yashsingh1/xdaforums huggingface dataset:
[Android Software/Hacking General [Developers Only]] Wolfcity:
To answer that you have to mention what ROM you're using. Every stock ROM should be signed with a release key, if you're running a custom ROM it depends.

If TB would show test-keys (and that means your real not spoofed key) you may get into trouble.
[Android Software/Hacking General [Developers Only]] markdewet:
Apologies for not mentioning that, I am using RisingOS A13 for SM-G955F.

And TB does not show test-keys, I get test-keys when I run the command unzip -l /etc/security/otacerts.zip, I get the result "Length: 1675 Date: 01-01-08 Time: 00:00 Name" testkey.x509.pem"
[Android Software/Hacking General [Developers Only]] 306bobby:
To save you some time, you'll never pass PI with testkeys
[Android Software/Hacking General [Developers Only]] markdewet:
I'm not sure what you mean by "never pass PI with testkeys". My Google Wallet is working fine and as stated, i get basic and device integrity in TB Checker.
[Android Software/Hacking General [Developers Only]] 306bobby:
That's weird to say the least, but glad it works for ya lol
[Android Software/Hacking General [Developers Only]] markdewet:
Thank you, however, this does not answer my original question: TB Checker shows under "device build fingerprint" that I have xxxx/xxxx/release-keys (not putting full details in as it may get blocked!!). Does anyone perhaps have ANY idea where this could come from?
[Android Software/Hacking General [Developers Only]] 306bobby:
Yes, that is the build fingerprint of the vendor of the stock ROM. For example mine is "google/redfin/redfin:14/UP1A:231105.001:B2/11260668:user/releasekeys", even though it is a may release of a crDroid userdebug. Why? Because that is the last vendor set made for this device.

Also, posting it means nothing, as its just your stock device fingerprint
[Android Software/Hacking General [Developers Only]] osm0sis:
Those are the ROM tags, nothing directly to do with the actual signing keys of the ROM. See my updated PIF FAQ #9 and #14.

PIF FAQ

PIF FAQ Abbreviations DG = DroidGuard (SafetyNet/Play Integrity) GMS = Google Mobile Services (Google Play Services) PIF = Play Integrity Fix Frequently Asked Questions Q: What is a fingerprint and where does it come from? A: A fingerprint...

xdaforums.com
[Android Software/Hacking General [Developers Only]] markdewet:
Ah I see, thank you, sir. Much appreciated.
[Android Software/Hacking General [Developers Only]] markdewet:
As already mentioned, I am NOT running a stock ROM, I am running RisingOS A13
[Android Software/Hacking General [Developers Only]] 306bobby:
And as I mentioned, it is the fingerprint from the vendor partition which came from the stock ROM. I am not running stock either, yet that is my stock fingerprint
[Android Software/Hacking General [Developers Only]] markdewet:
My most humble apologies, I misunderstood your reply, my bad. LOL, well if what you say is in fact correct, then there is something REALLY wrong with my vendor partition,as the full line of the release keys contains Google, Cheetah and Cheetah.13. So I am PRETTY positive my SM-G955F (Samsung S8+) is NOT a Pixel 7 Pro, unless it is going through an identity crisis!!!:ROFLMAO:

:ROFLMAO::ROFLMAO::ROFLMAO::ROFLMAO:
[Android Software/Hacking General [Developers Only]] zgfg:
Not necessarily from the /vendor - that's his Fingerprint

PIF Module spoofs ONLY for DroidGuard.

TB Checker IS NOT Droid Guard, TBChecker just calls PI API, DG gets spoofed, PI passes and TBchecker shows the PI verdict - but TBChecker does not know that DroidGuard was spoofed and how (spoofed prints used in PI attesting are not returned with the PI verdict).

TBChecker shows what it sees and that's what you see there

Use Playstore, Dev Options, you will see the same result - PI passed (thanks to the spoofed prints) but Playstore will show alongside the not-spoofed FP

PS: Click to open JSON with the PI verdict, you will see Basic and Device passed, token, nonce, package name of the calling app - TBChecker, but PI Verdict JSON does not show (spoofed) prints that were used.

Hence TBChecker does not read (spoofed) FP from verdict, but it checks for FP itself

Finally, is your 'real' FP written in System build.prop, Product build.prop or Vendor build.prop, it depends from the ROM

In some ROMs (Xiaomi) I've seen that 'real' FP is not written even in Vendor build.prop.

In Vendor, there are then additional prop files like agate-build prop, agatein-build.prop (India version ROM), etc - each of them has slightly diff Fingerprint and Model - the 'real' ones that apply
[Android Software/Hacking General [Developers Only]] Scholeggo:
I may be doing something wrong, but if I have one of those prints, I should be passing both basic and device, and have rcs, yes?
[Android Software/Hacking General [Developers Only]] zgfg:
Yes

Just don't know how LSposed and its modules may affect RCS, ever changing details
[Android Software/Hacking General [Developers Only]] snakeskaterthree:
Hi there :) It would be great if you could show me where I can check the integrity of a device using the Play Store and the developer options. Because the two apps I was using (Play Integrity API Checker by Nikolas Spiridakis and YASNAC - SafetyNet Checker by Xingchen & Rikka) are after some hours after the limit reset not usable.

Neither in the developer options of my Motorla G84 5G nor in the Play Store I can find the local play integrity check option

Furthermore I'd like to thank all of the guys here working very hard on the Google Play Integrity fixes. That's really hard and amazing work! Great community :)
[Android Software/Hacking General [Developers Only]] Nergal di Cuthah:
Tap playstore version number until it says you're a developer
[Android Software/Hacking General [Developers Only]] snakeskaterthree:
Thanks for the quick reply! :)

I wanted to say that I can't find the option for the local Google Play Integrity Check in the developer options.
[Android Software/Hacking General [Developers Only]] Nergal di Cuthah:
General settings at bottom is developer options if you don't see it after your in there idk
[Android Software/Hacking General [Developers Only]] snakeskaterthree:
Thanks, I uploaded a video. It is just not there.

What you sent is inside the developer options?

I found something here, but that's outside of the developer options (Motorola G84 5G).
[Android Software/Hacking General [Developers Only]] trevtdogg:
you are looking in the wrong developer options section.

open play store app, tap on user profile icon (top right corner), tap settings, tap about, tap play store version number lots of times, then while still in play store settings tap general, at the bottom is developer options.
[Android Software/Hacking General [Developers Only]] Nergal di Cuthah:
I don't even know why you're in that setting and i think the second one is a tester like tb or momo?
[Android Software/Hacking General [Developers Only]] snakeskaterthree:
Got it!

Top right on the Profile Picture => Settings => About => Play Protect certification.

Thanks :)

Is there a more detailed output? Because from "Device is not certified" I can't analyse which Integrity is not "met"

MEETS_BASIC_INTEGRITY
MEETS_DEVICE_INTEGRITY
MEETS_STRONG_INTEGRITY
[Android Software/Hacking General [Developers Only]] Nergal di Cuthah:
Still in the wrong place read my 2nd post again
[Android Software/Hacking General [Developers Only]] snakeskaterthree:
I never new there are PLAY STORE developer options. I was looking in the Android developer options.

Now I really got it ;)
[Android Software/Hacking General [Developers Only]] trevtdogg:
you skipped over these bits:
[Android Software/Hacking General [Developers Only]] Nergal di Cuthah:
And here
[Android Software/Hacking General [Developers Only]] osm0sis:
Holy crap guys, FAQ #10

PIF FAQ

PIF FAQ Abbreviations DG = DroidGuard (SafetyNet/Play Integrity) GMS = Google Mobile Services (Google Play Services) PIF = Play Integrity Fix Frequently Asked Questions Q: What is a fingerprint and where does it come from? A: A fingerprint...

xdaforums.com
[Android Software/Hacking General [Developers Only]] snakeskaterthree:
Yeah, you wrote "There is a checker built in to the Play Store itself if you go into Play Store Settings, repeatedly tap the version number under About, then go to the added Developer Options menu under General."

Today I read so many readmes, FAQ and posts here that I overread it. My bad. Concentration is gone after so many hours. But now I see MEETS_DEVICE_INTEGRITY.

Thank you guys for the help and your great work! :)
[Android Software/Hacking General [Developers Only]] zgfg:
Why don't you google about first. Five minutes and you will find instructions and/or YT video how to enable and use

Faster and no need for ten other ppl to assist
[Android Software/Hacking General [Developers Only]] 306bobby:
Some people still see forums as a social spot to ask questions and discuss. Same reason as to why people would ask someone they are talking to or who is near by a question instead of pulling out their phone to Google it. Some of us are still social creatures.

This is off topic now though lol, back to discussion
[Android Software/Hacking General [Developers Only]] osm0sis:
If it's something in the PIF FAQ people should just be directed to it, and everyone should read it before posting. That avoids a page of posts about something well documented. 🤷‍♂️
[Android Software/Hacking General [Developers Only]] 306bobby:
So, i've noticed a consistent situation when using these scripts to test Play Integrity.

Using Pixel 7a Lineage 21.

When starting out a set of fingerprints to test, PI checks take 10-12 seconds per fingerprint. Then, after about 20-30 of them, it only takes 2-5 seconds. Does this no matter the internet connection (WiFi, different IP address, or LTE/5G, all same result) or method of checking PI (TB, PIAPI, etc)

Any ideas? Is this known?

Edit to add: its not a script issue. Once the decrease in time happens I can go back and turn down the wait timer and resume, continues at the 2-5 second pace
[Android Software/Hacking General [Developers Only]] 306bobby:
I agree, I just was replying as to why people still do it lol. I understand where they come from.
[Android Software/Hacking General [Developers Only]] HippoMan:
And many of the other social creatures who inhabit forums have gotten tired of answering the same questions over and over, and so they have come to prefer to respond to such questions by telling the questioners where to look for their answers.

This is why these social creatures answer this way, and it's where they are coming from.

Writing a short post to direct the social-creature questioners to where their answers can be found will lead them straight to the exact information that they are seeking.
[Android Software/Hacking General [Developers Only]] snakeskaterthree:
Hi guys, I just wanted to confirm that Google Wallet works (payed today with my MasterCard) on my Motorola G84 5G. Latest updates are installed: Security Patch Level 1st of May 2024; Android 14.

I've rooted with Magisk the stock ROM (device has A/B partitions and RAM disk), activated Zygisk, DenyList is not activated, rebooted and I run the autopif.sh and I see MEETS_DEVICE_INTEGRITY which makes me very happy :)

Thank you!

PS: I can understand your frustration about me asking questions that have been answered in the FAQ. It looks like I wanted to go the short way, asking here instead of reading myself because I'm lazy. It was not like that. I was just blind because I never expected that Android has in the Play Store developer options. And I googled 100 times "Local Google Play Integrity Check" but when you think "yeah I've already been in the (android) developer options and it is not there", every YouTube video I watched post I read didn't make sense to me.

And like I said, I read yesterday hours and hours and my concentration was not that good anymore.

Cheers :-)
[Android Software/Hacking General [Developers Only]] flyoffacliff:
I am trying to do this on my Pixel 5, and there is no product props file, so I used the vendor one in place of it, and the gen_pif_custom.sh script gave an error "No fingerprint found, unable to continue".
[Android Software/Hacking General [Developers Only]] osm0sis:
You need to start with the system build.prop in all cases. Name it build.prop, run the script on it then follow the instructions shown.

Also it's not for files from your own device, it's to be used on dumped files from another device's stock ROM to make a print you can use on your device.
[Android Software/Hacking General [Developers Only]] zgfg:
Inspect manually the prop file. If you cannot find Fingerprint, I doubt you would find Product, Device, etc. Then you don't need that /vendor/build.prop
[Android Software/Hacking General [Developers Only]] pershoot:
Reporting here for completeness after some run time (~+72 hours+); no issues observed with v9 on APatch + Zygisk Next.
[Android Software/Hacking General [Developers Only]] osm0sis:
Not sure if anyone's noticed this yet, but just wanted to mention that my changes to make the MagiskSSH module "fully functional" with applets available on the PATH finally got merged earlier this year. I'd previously tried 2 years ago to do the same but at the time the maintainer wasn't open to my assurances that it would work. 😁😛

Changelog:

module_data/README.md · master · Marc W. / MagiskSSH · GitLab

GitLab.com

gitlab.com
[Android Software/Hacking General [Developers Only]] whitedavidp:
Hi and thanks for all you do. I have been using your busybox on my LG V40 for some time. It is v 1.31.1 and has always worked great! I just got a new Moto phone and am setting things up. Of course, I got your Busybox again from this thread. It turns out to be v 1.36.1 and the output during its install says "Cleaning..." followed by "Creating Symlinks". So after rebooting, I looked in /system/xbin for a busybox executable and the symlinks. But there is no /system/xbin so I went looking and found the busybox and symlinks in /system/bin. Is this where they are being put now for a reason? Thanks
[Android Software/Hacking General [Developers Only]] osm0sis:
Explained many times!

https://xdaforums.com/search/71342933/?q=xbin&t=post&c[thread]=2239421&c[users]=osm0sis&o=date
[Android Software/Hacking General [Developers Only]] whitedavidp:
I am sorry to have missed that + bothered you. Thanks again.
[Android Software/Hacking General [Developers Only]] pershoot:
Updated to latest CI build (248) since I'm updating the other as it's a (current) moving target. Using it only in scripts-only-mode (for the interim); seems fine (on APatch).
[Android Software/Hacking General [Developers Only]] osm0sis:
Latest PIFork CI should be fine on APatch, KSU and latest Magisk Canary. It just shouldn't be used on the current Magisk stable due to now using `resetprop -w` in the scripts and removing my `resetprop_hexpatch` workaround since Magisk Canary has fixed the serial counter issue in system_properties.

My plan is to wait for next Magisk stable before releasing PIFork v10. 👍
[Android Software/Hacking General [Developers Only]] demlv:
ADBsync

Osmosis,

I am trying to implement the ADBsync.bat referenced in your sig and in this thread. Unfortunately, I cannot seem to locate the android-compiled zip binary and a couple of the GNUWin32 binaries you are using. Can you post these or provide updated links?

Thanks.
[Android Software/Hacking General [Developers Only]] osm0sis:
You don't need the zip binary unless you use Pulse as a news app. If not, then just comment that section out with :: and don't worry about it. If so, then I linked to all those things in my post already, but here are direct links:

Extract the zip binary from arzbahtia's gradient fix cwm: http://www.mediafire.com/?7a4erfrvpbvycv7

Then there are a couple gnu32 projects that should work:

http://gnuwin32.sourceforge.net/packages.html

http://unxutils.sourceforge.net/
[Android Software/Hacking General [Developers Only]] demlv:
Yes, I do use pulse. I was expecting a direct link to the zip binary itself and I likely never would have tried looking for it inside the CWM gradient fix.

Thanks again!
[Android Software/Hacking General [Developers Only]] klobkelosh:
Just wanted to say thanks to osmosis and the team for the 950iotweaks. I installed over kubo(rubik) kernel and for the first time ever got 3 hours 11 mins screen on time. That's on Toro, stock 15 month old battery. Yeah.
[Android Software/Hacking General [Developers Only]] sawaldibali:
thanks for the scripts, use some from here:thumbup::o

Sent from my HTC One V
[Android Software/Hacking General [Developers Only]] nitsua98:
Bump :D
[Android Software/Hacking General [Developers Only]] osm0sis:
Updated the adbsync sdcard backup automation post with the workaround for an adbsync bug where some files get pulled down to the root of the working drive. Requires the GNUWin32 cp.exe as well, if anyone else was experiencing this issue. :good:

Edit: Hmm.. looks like there's an issue with deleting old removed files too, looking into it.

Edit 2: Okay I think I got it now. It wasn't differentiating between H (host only) and H> (host is newer than android) in the adbsync output. Of course the latter shouldn't happen with our usage case, but since we're copying things around and adbsync has the occasional issue with file times it's definitely possible and needed the support. Also fixed support for files/directories with spaces. :)
[Android Software/Hacking General [Developers Only]] chillybean:
Tag your it

One ROM @ a time....VIA ELECTRICITY
[Android Software/Hacking General [Developers Only]] nitsua98:
Woahhhhhhhhhhhh!
[Android Software/Hacking General [Developers Only]] demlv:
Two questions:

1) I think I grabbed the updated script, but I don't see cp.exe referenced in it. Is it really there?

2) Is there a straightforward way to do the reverse of what the script does? I want to ADB push a folder's contents recursively to the phone (so that all subfolders and their contents are placed on the phone).

Thanks for any input....:fingers-crossed:

EDIT: May have noticed a bit of trouble. Script is removing old files/folders on PC but only in sdcard/0/. New nandroids found in sdcard/clockworkmod/backup get added to the PC but old ones already deleted from the phone are not deleted on the PC side. Is that by design?
[Android Software/Hacking General [Developers Only]] osm0sis:
1) Yeah it's in the new "workaround" part. Line 16-17. :)

2) If you don't require the syncing then you should just do a normal adb push, right?

Yeah adbsync.exe fails to report that some files are Host only in the log so my batch script doesn't know about them to delete them. Known issue. :( Otherwise it seems to work pretty well. :good:
[Android Software/Hacking General [Developers Only]] osm0sis:
Hijacking this old nothing post, since I didn't want to make a new one for this.. :p

Here's a fun little regression tester I wrote which will run on Cygwin, Android, Linux and macOS. ;)

aik-regtest.sh:

#!/bin/sh

# aik-regtest.sh
#
# osm0sis @ xda-developers
#
# formal regression tester for AIK
# ($?, compare ids, test optional args)

case $0 in
*.sh) ;;
*) echo "error: cannot be run sourced"; return 1;;
esac;

case $1 in
""|*help) echo "$0 \"<AIK dir>\" \"<boot-img-collection dir>\" \"[search prefix]\" \"[repack args]\""; exit 1;;
esac;

# work around macOS sh built-in echo sucking ass
ECHOBIN=$(which echo);
echo() { "$ECHOBIN" "$@"; }

case $(uname -s) in
CYGWIN*|Cygwin*) unset SUFF;;
Darwin|Macintosh) SUFF="-macos";;
*)
case $(uname -m) in
arm*|aarch64) SUFF="-arm";;
*86*) SUFF="-x86";;
esac;
;;
esac;

REGDIR=$(cd "$(dirname $0)" && PWD= /bin/pwd);
AIKDIR=$(cd "$1" && PWD= /bin/pwd);
IMGDIR=$(cd "$2" && PWD= /bin/pwd);
[ "$REGDIR" -a "$AIKDIR" -a "$IMGDIR" ] || { echo "error: invalid path"; exit 1; }
[ -f "$REGDIR"/bootimg-info$SUFF ] || { echo "error: missing bootimg-info$SUFF binary"; exit 1; }
chmod 755 "$REGDIR"/bootimg-info* "$REGDIR"/aik-regtest.sh;

[ "$3" = " " ] || PREFIX="$3";
RPARGS=--original;
[ "$4" ] && RPARGS="$4"
case $4 in
" "|none) unset RPARGS;;
esac;
echo " ";
echo "REGDIR = $REGDIR";
echo "AIKDIR = $AIKDIR";
echo "IMGDIR = $IMGDIR";
echo " ";
echo "PREFIX = $PREFIX";
echo "RPARGS = $RPARGS";

for IMG in "$IMGDIR"/$PREFIX*; do
echo " ";
[ -f "$IMG" ] || { echo "error: no images found"; exit 1; }
echo "$(basename "$IMG")";
AIKIMG="$IMG";
which cygpath >/dev/null && AIKIMG=$(cygpath -w "$IMG");
"$AIKDIR"/unpackimg.* $AIKIMG pushd >/dev/null 2>&1;
echo -n " [$?]";
"$AIKDIR"/repackimg.* $RPARGS pushd >/dev/null 2>&1;
echo -n " [$?]";
if [ -f "$AIKDIR"/image-new.img ]; then
if diff "$IMG" "$AIKDIR"/image-new.img >/dev/null; then
echo -n " [I]";
else
echo -n " [D]";
fi;
IDU=$("$REGDIR"/bootimg-info$SUFF "$IMG" | grep " id " | cut -d: -f2 | cut -c2-);
IDR=$("$REGDIR"/bootimg-info$SUFF "$AIKDIR"/image-new.img | grep " id " | cut -d: -f2 | cut -c2-);
if [ "$IDU" -a "$IDR" ]; then
if [ "$IDU" = "$IDR" ]; then
echo -n " [M]";
else
echo -n " [U]";
FLAG=' *';
fi;
fi;
fi;
echo " ";
if [ "$IDU" -o "$IDR" ]; then
if [ "$IDU" ]; then
echo " $IDU";
else
echo " cannot read id";
fi;
if [ "$IDR" ]; then
echo " $IDR$FLAG";
else
echo " cannot read id";
fi;
fi;
unset FLAG IDU IDR;
done;

exit 0;

It needs to be in the same directory as my bootimg-info binary, compiled as bootimg-info.exe for Cygwin, bootimg-info-arm for ARM, bootimg-info-macos for macOS and bootimg-info-x86 for Linux, and can be used with my boot-img-collection or your own. :p

Happy hacking!
[Android Software/Hacking General [Developers Only]] Midomad:
You're last color settings are just awesome however There is a little difference between color multipliers(255) in you're posted config and color multipliers in 900colorsetting(265) file!

Envoyé depuis mon Galaxy Nexus avec Tapatalk
[Android Software/Hacking General [Developers Only]] osm0sis:
Ah thanks for pointing that out! The typo is actually in my settings post though; the init.d script is correct: 255 265 340 for the multiplier. :)
[Android Software/Hacking General [Developers Only]] fozzie:
I thought 255 was the max for RGB i.e. one byte?
[Android Software/Hacking General [Developers Only]] osm0sis:
Some kernels limit it but the max has always been 400. :)
[Android Software/Hacking General [Developers Only]] Midomad:
I see new i/o and mnt settings?

What's new?

Envoyé depuis mon Galaxy Nexus avec Tapatalk
[Android Software/Hacking General [Developers Only]] osm0sis:
;)

11-Jun-2013 950iosettings by Franco's Dev Team

12-May-2013 875mntsettings by Franco's Dev Team

11-Jun-2013 925vmsettings by Franco's Dev Team

950io only has cosmetic changes I hadn't noticed until now and is functionally the same as the 12-May version.

875mnt is the same as when originally posted. If you didn't catch my previous explanation of it, it brings the tweaked mount settings and the sysfs/sdcard remount script, that I already directly put into the fstab/init.rc and fkbootscript.sh for osmod, to a standalone script.

925vm is brand new with some finalized non-vm tweaks (which have been in osmod for awhile), and the new lmk + vm test tweaks which aren't finalized yet, but [MENTION=4793042]pkgnex[/MENTION], [MENTION=647743]Khrushy[/MENTION], [MENTION=2918197]The Gingerbread Man[/MENTION], and myself are working away at them as our main focus now. Please let us know how they feel vs. f.K default vm in r378-osmod. :)

http://v.ht/osm0sis

http://d-h.st/users/osm0sis

I also have a new 900color up in my GN Settings post if anyone was wondering where the "900-" script was at. :p
[Android Software/Hacking General [Developers Only]] Empty Hand:
And how about that experimental script? Sounds so intriguing and dangerous...