EdXposed CAN pass SafetyNet without blacklisting GSF and Play Services!!

[mahaseno]

I did it

 

[uodii]

There are no links.

Here's what you do:

1. Go into Magisk Manager and remove your EdXposed module.
2. Reboot.
3. Open EdXposed Manager, and wait a few seconds. A Canary tab should appear on the top.
4. Go to the Canary tab. At the top, there should be a drop-down with two options: SandHook and YAHFA. Choose YAHFA and press install.
5. You will be redirected to your web browser which will download a zip file. This is a Magisk module you must install from storage. (Technically, this is a link, but please do not post it here as the EdXposed Manager will know the latest version automatically.)
6. After all that, your EdXposed should be up to date.

After following these instructions (and the ones on page 2) I'm getting the message that EdXposed Framework is install but not active. The only option for YAHFA I had to install was 93-v0.5.1.0_4617. Any advice? (Safetynet still currently passes)

EDIT: I reinstalled the Edxposed manager and it started working correctly, but I'm not passing safetynet now so I think I need to re-do the steps you specified

EDIT2: Passing now. Any suggested modules? I always used to run gravity box, but going through those settings now I feel it's not necessary on this phone

 

[LoganDark]

After following these instructions (and the ones on page 2) I'm getting the message that EdXposed Framework is install but not active. The only option for YAHFA I had to install was 93-v0.5.1.0_4617. Any advice? (Safetynet still currently passes)

EDIT: I reinstalled the Edxposed manager and it started working correctly, but I'm not passing safetynet now so I think I need to re-do the steps you specified

EDIT2: Passing now. Any suggested modules? I always used to run gravity box, but going through those settings now I feel it's not necessary on this phone

GravityBox isn't great and sometimes causes the screen brightness to go all wonky. You'll have better luck with RiCE, which is a Magisk module, but be careful as it changes the display driver in a detectable way (it very obviously calls out that it is RiCE).

XPrivacyLua is the only Xposed module I would recommend fully. Use Magisk for pretty much anything else. I've used Magisk for enabling call recording, enabling voice over WiFi, removing bloatware, ad blocking via Energized Protection, and so on.

I use XPrivacyLua for patching the screenshot app to output in PNG format instead of JPG. I also use it for its intended purpose, as well as changing my phone's model number to GM1917, to blend in.

 

[CynicalHeight00]

Hello LoganDark,

I followed your instructions for a OnePlus 7 Pro, at least I think I did appropriately.
If I have any module enable in EdXposed Application, then my device doesn't pass SafetyNet.
If I understood what you said, if I use the YAHFA version then I can pass SafetyNet despite what module(s) I have enabled.

Here are my specs:
CrDroid Rom Android 10
Magisk Manager Version 8.0.3
Magisk Version 20.4
Riru Version 23.1
Riru - EdXposed Version 0.5.1.2_4641-master(YAHFA)
EdXposed Manager Version 4.5.7

 

[LoganDark]

Hello LoganDark,

I followed your instructions for a OnePlus 7 Pro, at least I think I did appropriately.
If I have any module enable in EdXposed Application, then my device doesn't pass SafetyNet.
If I understood what you said, if I use the YAHFA version then I can pass SafetyNet despite what module(s) I have enabled.

Here are my specs:
CrDroid Rom Android 10
Magisk Manager Version 8.0.3
Magisk Version 20.4
Riru Version 23.1
Riru - EdXposed Version 0.5.1.2_4641-master(YAHFA)
EdXposed Manager Version 4.5.7

Do you have hide enabled? Use this app to check

 

[CynicalHeight00]

Do you have hide enabled? Use this app to check

Yes, I do. That's a zip file, alike the the riru module that was installed.

 

[LoganDark]

Yes, I do. That's a zip file, alike the the riru module that was installed.

It's an app. You unzip it and inside is an apk.

Oops, sorry, THIS is the apk

 

[CynicalHeight00]

It's an app. You unzip it and inside is an apk.

Oops, sorry, THIS is the apk

It says 'Hide is enabled'.

 

[LoganDark]

It says 'Hide is enabled'.

Hm, that's weird. I don't know why EdXposed is breaking SafetyNet for you then. What module are you enabling?

 

[CynicalHeight00]

Hm, that's weird. I don't know why EdXposed is breaking SafetyNet for you then. What module are you enabling?

xPrivacyLua is one of the modules that breaks SN.

 

[LoganDark]

xPrivacyLua is one of the modules that breaks SN.

In that case, it's possible that the module itself does not matter, but instead, for some reason, the fact that you have any modules enabled at all. Basically the same issue I had with SandHook. If YAHFA no longer works, all hope may be lost... maybe you could try SandHook just to be sure. It may be ROM-dependent and I'm on OOS.

 

[CynicalHeight00]

In that case, it's possible that the module itself does not matter, but instead, for some reason, the fact that you have any modules enabled at all. Basically the same issue I had with SandHook. If YAHFA no longer works, all hope may be lost... maybe you could try SandHook just to be sure. It may be ROM-dependent and I'm on OOS.

Can you give me the zip files to your RIRU version and YAFHA version?

 

[LoganDark]

Can you give me the zip files to your RIRU version and YAFHA version?

I don't think they'll help.

 

[Adolamin]

Hey LoganDark,
Any update on the boot loader re-locking? Excited for this!
Cheers,
Andrew

 

[LoganDark]

Hey LoganDark,
Any update on the boot loader re-locking? Excited for this!
Cheers,
Andrew

I don't have enough resources to test properly, so every test I do, I have to do on my only phone. This carries risks so I lack motivation to do it all the time. It would cost ~$300 to get another phone to test on, and I don't have that kind of money.

Basically, I just haven't felt like it lately. I still do think it's possible, I just haven't been able to pull it off yet.