MAGISK MODULE ❯ Universal SafetyNet Fix 2.4.0

[lupastro82]

Installed in pixel 7pro.
CTS fail here

-----
Edit: ok fixed now (add with this fork module, and this in denylist)

 

[Atharkhan101]

SafetyNet fix worked for me and it shows my device is certified in PlayStore. However there are problems:
1. Some apps like RTO says my device is rooted and my bank app is not working. Both apps use to work on Magisk 22.1 with SafetyNet fail.
2. I forgot what this was.

Do watch the screen record I've attached.

May be its latest Magisk 25.2 issue.

 

[zgfg]

SafetyNet fix worked for me and it shows my device is certified in PlayStore. However there are problems:
1. Some apps like RTO says my device is rooted and my bank app is not working.
2. I forgot what this was.

Do watch the screen record I've attached.

May be its latest magisk issue.

Applications use various other methods to look for the root (actually, to look if Bootloader is unlocked, if LSPosed is installed, Magisk app installed, if TWRP app is installed, etc - all that is NOT COVERED by SafetyNet)

You have to enable your banking apps in DenyList. You may need to install Shamiko, you may need to use Hide My Apps (HMA)

There are lot of instructions on XDA:
- search for the thread about Magisk Zygisk, read OP posts there
- search for the thread about using HMA and read the OP posts there with instructions about
- search for the Magisk general thread and the mentionef Magisk Zygisk thread, maybe somebody already commented what exact steps are required to hide 'root' for the same app you need

 

[Atharkhan101]

Applications use various other methods to look for the root (actually, to look if Bootloader is unlocked, if LSPosed is installed, Magisk app, etc - all that is not covered by SafewayNet)

You have to enable your banking apps in DenyList. You may need to use Hide My Apps (HMA)

There are lot of instructions on XDA:
- search for the thread about Magisk Zygisk, read OP posts there
- search for the thread about using HMA and read the Kao posts with instructions about
- search in this thread and that Magisk Zygisk thread, maybe somebody already commented what exact steps are required to hide 'root' for the same app you need

Please watch the screen record I've posted (Edited post by adding video). I know zygisk in Magisk and already hide root for these 2 apps and other. Still not success.

I wish there should be a separate flashable zip to spoof Bootloader to 'locked' when it's already Unlocked.

Following your advice now checking Kao post etc.

 

[Atharkhan101]

Applications use various other methods to look for the root (actually, to look if Bootloader is unlocked, if LSPosed is installed, Magisk app installed, if TWRP app is installed, etc - all that is NOT COVERED by SafetyNet)

You have to enable your banking apps in DenyList. You may need to install Shamiko, you may need to use Hide My Apps (HMA)

There are lot of instructions on XDA:
- search for the thread about Magisk Zygisk, read OP posts there
- search for the thread about using HMA and read the OP posts there with instructions about
- search for the Magisk general thread and the mentionef Magisk Zygisk thread, maybe somebody already commented what exact steps are required to hide 'root' for the same app you need

Could you please send me the links. I couldn't find them In looking for what Kao said.

I looked for Shamiko but it is not available on github (Genuine source)

There are so many apps labelled as Hide Apps, Hide an app, not the one you mentioned HMA. Will appreciate if you give direct links.

 

[zgfg]

Please watch the screen record I've posted (Edited post by adding video). I know zygisk in Magisk and already hide root for these 2 apps and other. Still not success.

I wish there should be a separate flashable zip to spoof Bootloader to 'locked' when it's already Unlocked.

Following your advice now checking Kao post etc.

I watched your video. Btw, I also edited my previous post

I don't use you RTO app and developers do not publish how they look for the 'root'. Hence no way that I can tell you what steps are needed to hide 'root' from that app - it can be ONLY found by experimenting

I gave you the hints: put it to DenyList and reboot, install Shamiko and reboot, try with HMA and reboot...

Even worse, things may differ between the phones, ROMs, Android versions. A method to hide 'root' for one particular app, that works on eg Samsung with A11 (telling arbitrary) may not be enough for Xiaomi with A12, or for the custom ROMs like LOS, etc

Usually, before retesting, clear Data for your RTO app BCS it may remember that the previous time it found the 'root', hence your new hiding will not help

Btw, this is out of topic for this thread (this thread is about passing SafetyNet and its new successor Play Integrity API).
There is also a thread about hiding the 'root' with some instructions there (but not man posts following)

Generally, search on XDA about your RTA app, maybe somebody posted.
Maybe you will need Magisk Delta fork (it hides better than the official Magisk)

Sorry, too many variables, but maybe the answer is very simple and straightforward if you find that somebody else already tweaked that app

 

[zgfg]

Could you please send me the links. I couldn't find them In looking for what Kao said.

I looked for Shamiko but it is not available on github (Genuine source)

There are so many apps labelled as Hide Apps, Hide an app, not the one you mentioned HMA. Will appreciate if you give direct links.

It was typo, it should have been "OP posts" - posts by the original poster who opened the thread (a particular thread eg with the guide for using HMA)

Please use Google. Eg, Google for:
XDA Magisk general
and
XDA Magisk Zygisk
and
XDA Hides my apps guide
and
XDA Magisk Delta
etc

Btw, on XDA, top-right of the pages, there is also Search

Sorry, I really don't have time and (and don't see any need for) to do searches for you and to copy-paste the links (I'm subscribed to a dozen of interesting threads, I don't keep their links to copy/paste the handy URLs)

And sorry, I'm also not interested into the RTO app (don't know what it is and where from to install) to investigate how to hide the root from

Btw, if you post the installation link for your app, ppl with various phones, ROMs, Magisk configurations may test does the app open for them

 

[73sydney]

Could you please send me the links. I couldn't find them In looking for what Kao said.

I looked for Shamiko but it is not available on github (Genuine source)

There are so many apps labelled as Hide Apps, Hide an app, not the one you mentioned HMA. Will appreciate if you give direct links.

bookmark this thread, most files, including Shamiko can be found linked from the first page of the thread, and check the last few pages regularly to keep up with any changes

[Discussion] Magisk - The Age of Zygisk.

This is a discussion and help thread for the newer versions of Magisk. The main goal of this thread is to help users migrate to Magisk v24+ SafetyNet Basic integrity Pass CTS profile match Pass Play Protect certification Device is certified...

forum.xda-developers.com

Hide My Applist - theres a guide (not yet linked from that page, perhaps @ipdev wants to separate himself from the (planned) madness its devolving into) can be found here:

Hide My Applist - A Brief Guide

Hide My Applist Guide As i'm no longer active on XDA, to make the guide more easily maintainable (multiple editor access etc) going forward, i have moved it offsite to github at the following address...

forum.xda-developers.com

But please learn to use the search too, thanks

 

[zgfg]

SafetyNet fix worked for me and it shows my device is certified in PlayStore. However there are problems:
1. Some apps like RTO says my device is rooted and my bank app is not working. Both apps use to work on Magisk 22.1 with SafetyNet fail.
2. I forgot what this was.

Do watch the screen record I've attached.

May be its latest Magisk 25.2 issue.

Not sure if this is your app (I looked on Playstore but since I'm not from India, maybe I can't see all the regional apps):

RTO Vehicle Information - Apps on Google Play

Find vehicle Owner detail from their vehicle number. Check your driving license.

play.google.com

First I install and opened, it reported the root

I put to DenyList and rebooted - still reported the root

I added to my Hide My Apps, hiding Magisk app, LSPosed and modules, rebooted (and cleared Cache and Data for RTO app) and there was no more root detection popup - it asked me to select language and city (screenshots)

Maybe you don't even need HMA (eg, if you don't have LSPosed installed) but simply hiding Magisk app would work instead. You must test yourself

How to look for instructions on how to use DenyList, HMA, etc - you got info in the previous posts

My config:
Xiaomi, MIUI 12.5/A11, Magisk Canary 25205, Zygisk, DenyList (configured but not enforced), Shamiko and USNF (Display mod, not only for SafetyNet but also for the new Play Integrity), LSPosed + Hide My Apps

 

[Atharkhan101]

Not sure if this is your app (I looked on Playstore but since I'm not from India, maybe I can't see all the regional apps):

RTO Vehicle Information - Apps on Google Play

Find vehicle Owner detail from their vehicle number. Check your driving license.

play.google.com

First I install and opened, it reported the root

I put to DenyList and rebooted - still reported the root

I added to my Hide My Apps, hiding Magisk app, LSPosed and modules, rebooted (and cleared Cache and Data for RTO app) and there was no more root detection popup - it asked me to select language and city (screenshots)

Maybe you don't even need HMA (eg, if you don't have LSPosed installed) but simply hiding Magisk app would work instead. You must test yourself

How to look for instructions on how to use DenyList, HMA, etc - you got info in the previous posts

My config:
Xiaomi, MIUI 12.5/A11, Magisk Canary 25205, Zygisk, DenyList (configured but not enforced), Shamiko and USNF (Display mod, not only for SafetyNet but also for the new Play Integrity), LSPosed + Hide My Apps

Wow you have achieved it. Yes that is the right app. However I feel we do not have to take so many steps to make few apps work. I appreciate your will though. I wish there was some simple way like I don't like to install Lsposed and other stuff just for 2 apps.

I wrote on github magisk issue page and the so called magiskbot has closed the issue right after submitting it. Lame!

I have tried hiding magisk app and still the same issue.

I installed HMA, it says not activated. Is it a Lsposed module?

 

[Atharkhan101]

I added to my Hide My Apps, hiding Magisk app, LSPosed and modules, rebooted

I did not get this part. So you went into Lsposed and run Hide My Apps and within HMA you selected RTO app ?

 

[zgfg]

Wow you have achieved it. Yes that is the right app. However I feel we do not have to take so many steps to make few apps work. I appreciate your will though. I wish there was some simple way like I don't like to install Lsposed and other stuff just for 2 apps.

I wrote on github magisk issue page and the so called magiskbot has closed the issue right after submitting it. Lame!

I installed HMA, it says not activated. Is it a Lsposed module?

HMA is LSPosed module. Please do not ask things that are described in the HMA Guide thread, please take your time and read, learn things - you were even given the link to that thread with extensive OP instructions

I wish many things but they will not materialize

Btw, TJW (author of Magisk), maybe already two years ago, was hired by Google and he clearly distanced himself from any root hiding. Magisk does not provide that option anymore and you can not report hiding issues for your app as a bug.
I'm even pretty sure that on his GitHub, Issues page, it is noted that problems with hiding the root must not be reported (not sure did you read things)

Anyway, steps I made are usually needed for 99% percent of 'banking' apps (apps that seek for 'root') and for most of them no additional steps are needed.
Hence you need to learn on this first example and in the future you will need only five minutes to hide the root from your next banking app when you step on

Again, we gave you hints what to read, study and learn - I'm pretty sure you didn't (hence sorry, I will no more waste time on answering you) because you don't follow and still ask for what is covered in those instructions.
Enough from my side, good luck

 

[rg_gapa]

There're some threads at Github and XDA forum about broken fingerprint scanner at OnePlus/Oppo devices, but they seem to be outdated, because (in theory) problem was fixed in recent versions of USNF.

But even with latest v2.3.1 my OnePlus 7T (OxygenOS 12.1, HD1903_11_F.17) can't recognize fingerprints. Disabling module fixes it immediately, but obviously SafetyNet is lost without module enabled.

Do you guys have any idea what might be wrong with my device props or something?

I've tried installing this fix https://github.com/wuxianlin/ColorOSMagisk along with USNF - but with no luck.

 

[ipdev]

Do you guys have any idea what might be wrong with my device props or something?

It is a OnePlus 7T.

There're some threads at Github and XDA forum about broken fingerprint scanner at OnePlus/Oppo devices, but they seem to be outdated, because (in theory) problem was fixed in recent versions of USNF.

But even with latest v2.3.1 my OnePlus 7T (OxygenOS 12.1, HD1903_11_F.17) can't recognize fingerprints. Disabling module fixes it immediately, but obviously SafetyNet is lost without module enabled.

Do you guys have any idea what might be wrong with my device props or something?

I've tried installing this fix https://github.com/wuxianlin/ColorOSMagisk along with USNF - but with no luck.

It has been a while and I do not remember what props set when/where broke this or that.
I know OnePlus OPPO has had some issues with props being set early or late.

Give Displax's mod version a try.
Displax USNF-Mod - [GitHub] - Releases
Besides the Play Integrity hack, it also included some updates to the props.

---

It has been awhile since the last time I tired 12 (beta 2?) on my 7T, I had major issues.
So I grabbed the fastboot downgrade and went back to 11 and it has been sitting since.
Not even rooted.

I found a download link for 7T (Global) from 11->12 OTA, currently installing.

Will see what happend on my end once I get it setup and rooted.

Cheers.

 

[rg_gapa]

It is a OnePlus 7T.


It has been a while and I do not remember what props set when/where broke this or that.
I know OnePlus OPPO has had some issues with props being set early or late.

Give Displax's mod version a try.
Displax USNF-Mod - [GitHub] - Releases
Besides the Play Integrity hack, it also included some updates to the props.

---

It has been awhile since the last time I tired 12 (beta 2?) on my 7T, I had major issues.
So I grabbed the fastboot downgrade and went back to 11 and it has been sitting since.
Not even rooted.

I found a download link for 7T (Global) from 11->12 OTA, currently installing.

Will see what happend on my end once I get it setup and rooted.

Cheers.

I'll give it a try, but github says that this fork is identical to the original USNF
"There isn’t anything to compare.
kdrag0n:master and Displax:v2.3.1-MOD_2.0 are identical."

Edit:
OMG that worked, thank you! SafetyNet is passed AND fingerprint scanner works

 

[pndwal]

I'll give it a try, but github says that this fork is identical to the original USNF
"There isn’t anything to compare.
kdrag0n:master and Displax:v2.3.1-MOD_2.0 are identical."

It's most certainly not the same!

Perhaps you're looking at Master forked branch... These often represent the clean forked commits only... Change to Integrity branch... 10 commits ahead... Can use either of two releases for most devices... Mod 2 needed only for Pixel 7 series or devices launching with A13, but does seem to address fingerprint scanners and other issues further...

This fork may well fix your fingerprint issue...

You'll find OnePlus/fingerprint/A12+ specific changes (some due to experimenting) here:
Move safetynet props to boot completed to fix fingerprint not working… …
… on OOS12
here:
Bypassing forced STRONG integrity …
* SafetyNet/Play Integrity (bypassing forced STRONG integrity for devices that shipped with 13+) by drop "first_api_level" to <33
* Some cosmetics/fixes
and here:
Move "ro.is_ever_orange" out of boot_completed

The last commit may be critical for you meaning Mod 2 release may be best for OnePlus users even on devices other than P7 / A13 LV devices...

Great info/discussion on @Displax's "A universal fix for SafetyNet and Play Integrity API on Android 8–13 devices with hardware attestation and unlocked bootloaders" fork/proposal for official fix in official PR here:
Play Integrity Api bypass

PW

 

[pndwal]

SafetyNet fix worked for me and it shows my device is certified in PlayStore. However there are problems:
1. Some apps like RTO says my device is rooted and my bank app is not working. Both apps use to work on Magisk 22.1 with SafetyNet fail.
2. I forgot what this was.

Do watch the screen record I've attached.

May be its latest Magisk 25.2 issue.

I'm playing catch-up and may have missed something, but it appears you may still only be passing SafetyNet...

Just in case you aren't aware, S/N is now deprecated and apps are migrating to new Play Integrity API... They're looking for MEETS_DEVICE_INTEGRITY verdict at this stage; no apps I'm aware of using MEETS_STRONG_INTEGRITY found in the wild yet...

If you've overlooked this fundamental in the palava, you'll likely need @Displax's forked and modded USNF w/ hardware verdict enforcement bypasses for Play Integrity instead of official USNF... Just posted re. this above...

Check device passes PI deviceIntegrity with Play Integrity API Checker... PW

 

[Atharkhan101]

@zgfg

73sydney​

I found a work around (no Lsposed, HMA, shamiko needed, they did not work too).

So,
1. I have cleared data and uninstalled the RTO, Medibuddy app which were detecting root and were not working.
2. Uninstalled Magisk
3. Reboot phone
4. Installed Magisk latest 25.2 > Settings > Enabled 'Zygisk' and Checked 'Enforce DenyList'
5. Hide Magisk (need to do this before installing those root detect apps from PlayStore)
6. Reboot
7. Installed RTO and other root detect apps from PlayStore (did not open them yet).
8. Magisk > Settings > Cofigure DenyList > Checked RTO and other root detecting apps.
9. Went back back to my phone's home screen.
10. Reboot.
11. Launched those RTO and other root detect apps and they worked!

I would say most root detecting apps would work with the above method however for me out of 5 Root detecting apps, 4 worked except HDFC bank app. It was working fine on Magisk Manager v23.0 with Magisk.zip v22.1.

 

[bombadier]

I looked for Shamiko but it is not available on github (Genuine source)

Its not in a repository of its own

GitHub - LSPosed/LSPosed.github.io

Contribute to LSPosed/LSPosed.github.io development by creating an account on GitHub.

github.com

Shamiko Releases

 

[zgfg]

@zgfg

73sydney​

I found a work around (no Lsposed, HMA, shamiko needed, they did not work too).

So,
1. I have cleared data and uninstalled the RTO, Medibuddy app which were detecting root and were not working.
2. Uninstalled Magisk
3. Reboot phone
4. Installed Magisk latest 25.2 > Settings > Enabled 'Zygisk' and Checked 'Enforce DenyList'
5. Hide Magisk (need to do this before installing those root detect apps from PlayStore)
6. Reboot
7. Installed RTO and other root detect apps from PlayStore (did not open them yet).
8. Magisk > Settings > Cofigure DenyList > Checked RTO and other root detecting apps.
9. Went back back to my phone's home screen.
10. Reboot.
11. Launched those RTO and other root detect apps and they worked!

I would say most root detecting apps would work with the above method however for me out of 5 Root detecting apps, 4 worked except HDFC bank app. It was working fine on Magisk Manager v23.0 with Magisk.zip v22.1.

Few comments:

4) If using Shamiko then must not be Enforce DenyList.
If not using Shamiko then must be Enforced.
That was many times debated in this thread and so.
Most of ppl use Shamiko, hence they have disabled Enforce

5) Fine if it worked for you just with Hide Magisk App.
However, Hide Magisk app is not enough for some other 'banking' apps and that's why I tested with HMA instead

Actually, many of us already have LSPosed installed with some modules - they are detected by banking apps and we MUST hide them by HMA.
That's why I tested with HMA, but I asked you to test by Hide Magisk app instead (since you don't have LSPosed module)

Good that you tested and that Hide Magisk app was enough for you

8) RTO or other apps you want to hide root MUST be in DenyList.
You had to have it from the beginning

Even if Enforce Denylist is disabled cos of Shamiko, those apps must be checked in DenyList.

Regarding the old Magisk v22, you probably had it:
- also Hide Magisk app
- instead of now in DenyList, you had then RTO in MagiskHide list

One must checkmark in DenyList (Magisk v24/25) all those 'banking' apps that he previously had checked in MagiskHide (Magisk v22 or earlier)