🔐Spoof locked bootloader | "Bypass" TEE check - Xposed Framework Modules

Modify the root of trust in local attestations.​
This module modify the byte array obtained from certificate extensions (link) to spoof a fake root of trust, so we get a fake attestation with a locked bootloader.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
More info about certificate extensions:
Verifying hardware-backed key pairs with Key Attestation | Android Developers
A tool for verifying security properties of hardware-backed key pairs.
developer.android.com
NOTES:
- This module doesn't work with devices which TEE is broken, like OnePlus.
- You won't pass MEETS_STRONG_INTEGRITY using this.
Source code and download:
GitHub - chiteroman/BootloaderSpoofer: Spoof a locked bootloader in local attestations
Spoof a locked bootloader in local attestations. Contribute to chiteroman/BootloaderSpoofer development by creating an account on GitHub.
github.com
Apps detecting a locked bootloader:
- Key Attestation Demo (WORKING)
- CIB Egypt Mobile Banking (WORKING)
- Bet365 Authenticator (NOT WORKING)

---

swer45 said:
Spoofs a fake root of trust in local attestations.​NOTE: this Xposed module won't help you to pass MEETS_STRONG_INTEGRITY in Play Integrity API.
It only works in local attestations, for example, Key Attestation Demo or some bank apps like CIB.
If you are a developer and want to check if the device has an unlocked bootloader, never trust user data. You must send to a secure server the X509Certificate and check the attestation extension in that server, or use Play Integrity API. NEVER TRUST USER DATA BECAUSE THINGS LIKE THIS MODULE MAY HAPPEN
Also Play Integrity API isn't perfect, I can pass MEETS_STRONG_INTEGRITY with my unlocked bootloader device.
Sooo, don't check nothing. Lets users do whatever they want with their devices.
Like safetynet-fix by kdrag0n, this should be implemented in custom ROMs, so Xposed won't be required and can't be detected by apps like Momo.
View attachment 5911247View attachment 5911245
You can get a locked bootloader with this
I'm working in Zygisk module.
Repo and download: https://github.com/swer45/AttestationSpoofer
Click to expand...
Click to collapse
What apps to choose in LSPosed module settings? Google Play, Google Services, System Framework???

---

Moreover, it's fully compatible with USNF Mod of Displax or SN Sensitive Props of HuskyDG please ?
Really sorry, because it's rather on this thread that I had to ask this question
Edit : Again sorry for the inconvenience, because here is the answer

---

innit said:
What apps to choose in LSPosed module settings? Google Play, Google Services, System Framework???
Click to expand...
Click to collapse
None of these, just add apps that detect an unlocked bootloader like CIB.
MobAndro said:
Moreover, it's fully compatible with USNF Mod of Displax or SN Sensitive Props of HuskyDG please ?
Click to expand...
Click to collapse
Yes.

---

swer45 said:
Yes.
Click to expand...
Click to collapse
Thank you

---

Hi mate, thanks for the module. I'm just curious what did you mean here:
swer45 said:
Also Play Integrity API isn't perfect, I can pass MEETS_STRONG_INTEGRITY with my unlocked bootloader device.
Click to expand...
Click to collapse
Did you mean that you have found some kind of real fix for unlocked bootloaders, but you don't want it to go public or that your device is a very specific one and passes strong integrity because of some built-in bug?

---

Gleniu said:
Hi mate, thanks for the module. I'm just curious what did you mean here:
Did you mean that you have found some kind of real fix for unlocked bootloaders, but you don't want it to go public or that your device is a very specific one and passes strong integrity because of some built-in bug?
Click to expand...
Click to collapse
Nothing of the sort. There is a more mundane explanation. Simply, Google has bugs in their servers that allow certain certificates you submit for certain device models with early TEE's you can replicate and forge them, I still don't quite know how it's done but the folks at xiaomi.eu have it implemented in some of their ROMs.

---

I have edited the thread name and post to make it clear what my module does and what limits it has. I have also added a list with the apps I know that detect if you have the bootloader locked, if you know more apps that do the same, pass them here and I will add them.

---

Can You Include InstaPay - QNB

---

For InstaPay Here after using Apktool - found that it depends on this Smali file for connection suspension :
.class public final Lo/onConnectionSuspended;
.super Ljava/lang/Object;
.source ""
# static fields
.field public static final APP_TAMPERED:I = 0x80
.field public static final CERTIFICATE_TAMPERED:I = 0x40
.field public static final CLOCK_RATE_INTEGRITY:I = 0x400
.field public static final DEBUGGABLE:I = 0x4
.field public static final DEBUGGER_ATTACHED:I = 0x10
.field public static final DEBUG_BLOCKER_ATTACKED:I = 0x2000
.field public static final DEBUG_BLOCKER_FAILED:I = 0x1000
.field public static final EMULATOR:I = 0x8
.field public static final FILES_TAMPERED:I = 0x100
.field public static final HOOKED:I = 0x1
.field public static final MEMORY_INTEGRITY:I = 0x800
.field public static final ROOTED:I = 0x2
.field public static final SELINUX_INTEGRITY:I = 0x4000
.field public static final SIGNED_WITH_DEBUG_KEYS:I = 0x200
.field public static final VIRTUAL_ENVIRONMENT:I = 0x20
# direct methods
.method public constructor <init>()V
.locals 0
.line 15
invoke-direct {p0}, Ljava/lang/Object;-><init>()V
return-void
.end method

---

Dear swear45, could you also take a look on this Repo that could be able to remove the checks from both apps
GitHub - Crazyphil/digitales-amt-liberator: Removes root and bootloader checks from the Digitales Amt app
Removes root and bootloader checks from the Digitales Amt app - GitHub - Crazyphil/digitales-amt-liberator: Removes root and bootloader checks from the Digitales Amt app
github.com

---

.

---

.

---

Also this method isn't the best and it's very complicated, I don't know why the devs use it. It's much better to obtain the certificate (signed) of the phone using a native library, send it to a server, and check the certificate extensions. That will be impossible to hack or bypass (unless you hack the server or hack the TEE).

---

Would this allow gpay to work?

---

travisjshepherd said:
Would this allow gpay to work?
Click to expand...
Click to collapse
Gpay doesn't check the bootloader status, install this Zygisk modules:
- https://github.com/Displax/safetynet-fix/releases/latest
- https://github.com/LSPosed/LSPosed.github.io/releases/latest
Reboot the device and check the PI result: https://play.google.com/store/apps/details?id=gr.nikolasspyr.integritycheck
You should pass all checks except Strong

---

swer45 said:
Gpay doesn't check the bootloader status, install this Zygisk modules:
- https://github.com/Displax/safetynet-fix/releases/latest
- https://github.com/LSPosed/LSPosed.github.io/releases/latest
Reboot the device and check the PI result: https://play.google.com/store/apps/details?id=gr.nikolasspyr.integritycheck
You should pass all checks except Strong
Click to expand...
Click to collapse
Does gpay look for root or various other tampered settings / props? I know it's a bit off topic but I'm interested to understand what the app looks for it to trip / find root.

---

spida_singh said:
Does gpay look for root or various other tampered settings / props? I know it's a bit off topic but I'm interested to understand what the app looks for it to trip / find root.
Click to expand...
Click to collapse
All Google apps use Droidguard (like an anticheat for Android) to check root or Xposed. Just tick GMS in Magisk deny list (without enforce it) and you will hide root (for this you need Shamiko module). But also you need a valid device with locked bootloader, since Google still don't check well that, you can fake your device's fingerprint to an older one (Universal Safety Net Bypass module) and bypass it. The result in Play Integrity you will pass BASIC and DEVICE integrity (STRONG requires a locked bootloader o spoof certificates which is difficult). No one known app require STRONG integrity by the moment, but there are a few apps that check bootloader status, that's why I created this module.

---

swer45 said:
All Google apps use Droidguard (like an anticheat for Android) to check root or Xposed. Just tick GMS in Magisk deny list (without enforce it) and you will hide root (for this you need Shamiko module). But also you need a valid device with locked bootloader, since Google still don't check well that, you can fake your device's fingerprint to an older one (Universal Safety Net Bypass module) and bypass it. The result in Play Integrity you will pass BASIC and DEVICE integrity (STRONG requires a locked bootloader o spoof certificates which is difficult). No one known app require STRONG integrity by the moment, but there are a few apps that check bootloader status, that's why I created this module.
Click to expand...
Click to collapse
Understood thanks. If gpay doesn't check for the bootloader status. And Magisk hides root from droidguard.... What's the need for USNF by displax in this use case for GPAY? Does this do something in addition to Magisk deny list and shamiko?
The reason I'm asking is that there is a method to build GrapheneOS from source rooted with a locked bootloader. But USNF by displax doesn't work on that OS and was wondering if your module baked into source would help GrapheneOS pass PI.
GMS is not a privelaged app on GrapheneOS, but didn't know if gpay cared about that.
Thanks for this. I'll probably have to do more digging

---

swer45 said:
All Google apps use Droidguard (like an anticheat for Android) to check root or Xposed. Just tick GMS in Magisk deny list (without enforce it) and you will hide root (for this you need Shamiko module). But also you need a valid device with locked bootloader, since Google still don't check well that, you can fake your device's fingerprint to an older one (Universal Safety Net Bypass module) and bypass it. The result in Play Integrity you will pass BASIC and DEVICE integrity (STRONG requires a locked bootloader o spoof certificates which is difficult). No one known app require STRONG integrity by the moment, but there are a few apps that check bootloader status, that's why I created this module.
Click to expand...
Click to collapse
Someone mentioned hidemyapp is better to use for hiding root from apps don't know how accurate that info is though.
It is confusing what to be using and gets regular updates, as so many modules do the same type of thing, shamiko/hidemyapp etc