To pass SafetyNet... #1397

C9Glax · 2021-02-17T01:59:39Z

I was able to pass SafetyNet basic and cts with Magisk installed (Only Basic Eval, not Hardware attested).
Setup:
Device: Xiaomi Mi 9T (Europe)
ROM: ArrowOS (11, no GAPPS)
Other software: MicroG, Magisk

Steps to reproduce:

Flash Firmware, ROM and Magisk
~~2. Install MicroG (Core, Proxy, Store and DroidHelper) (from F-Droid)~~
Setup Magisk (incl. Environment and reboot)
On Magisk install Modules:

Riru
Riru EdXposed
microG Installer Revived (To install as system-app)
~~MagiskHide Props Config~~

Reboot
~~6. Install kdrag0n Universal SafetyNet Fix with Magisk~~
In EdXposed install "HiddenCore" Module
~~8. In a terminal-emulator use (su) props and replace the fingerprint with one that matches your security fix. (e.g. Android Q/R, just use a Google Pixel)~~
Finally a step that requires a bit more attention:
Download a custom DroidGuard (WARNING: This is not recommended, but has to be done, because MicroG DroidGuard crashes while checking)
Replace /system/priv-app/DroidGuard/DroidGuard.apk with the downloaded apk.
Uninstall the old DroidGuard (root uninstall required), reboot, and re-install with the replaced file.
Don't forget to setup MicroG and enable SafetyNet!

Enjoy, and tell me if it works for you.

The text was updated successfully, but these errors were encountered:

nift4 · 2021-02-20T07:31:24Z

HiddenCore fakes SafetyNet.

C9Glax · 2021-02-20T12:14:59Z

So what you are saying is that you actually don't need to fake props ~~and use the custom DroidGuard~~?

Edit: You have to use custom DroidGuard.

nift4 · 2021-02-20T17:58:19Z

Nope, I say you should not use HiddenCore because actual apps that use SafetyNet will not work.

nift4 · 2021-02-20T17:58:48Z

I did run into that trap already...

C9Glax · 2021-02-24T08:37:34Z

You are right, and it annoys me -,-

GEkuL · 2021-08-25T18:29:02Z

@C9Glax hello there, could you help me with the issue?

I have almost the same story as you, but can't pass SafetyNet. Can you contact me please?

markone89 · 2022-01-03T11:23:50Z

@C9Glax hello there, could you help me with the issue?

I have almost the same story as you, but can't pass SafetyNet. Can you contact me please?

Same situation with POCO X3 pro, crdroid 7.13 (and any custom rom (microg lineageos, arrowOS, with magisk canary (with zygisk) or stable (riru), , If anyone can advise I would appreciate.
Momo: Device is running a custom rom
Safetynet check advice: RESTORE_FACTORY_ROM
Any ideas?

ghost · 2022-01-13T10:54:59Z

The whole SafetyNet concept itself is a GMS based attestation. Remember that we're spoofing GMScore to be able to utilize their services. CTS is a security layer where it's been updated, improvised, & gets security vulnerabilities fixed on each monthly Android update. That's why even if you successfully attempt to do that, it'll probably fail back eventually.

markone89 · 2022-01-24T07:12:08Z

Thank you very much for your answer, and sorry for the late response. Now I'm understand the mechanism. :)

ale5000-git · 2022-01-26T11:42:39Z

Latest microG GmsCore pass SafetyNet.

D3SOX · 2022-01-26T13:40:43Z

Still fails for me. Using Lineage for microG on a OnePlus 8T + Magisk v24 (Zygisk enabled)
Updated microG Services Core via F-Droid

Screenshot

Atemu · 2022-01-26T14:26:31Z

OP8T is rather new; are you even able to pass safetynet with real gapps with an unlocked bootloader?

ale5000-git · 2022-01-26T15:01:06Z

If the bootloader is unlocked the one that compile the ROM must include the patch to hide it (or use Magisk to hide it, probably there is a module for it).
I'm able to pass it on Galaxy S2.

Try to test with this app:
https://play.google.com/store/apps/details?id=org.freeandroidtools.safetynettest
It should give a more detailed reply.

D3SOX · 2022-01-26T15:10:18Z

@Atemu Yes I think so, I haven't used Gapps in a while.

I tried https://github.com/kdrag0n/safetynet-fix/ and now it looks like this

With the other app

I can try backing up my stuff and see if I get safetynet with an unlocked bootloader + stock ROM + Magisk

ale5000-git · 2022-01-27T12:04:07Z

@D3SOX: You problem is specific to your phone, not general; so please open a separate issue to avoid confusion.

parcelcat · 2022-01-28T01:01:28Z

@D3SOX Installing MagiskHide Props Config and setting a certified device fingerprint should make SafetyNet pass the CTS profile match. (This applies to all devices that pass the basic integrity check, but not the CTS profile match.)

D3SOX · 2022-01-28T04:57:19Z

@D3SOX Installing MagiskHide Props Config and setting a certified device fingerprint should make SafetyNet pass the CTS profile match. (This applies to all devices that pass the basic integrity check, but not the CTS profile match.)

I tried that already setting it to the OnePlus 8T fingerprint, which one did you use? And should I have both SafetyNet Fix and Hide Props Config enabled at the same time? I had only one at a time enabled while testing it.

parcelcat · 2022-01-28T05:22:11Z

@D3SOX Yes, I need both packages at the same time to pass SafetyNet. I used the fingerprint that matched my device model, so I would expect the OnePlus 8T fingerprint to work for you.

D3SOX · 2022-01-28T07:24:45Z

@parcelcat Thank you. Now microG is good but the other app still complains

Screenshots

Is there an app I can try that requires SafetyNet to run?

markone89 · 2022-01-28T07:57:14Z

I would like to make work on my poco x3 pro as in the past the following app: https://play.google.com/store/apps/details?id=hu.otpbank.mobile&hl=en&gl=US you can test registration not need to start the program. At the beginning you will fail to start the app if the phone is not compliant. If you will see the logon screen you passed :)

ale5000-git · 2022-01-28T09:52:03Z

I think that there is some issue with the latest version of SafetyNet Helper Sample.

I currently use this to test:
https://play.google.com/store/apps/details?id=org.freeandroidtools.safetynettest
https://m.apkpure.com/it/safetynet-test/org.freeandroidtools.safetynettest

D3SOX · 2022-01-28T12:24:39Z

@ale5000-git This app says I'm good to go 🎉
Nice job @ everybody who was involved in making this happen.

ArchangeGabriel · 2022-01-28T12:32:15Z

@ale5000-git Yes, that is likely because the developer revoked his key after it has been used in this repository (#1644). So the app need to be updated.

parcelcat · 2022-01-28T14:05:17Z

Glad it worked! For anyone who is looking for a SafetyNet testing app, I recommend YASNAC because it is ad-free and open source: https://play.google.com/store/apps/details?id=rikka.safetynetchecker

ghost · 2022-01-30T11:10:04Z

Latest microG GmsCore pass SafetyNet.

Wow is it really true? Tell me if it's DroidGuard or GMSCore itself...😅

JonnyTech · 2022-01-30T13:15:06Z

https://github.com/microg/GmsCore/releases/tag/v0.2.23.214816

v0.2.23.214816
Changelog
    SafetyNet / DroidGuard:
        Implement DroidGuard without additional helper.

No need for DroidGuard helper any more, just install GMSCore.

markone89 · 2022-01-30T15:49:08Z

Dears,

With the latest microg+magisk v24 (zygisk enforce list)+magisk hide props everything working pretty well :)

Thank you for all! :)

IngwiePhoenix · 2022-03-27T21:58:55Z

So I am a little stuck...

Device: Razer Phone 2
OS: Lineage OS 18.1, no GAPPS
Magisk: 24.3
- LSPosed: 1.8.0
  - FakeGApps: 3.0 via fork by whew-inc
- USNF: 2.2.1
- microG Installer Revived: 2.6.2-0 (microG Services Core 0.2.24.214816)

When I run YASNAC, the basic integrity passes but I am told that the CTS profile does not match.

Any idea how I could fix that? Thank you :)

D3SOX · 2022-03-28T08:38:40Z

So I am a little stuck...

Device: Razer Phone 2

OS: Lineage OS 18.1, no GAPPS

Magisk: 24.3

LSPosed: 1.8.0

FakeGApps: 3.0 via fork by whew-inc

USNF: 2.2.1

microG Installer Revived: 2.6.2-0 (microG Services Core 0.2.24.214816)

When I run YASNAC, the basic integrity passes but I am told that the CTS profile does not match.

Any idea how I could fix that? Thank you :)

Try installing MagiskHideProps and Universal SafetyNet Fix. I pass everything in YASNAC with them.
Also I'd recommend using Lineage for microG instead of installing it via Magisk.

Atemu · 2022-03-28T12:13:47Z

To be more precise, you need to use MagiskHideProps to get a google-blessed device fingerprint. You won't pass CTS with a custom rom fingerprint.

In my case, I USF didn't actually do anything; I only needed to change my fingerprint.

IngwiePhoenix · 2022-03-28T15:07:43Z

So I am a little stuck...

Device: Razer Phone 2

OS: Lineage OS 18.1, no GAPPS

Magisk: 24.3

LSPosed: 1.8.0

FakeGApps: 3.0 via fork by whew-inc

USNF: 2.2.1

microG Installer Revived: 2.6.2-0 (microG Services Core 0.2.24.214816)

When I run YASNAC, the basic integrity passes but I am told that the CTS profile does not match.
Any idea how I could fix that? Thank you :)

Try installing MagiskHideProps and Universal SafetyNet Fix. I pass everything in YASNAC with them. Also I'd recommend using Lineage for microG instead of installing it via Magisk.

That worked! Thanks for the hint, everything is passing now as it should.

ghost · 2022-05-02T15:43:42Z

Some points to consider:

Your ROM should support signature spoofing. If not, you need to use LSPosed module with FakeGApps
If your ROM is not safetynet patched, then you can flash kdrag0n's safetynet fix magisk module. If it's already patched, then you don't need it.
Your ROM should spoof any official supported device fingerprint like Pixel 5, 4 XL, or any Redmi's fingerprint. If it did not, then you can try PixelProps module (redfin is recommended)
If you don't intend to root your system at all, then the ROM you flash must satisfy the above three points out of the box. And you have to patch the vanilla version of that ROM with MinMicrog with any custom recovery, which'll work even without magisk.

Some other points which are false:

No. Flashing magisk modules won't break your CTS.
No. YASNAC or any other safetynet apps usually not needed or required. Microg now has it's own safetynet checker.
No. MagiskHide is deprecated now. Update your magisk & enable Zygisk Denylist. Then add your apps into it that insist not to work due to root issues.

alfredonodo · 2022-07-31T08:11:20Z

Hi,
I have a samsung s8+ with lineage os 19.1 (without gapps), microg (0.2.24), magisk (2.51), universal satefyNet Fix (2.3.1) and magiskHidePropsConfig (6.1.2).
Unfortunately, I cannot pass the safetyNet test because the CTS profile does not match. What can I do?
Thanks

ghost · 2022-07-31T08:18:14Z

@alfredonodo

microg (0.2.24)

How did you install microg ?
On a fresh install, try minMicrog. Or microg_revived (magisk only)

magiskHidePropsConfig (6.1.2)

is outdated. Dev dropped it & you have to use something like Pixel Props.

alfredonodo · 2022-07-31T08:19:43Z

@alfredonodo

microg (0.2.24)

How did you install microg ? On a fresh install, try minMicrog. Or microg_revived (magisk only)

magiskHidePropsConfig (6.1.2)

is outdated. Dev dropped it & you have to use something like Pixel Props.

I installed microg via apk download from the official site. OK I will use Pixel Props.

ghost · 2022-07-31T08:22:21Z

I installed microg via apk download from the official site

You need to systemize it. Microg have issues on userspace side. Or better flash any of the 2 bundles I suggested above.

alfredonodo · 2022-07-31T08:33:56Z

I installed microg via apk download from the official site

You need to systemize it. Microg have issues on userspace side. Or better flash any of the 2 bundles I suggested above.

How can I systemize microg? Pixel Props does not support S8+.

Edit: I solved, thank you. I installed microG, magisk, universal satefyNet Fix and microG Installer.

C9Glax added the question label Feb 17, 2021

C9Glax closed this as completed Feb 24, 2021

To pass SafetyNet... #1397

To pass SafetyNet... #1397

Comments

C9Glax commented Feb 17, 2021 • edited Loading

nift4 commented Feb 20, 2021

C9Glax commented Feb 20, 2021 • edited Loading

nift4 commented Feb 20, 2021

nift4 commented Feb 20, 2021

C9Glax commented Feb 24, 2021

GEkuL commented Aug 25, 2021 • edited Loading

markone89 commented Jan 3, 2022 • edited Loading

ghost commented Jan 13, 2022

markone89 commented Jan 24, 2022

ale5000-git commented Jan 26, 2022

D3SOX commented Jan 26, 2022 • edited Loading

Atemu commented Jan 26, 2022

ale5000-git commented Jan 26, 2022 • edited Loading

D3SOX commented Jan 26, 2022 • edited Loading

ale5000-git commented Jan 27, 2022

parcelcat commented Jan 28, 2022 • edited Loading

D3SOX commented Jan 28, 2022

parcelcat commented Jan 28, 2022

D3SOX commented Jan 28, 2022 • edited Loading

markone89 commented Jan 28, 2022

ale5000-git commented Jan 28, 2022

D3SOX commented Jan 28, 2022

ArchangeGabriel commented Jan 28, 2022

parcelcat commented Jan 28, 2022 • edited Loading

ghost commented Jan 30, 2022

JonnyTech commented Jan 30, 2022 • edited Loading

markone89 commented Jan 30, 2022 • edited Loading

IngwiePhoenix commented Mar 27, 2022

D3SOX commented Mar 28, 2022

Atemu commented Mar 28, 2022

IngwiePhoenix commented Mar 28, 2022

ghost commented May 2, 2022 • edited by ghost Loading

alfredonodo commented Jul 31, 2022

ghost commented Jul 31, 2022 • edited by ghost Loading

alfredonodo commented Jul 31, 2022

ghost commented Jul 31, 2022 • edited by ghost Loading

alfredonodo commented Jul 31, 2022 • edited Loading

C9Glax commented Feb 17, 2021 •

edited

Loading

C9Glax commented Feb 20, 2021 •

edited

Loading

GEkuL commented Aug 25, 2021 •

edited

Loading

markone89 commented Jan 3, 2022 •

edited

Loading

D3SOX commented Jan 26, 2022 •

edited

Loading

ale5000-git commented Jan 26, 2022 •

edited

Loading

D3SOX commented Jan 26, 2022 •

edited

Loading

parcelcat commented Jan 28, 2022 •

edited

Loading

D3SOX commented Jan 28, 2022 •

edited

Loading

parcelcat commented Jan 28, 2022 •

edited

Loading

JonnyTech commented Jan 30, 2022 •

edited

Loading

markone89 commented Jan 30, 2022 •

edited

Loading

ghost commented May 2, 2022 •

edited by ghost

Loading

ghost commented Jul 31, 2022 •

edited by ghost

Loading

ghost commented Jul 31, 2022 •

edited by ghost

Loading

alfredonodo commented Jul 31, 2022 •

edited

Loading