOD_2.0 since it was already on the phone. I didn't even know about MOD_2.1 until you mentioned it, so that's what I'll do next. I didn't know about 2.4.0 problems either. I guess I need to get out more often, subscribe to an extra forum or two.

i had the same proplem
buy aftel clear data and cash memory about 3 times for google service and google play store and last google wallet , evrey think get bake norml

manjaroid said:
I went back to 2.3.1-MOD_2.0 since it was already on the phone. I didn't even know about MOD_2.1 until you mentioned it, so that's what I'll do next. I didn't know about 2.4.0 problems either. I guess I need to get out more often, subscribe to an extra forum or two.
Click to expand...
Click to collapse
I have read about the problems with USNF 2.4 here
MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0

salamdiab said:
i had the same proplem
buy aftel clear data and cash memory about 3 times for google service and google play store and last google wallet , evrey think get bake norml
Click to expand...
Click to collapse
Did you reboot the phone after clearing it? I've been wiping it a few time but it still not seemed to work.

seanho12345 said:
Did you reboot the phone after clearing it? I've been wiping it a few time but it still not seemed to work.
Click to expand...
Click to collapse
this morrning evrey thing not work
i try a lot of thing but no help

All seemed fine yesterday after installing safetynet-fix-v2.3.1-MOD_2.1 but it's a bigger mess today. Unlike yesterday, Safetynet CTS profile fails and Play Protect shows device not certified. I even managed to get an API throttle error from the Integrity Check app, which presumably means I'm SOL for a while.
More gory details...
MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0
Universal SafetyNet Fix Magisk module Magisk module to work around Google's SafetyNet attestation. This module works around hardware attestation and recent updates to SafetyNet CTS profile checks. You must already be able to pass basic CTS...
forum.xda-developers.com

Hiding the Magisk app solves the issue. Just hide then reboot phone. Profit.

Thanks to @Displax everything passes with safetynet-fix 2.3.1-MOD_3.0.
Release v2.3.1-MOD_3.0 · Displax/safetynet-fix
Google SafetyNet attestation workarounds for Magisk - Release v2.3.1-MOD_3.0 · Displax/safetynet-fix
github.com

manjaroid said:
Thanks to @Displax everything passes with safetynet-fix 2.3.1-MOD_3.0.
Release v2.3.1-MOD_3.0 · Displax/safetynet-fix
Google SafetyNet attestation workarounds for Magisk - Release v2.3.1-MOD_3.0 · Displax/safetynet-fix
github.com
Click to expand...
Click to collapse
Thanks, its working

Magisk hidden, Zygisk enabled, safetynet-fix 2.3.1-MOD_3.0 installed
Force stop, clear cache and storage for Google Play Services, Play Store and Wallet, reboot.
Repeat 4 times
Still Play Integrity API Checker shows red cross for MEETS_DEVICE_INTEGRITY
EDIT:
Uninstall USNF, reboot, check with Integrity API Checker - got 3 red crosses, predictable.
Reinstall USNF, reboot - MEETS_DEVICE_INTEGRITY is red

BesoC said:
Magisk hidden, Zygisk enabled, safetynet-fix 2.3.1-MOD_3.0 installed
Click to expand...
Click to collapse
Is Enforce DenyList enabled and DenyList configured?

manjaroid said:
Is Enforce DenyList enabled and DenyList configured?
Click to expand...
Click to collapse
DenyList is enforced, There are Google Play Store and Wallet in DenyList

BesoC said:
DenyList is enforced, There are Google Play Store and Wallet in DenyList
Click to expand...
Click to collapse
Try clearing storage for the Integrity Check app or uninstall and reinstall it. Avoid checking too often also, the app gave me an error about limits and throttling when problems were ongoing a couple days ago. Sorry, I don't have any other ideas.

manjaroid said:
Try clearing storage for the Integrity Check app or uninstall and reinstall it. Avoid checking too often also, the app gave me an error about limits and throttling when problems were ongoing a couple days ago. Sorry, I don't have any other ideas.
Click to expand...
Click to collapse
Still not working, but thanks for your efforts

BesoC said:
Still not working, but thanks for your efforts
Click to expand...
Click to collapse
Whats working on pixel 7 pro for me
SafetyNet displax mod 3.0
Shamiko module
Magisk hide
All Google apps hidden in deny list
Deny list enforced disabled
Clear cache from wallet and playstore
Reboot

Bxperiaz3 said:
Whats working on pixel 7 pro for me
SafetyNet displax mod 3.0
Shamiko module
Magisk hide
All Google apps hidden in deny list
Deny list enforced disabled
Clear cache from wallet and playstore
Reboot
Click to expand...
Click to collapse
Thank you for your advise. Did exactly as you wrote, still MEETS_DEVICE_INTEGRITY is red

BesoC said:
Thank you for your advise. Did exactly as you wrote, still MEETS_DEVICE_INTEGRITY is red
Click to expand...
Click to collapse
Maybe try the new USNF mod Displax just put out...
v2.4.0-MOD_1.0