I was able to extract the boot image on my Android phone using python then I was able to patch it with a fixed magisk APK that passes safetynet. I will make a video and post links to where I got everything from
Sorry guys I forgot to mention you need the safety net universal fix module here's the XDA link I forgot to mention that in the video my apologies
MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0
Universal SafetyNet Fix Magisk module Magisk module to work around Google's SafetyNet attestation. This module works around hardware attestation and recent updates to SafetyNet CTS profile checks. You must already be able to pass basic CTS...
forum.xda-developers.com
Here's the tutorial on how to extract the boot image on your Android device using python
Related
I have just updated to LineageOS 16 (unofficial) and installed Magisk 21.0.
As noted in this article: android-safetynet-hardware-attestation, when I run Check SafetyNet it comes up with the Attestation Failed! notice.
Just thought I would make a note of this, in case others want to compare their findings.
Moto G4 Plus XT1642
currently running lineage-16.0-20200928-UNOFFICIAL-athene
I run the Stock Oreo 8.1 from https://forum.xda-developers.com/moto-g4-plus/development/rom-oreo-8-1-0-soak-test-t3873367 with last official TWRP and ElementalX Kernel
Had device not certified on Play Store and ctsProfile failed in Magisk SafteyNet check (basicIntegrity OK and evalType BASIC)
Installed Magisk module MagiskHide Props Config and picked certified fingerprint for my device.
After reboot SafteyNet check passed
Can you please share how to pick a certified fingerprint for a device? Rooted my Pixel 3 XL and the safetynet attestation failed. I installed the module you said, but I don't know what to do next, I'm new with this
Edit: I managed to fix it with the safetynet fix v1.1.0 found on xda
This is a universal fix for SafetyNet on devices with hardware attestation and unlocked bootloaders or custom verified boot keys. It defeats both hardware attestation and the new SafetyNet CTS profile updates released on January 12, 2021.
Instructions:
1. Make sure Magisk hide is enabled.
2. Download the universal safety net fix from kdrag0n's github repository right here.
3. Install it from Magisk manager.
4. Test if it works, if not then download this version of the module instead.
5. If it works congratulations your device now passes safetynet responses.
Credits
@kdrag0n
Worked for me, thanks!
This version of the safetynet fix only works for Magisk v24+(Zygisk).
If you are on version 23.0 of Magisk this should work. But it requires Riru v24.0.0 or newer installed and Magisk hide enabled.
I've attached my results from a SM-A750FN variant.
Hello, I just can't get the cts profile working. What am I doing wrong? I already installed the fix (GitHub - kdrag0n / safetynet-fix: Universal fix for Google SafetyNet on Android devices with hardware attestation and unlocked bootloaders.) With Magisk
This module should help you. I'm using it. Safety net is passing.
I haven't modded android devices for a while now so I am hoping someone can get me up to speed.
Does unlocking the bootloader trip safetynet? I want to install TWRP and even possibly get Magisk running but I want to pass safetynet and I'm not sure if this is possible.
Thanks.
Hello,
"Does unlocking the bootloader trip safetynet?"
no, only if you use magisk
and if you use magisk with this module:
Releases · kdrag0n/safetynet-fix
Google SafetyNet attestation workarounds for Magisk - kdrag0n/safetynet-fix
github.com
and in magisk settings hide all google apps from magisk
then you have safetynet OK
apps like google pay work
Fedon said:
Hello,
"Does unlocking the bootloader trip safetynet?"
no, only if you use magisk
and if you use magisk with this module:
Releases · kdrag0n/safetynet-fix
Google SafetyNet attestation workarounds for Magisk - kdrag0n/safetynet-fix
github.com
and in magisk settings hide all google apps from magisk
then you have safetynet OK
apps like google pay work
Click to expand...
Click to collapse
Thank you! But what about OTA updates? Are the steps to retain those while having Magisk installed the same as other phones (or similar)?
You can do OTA, but after OTA (before restart) you need to open magisk and click on root again (option "after OTA"), then restart and... you have still root
Thank you for the help!
Installed Android 12 GM1900_11_H.32
APP Magisk Cannery 25.2 (25200)(33) Installed 831a398b (25206)(D)
TWRP 3.7.0_12-0
Zygisk
Enforce Deny List - Deny list is configured for all google apps
Riru (not enabled, it then allows zygisk to run)
Universal safetynet fix v2.2.1
MagiskHide Props Config v6.2-v137
I cannot hide the Magisk app it creates a new app name but it won't load and magisk is still there and of course, google Wallet won't run
everything else is ok rooted and running.
Is anybody with experience of this problem and any solution? would appreciate feedback
p.s. SafetyNet 'attest' returns "Response signature validation error" other SafetyNet tests run OK.
Aussiewaterdragon said:
Installed Android 12 GM1900_11_H.32
APP Magisk Cannery 25.2 (25200)(33) Installed 831a398b (25206)(D)
TWRP 3.7.0_12-0
Zygisk
Enforce Deny List - Deny list is configured for all google apps
Riru (not enabled, it then allows zygisk to run)
Universal safetynet fix v2.2.1
MagiskHide Props Config v6.2-v137
I cannot hide the Magisk app it creates a new app name but it won't load and magisk is still there and of course, google Wallet won't run
everything else is ok rooted and running.
Is anybody with experience of this problem and any solution? would appreciate feedback
p.s. SafetyNet 'attest' returns "Response signature validation error" other SafetyNet tests run OK.
Click to expand...
Click to collapse
I am facing the same issue.
Android 12 GM1900_11_H.36
Magisk 25.2 (25200)(33)
Package ifk.peqffjnp
Universal SafetyNet Fix 2.2.1 by kdrag0n
The SafetyNet test is passed.
However, I can't pay...