Hi i have had magisk all set up on my s9+ running 10 for about a year. For some reason it no longer passes safetynet check
Basic intergrity is tick
Ctsprofile is not
Eval type is now hardware
I have universal safetynet fix 2.0 and magiskhide props config 6.1.2 installed
I have tried installing the New magisk hide toolkit by teamfiles (lsposed, riru and the xprivacy app) this did get eval type showing as basic but didnt fix the cts profile. I have now removed these profiles.
Does anyone know of a way to fix this
I installed Riru and updated universal SafetyNet fix to 2.1.3 now passing all checks
Related
How to safety net pass on magisk 13.3 on latest beta rom miui 9 7.8.10
Universal SafetyNet Fix
follow these steps..
go to magisk menu : downloads
search : Universal SafetyNet Fix (v1.10.1)
click downloads (reboot if nessasary)
in main menu -> Tap to start SafetyNet check
Good luck..
Hi,
This guide help you to find a correct configuration and make environment for installing EdXposed and pass SafetyNet (and more) on a official Nord rom (tested on my EU 10.5.8)
All apps pass SafetyNet, Xposed and Magisk test (bank app, tv app, pogo, mario kart, ...)
Code:
ADVICE
This method need to put SELinux in permissive mode, it's no safe for your phone security..
But almost years, all my phone is in permissive mode, no problems ever for my.
Use at your risk!
Instructions :
-Install last official android 10 version for you device
-Root your devices (follow this guide)
-(Optional) Flash TWRP Recovery with fastboot in recovery partition
-Install/upgrade Magisk/Magisk Manager in the last stable version
-Reboot
-In Magisk setting tab, disable and enable "magisk hide" switch
-Install busybox app (don't open now) (my app is by Stericson, i suppose work on other busybox app)
-Go to Magisk manager and download following module :
. BusyBox for android NDK
. App Systemizer
. Magisk for recovery (mm) (only if you have flashed TWRP)
. Debloater (only if you need to debloat app per app your phone)
. Active systemless host in Magisk options (if you need AdAway)
. Flash youtube vanced with magisk if you need vanced (install root method doesn't work for me)
-Reboot
-Check if BusyBox (1.31.1. osm0sis) is installed on /system/xbin on your BusyBox app companion
-Open terminal and tip (once at once):
Code:
su
systemize
s
c
-Create a new file called "08setperm" in /data/adb/post-fs-data.d
Put this code inside:
Code:
#!/system/sh
setenforce 0
-Install latest Riru Core in magisk manager.
-Install EdXposed Manager
-Reboot
-Go to EdXposed Manager and install the latest canary Sandhook version
-In options tab, switch on "App List Mode" and "Instant Module List"
-Browse, download and install "HiddenCore Module" on Manager
-Go on module tab and active EdXposed module and HiddenCore module
-Reboot
-Go to Blacklist tab on EdXposed Manager and enable:
. Your apps (like with magisk hide feature)
. Carrier service
. Google framework
. Google game
. Google play store
. Google play service
-Go to Magisk Manager and hide:
. Your apps
. Google play service (uncheck and check again)
-Disable usb debugging in dev options (for full spoof)
-Reboot and done!
My favorites apps/module:
. Battery charge limit (example: stop night charge at 99% and wait to discharge to 90% and charge again to 99% target)
. Migrate (the new best app saver, titanium backup is.. hum..)
. adaway (block ads, add repo on this app for better work)
. Mixplorer (cool file/root explorer)
. Materiel terminal (cool terminal, no superficial tweek)
. AodNotify (the best notification light for me..)
. Wifi Key View (show yours wifi keys)
. Liveboot (watch and save a logcat in place of boot animation)
. Alltrans xposed (translate all your apps)
. Gravitybox xposed (most customisation)
. Minminguard xposed (ad block for apps)
. LuckyPatcher + xposed module
See you!
Thanks! Did exatcly everything right. And Magisk & Xposed are prefectly hidden from my banking app. But the CompleteControl App (for VISA card) is still detecting it. I don't know what I can do to prevent that. I read in an article that "There are many files and packages that MDMs look for when detecting if a device is rooted. " like
"Su Binaries. The following list of Su binaries are often looked for on rooted devices./system/bin/su
/system/xbin/su
/sbin/su
/system/su
/system/bin/.ext/.su
/system/usr/we-need-root/su-backup
/system/xbin/mu"
---> should I therefore uninstall BusyBox? When clicking on "UNINSTALL" in the app, you get a pretty big disclaimer that you might lose funcionality of many rooted apps, so I didn't. After doing all the steps in #1 post, is it safe to disable and uninstall BusyBox? Is there an alternative to hide root from CompleteControl app? THANKS! Great work with the guide btw...
I followed the instructions, and although Magisk Manager itself thinks SafetyNet passes, other SafetyNet checkers still show it fails everything and e.g. I can't update Netflix or find it when searching the Play Store
Would you like this to get proofread to make this article readable by other people?
---------- Post added at 11:46 PM ---------- Previous post was at 11:45 PM ----------
NTWarrior said:
I followed the instructions, and although Magisk Manager itself thinks SafetyNet passes, other SafetyNet checkers still show it fails everything and e.g. I can't update Netflix or find it when searching the Play Store
Click to expand...
Click to collapse
Download an .apk and install it over Netflix. The latest one might not work, so try out a few different versions.
You quote magisk for recovery but to use it you need to access /data partition. How do you decrypt it?
I installed the current (26) Riru, installing edXposed failed (they don’t support it yet). After some searching, I installed LSPosed instead.
Now I’m passing safety net with just hide props config and no HiddenCore needed
Here's a list of Magisk & Edxposed modules with a little description that i have on my Xperia 5 II.
Magisk Modules :
App Systemizer (Systemize any apps)
Debloater (Debloat your rom via terminal)
Detach (Detach any apps from your Play Store automatic update process, it will hides the update in my games and applications section, perfect to hide updates if you have Youtube Vanced or modded apps)
Energized Protection (Ad/Porn/Malware Blocking)
Ios 13.2 Emojis (Emojis of iOS 13.2 ported to Android) Download Here
Looki75 Product Sans Font (Google Sans font for your device) Download Here
Magisk Manager For Recovery Mode (mm) (The perfect module in case you screw your phone by having downloaded a bad module that causes you bootloops, but you need TWRP installed for this to work)
Rboard Themes (More themes for Gboard) Download Here
Riru Core (Core for Edxposed)
Riru Edxposed (SandHook) (Framework for modules that can change the behavior of the system and apps)
Resurrection Remix Boot Animation (or download Boot Animations for Superuser on the Play Store for more boot animations) Download Here
Substratum (Theme engine) (For a clean & amoled friendly look i highly suggest to buy Swift Black or PitchBlack & Edge themes on the Play Store)
Edxposed Modules :
App Settings Reborn (Tweaks per-app settings)
Gravitybox [Q] (It's literally a tweaks box with various customizations, like changing UI, status bar icons,notications panel,fonts and many more)
Instaprefs (with this module you can tweak instagram & save posts, stories, dm's, profile pictures and more)
MinMinGuard (Ad-remover, it will remove completely ads inside apps and the empty space caused by those ads)
NSFW Gboard (with this module, you can search and send NSFW's gifs on Gboard)
Status Download Progress (Status download progress bar)
Xposed Edge Pro (System level controls and actions & Remap gestures, keys)
Tips: Nova Launcher + LineX Icon Pack is the perfect setup for me, feel free to try it
This list can be updated, if you can confirm that it's working well on your device in the comments section below.
Hello, other modules for this device? I've rooted my Android 11 Xperia 5 II, but idk what mods can I install on it
robi101012981 said:
Hello, other modules for this device? I've rooted my Android 11 Xperia 5 II, but idk what mods can I install on it
Click to expand...
Click to collapse
I have rooted Android 11 on my Xperia 5 ii (running on build 58.1.A.1.178), and here's what does work flawlessly for me:
MagiSK modules:
- Advanced Charging Controller (ACC)
- App systemizer (Terminal emulator)
- De-bloater
- F-Droid Privileged Extension
- Riru
- Riru-LSposed
- Systemless Hosts
- Universal GMS Doze
To get Xposed modules, I got the LSposed manager APK.
Riru-LSposed (v. 1.3.4) using SandHook option, Systemless Xposed modules, alternative to EdXposed):
- Bluetooth Toolkit
- GravityBox [R]
- Greenify
- Secure Settings
- Xposed edge pro
- XposedSmsCode
- Force Dark
Hope it can help you
Yoannjap said:
I have rooted Android 11 on my Xperia 5 ii, and here's what does work flawlessly for me:
MagiSK modules:
- Advanced Charging Controller (ACC)
- App systemizer (Terminal emulator)
- De-bloater
- F-Droid Privileged Extension
- Riru
- Riru-LSposed
- Systemless Hosts
- Universal GMS Doze
To get Xposed modules, I got the LSposed manager APK.
Riru-LSposed (using SandHook option, Systemless Xposed modules, alternative to EdXposed):
- Bluetooth Toolkit
- GravityBox [R]
- Greenify
- Secure Settings
- Xposed edge pro
- XposedSmsCode
Hope it can help you
Click to expand...
Click to collapse
Thanks ,I'll try them
Yoannjap said:
I have rooted Android 11 on my Xperia 5 ii, and here's what does work flawlessly for me:
MagiSK modules:
- Advanced Charging Controller (ACC)
- App systemizer (Terminal emulator)
- De-bloater
- F-Droid Privileged Extension
- Riru
- Riru-LSposed
- Systemless Hosts
- Universal GMS Doze
To get Xposed modules, I got the LSposed manager APK.
Riru-LSposed (using SandHook option, Systemless Xposed modules, alternative to EdXposed):
- Bluetooth Toolkit
- GravityBox [R]
- Greenify
- Secure Settings
- Xposed edge pro
- XposedSmsCode
Hope it can help you
Click to expand...
Click to collapse
*GravityBox [R]* doesn't work on my device, HK 58.1.A.3.87, result in boot-loop.
fengmubai said:
*GravityBox [R]* doesn't work on my device, HK 58.1.A.3.87, result in boot-loop.
Click to expand...
Click to collapse
Hey, well theoretically GravityBox is not made for Xperia phones, as someone told me once onto XDA forum. However, for me, running on 58.1.A.1.178, it does work.
I add another module working for me which is great: Force Dark, available on LSPosed (v. 1.3.4) repo.
Note: I do not really care what you guys think about Google. These are just the steps I took to replace google services with MicroG. This also only works on Android 11 due to FakeGapps being superior on Android 11 compared to Android 12 for now.
TLDR: Flash Magisk, enable zygisk, install Universal Safety Net Fix, Lsposed + fakestore and Nanodroid microg.
Unlock Bootloader and flash a custom recovery
You can follow the guide here on how to unlock your bootloader and flash a custom recovery: https://forum.xda-developers.com/t/guide-unlock-bootloader-and-flash-xiaomi-eu-rom.3952443/
Flash Magisk
Grab the latest APK from Magisk's Github and rename it from Magisk-vXX.apk to Magisk-vXX.zip then flash it in your recovery of choice
Essential magisk setup
Hide the Magisk app
Enable Zygisk and Enforce Denylist on your banking apps etc.
Install the following Magisk Modules and reboot your device
https://github.com/kdrag0n/safetynet-fix for passing safetynet
https://github.com/LSPosed/LSPosed for installing fakegapps later on which provides signature spoofing
Install and enable fakegapps for signature spoofing support
https://github.com/whew-inc/FakeGApps/ - since our device is on A11, grab the latest v3.0 apk and install it
Open LSPosed (A shortcut should be made on your home screen, if not dial *#*#5776733#*#* (LSposed) in your phone dialer and it should open and enable FakeGapps in the module. System Framework is already ticked and thats all thats needed
Installing MicroG
Grab Nanolx's version of microG from: https://downloads.nanolx.org/NanoDroid/Stable/NanoDroid-microG-23.1.2.20210117.zip
Note on this zip. The installer supports reading a config file to set up following this guide: https://github.com/Nanolx/NanoDroid/blob/master/doc/AlterInstallation.md.
I would recommend downloading the default .nanodroid-setup file in the guide, putting it in your internal storage and making the following configurations.
Line 37 - nanodroid_nlpbackend=1000
Line 55 - nanodroid_play=10 if you want in app purchases to work, nanodroid_play=01 if you do not care about in app purchases
I wouldn't recommend going with aurora services here as it is severely outdated, grab it and flash it manually from aurora's gitlab if you want to use it
Uninstall Google Play Services and ignore all the errors that pop up instantly after that
Install Nanodroid MicroG in magisk. It should debloat the default Google installation on the phone and replace it with MicroG
Updating MicroG and optionally Play store based on the options chosen
I recommend installing F-droid and adding the MicroG fdroid repository from https://microg.org/fdroid.html
There will be an update for MicroG. Update it and you're good to go
If you enabled the patched play store for IAP you can update it by going into Google Play Store > Setings and presss Update Play Store
That should be it. You can further clean up the rom by grabbing https://github.com/Szaki/XiaomiADBFastbootTools and disabling some bloatware (I recommend disabling and not uninstalling)
Note: You will get an error from Device Health Services saying it needs an update to Google Play. Feel free to disable the app using a root app disabler or by using ADB with the following command:
adb shell pm disable-user --user 0 com.google.android.apps.turbo
I've gone a step further and replaced most of the default apps with "Simple" apps from F-Droid such as Simple Contacts, Simple Dialer, Simple Calendar etc. They work really well and there's a companion app that allows shared file themeing among them called Simple Thank You.
See attached files for screenshot of my success.
How i can bypass this
TEE BROKEN ?
Unlocked BL AND ROOTED
All hided but still this TEE BROKEN
Same question mine
TEE (or Trusted Execution Environment) makes hiding root impossible, BUT some Magisk modules manage to break connection with TEE, so the device will fallback to basic methods of detecting root, so you can hide Magisk, Zygisk etc.. You can't hide that TEE is broken, but thanks to this "breaker" you can hide all your rooty things.
oliyase said:
TEE (or Trusted Execution Environment) makes hiding root impossible, BUT some Magisk modules manage to break connection with TEE, so the device will fallback to basic methods of detecting root, so you can hide Magisk, Zygisk etc.. You can't hide that TEE is broken, but thanks to this "breaker" you can hide all your rooty things.
Click to expand...
Click to collapse
Where can I download that "Breaker"?
ShinXhua said:
Where can I download that "Breaker"?
Click to expand...
Click to collapse
Just search for Displax's "Universal SafetyNet Fix"
GitHub - Displax/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
Google SafetyNet attestation workarounds for Magisk - GitHub - Displax/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
github.com
oliyase said:
Just search for Displax's "Universal SafetyNet Fix"
GitHub - Displax/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
Google SafetyNet attestation workarounds for Magisk - GitHub - Displax/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
github.com
Click to expand...
Click to collapse
I have that installed on my Magisk Moduel,,
But the "Tee broken" is not fixed.
SafetyNet don't help to fix "Tee broken"
Can you contact me via telegram?
I want to talk more but not here (@Hasan288s)