yashsingh1/xdaforums huggingface dataset:
[SuperSU] ashxdafan:
As of now anyone found a fix for safetynet to pass with root and xposed for SM-G935FD?

Perhaps specific rom and kernel combo with 2.78SR1 + suhide + root switch did the trick?

Been trying to fix the dm verity check however haven't had any luck.

Cheers
[SuperSU] Barfelonous:
Yeah I've gotten a pass with pogo working without xposed. Can't figure it out
[SuperSU] Triviox:
I pass safetynet with Galaxy s5, CyanogenMod 13 (unrooted) ; supersu 2.78 SR1 systemless, suhide 0.55, xposed 86.2 systemless, rootswitch 1.3.1.2 (with stop all daemons check), kernel enforcing.

When i "disable" root en rootswitch and can play PoGo (and pass safetynet) using xposed modules (for exemple snorlax xposed module)
[SuperSU] zezayer:
[MENTION=631273]Chainfire[/MENTION]

Is there any chance you will update this for Android 7.1? It currently refuses to boot android once suhide 0.55 is flashed.

I know safetynet is a loosing battle, but this is currently the only way of hiding root from banking and TV on demand apps (until xposed comes to 7) , making it very useful even if SN cannot be bypassed.

Thanks
[SuperSU] danieldmm:
OnePlus 3 , not OnePlus One, this device does not have ro.boot.verifiedbootstate on cm13 ;)

Have a OnePlus One and if boot phone without no root at all it will pass on safety net, but when install supersu it goes red and it will fail.
[SuperSU] Barfelonous:
Magisk being detracted? Haven't seen anything work with it
[SuperSU] westeight:
Passing SafetyNet fine on my HTC 10 with SuHide and Magisk 8:
[SuperSU] aostrom:
As someone mentioned, Flash released an update to Flash kernel (3.13) that hides bootloader status. With that, on my Nexus 6P, suhide 0.55, RootSwitch 1.3.1.2 I can pass both SafetyNet Helper and SafetyNet Playground.

Great, right?

Not so much - I tried an AP transaction this afternoon, 5 seconds after passing the tests, and got the "you may have to unroot" failure. To be sure, I ran the tests again, and both passed. WTF???
[SuperSU] westeight:
Can you add a new card to AP?
[SuperSU] M9x3mos:
Has anyone been able to get this working on a nexus 6 with Android 7.0?
[SuperSU] mrxtc89117:
YOu have Magisk v8, phh superuser 259, suhide and xposed 86.6 all working? Do you need to stop xposed to pass safetynet?
[SuperSU] grep_i:
Finally I figured it out, I know how to make it work on Nexus 5

Nexus 5 Hammerhead Android 6.0.1 M4B30X [MENTION=222739]google[/MENTION] & LG

I flashed the following in this exact order in one go:

suhide-rm-v0.51 [MENTION=631273]Chainfire[/MENTION]

UPDATE-unSU [MENTION=4544860]osm0sis[/MENTION]

Supersu 2.78 SR1 [MENTION=631273]Chainfire[/MENTION] & [MENTION=880175]ccm[/MENTION]T

ElementalX-N5-6.24 [MENTION=4684315]flar2[/MENTION]

Xposed systemless v86.1 SDK23 [MENTION=2476451]romracer[/MENTION]

suhide v0.55 [MENTION=4684315]flar2[/MENTION]

Reboot to system and in a terminal emulator or through "adb shell"

echo '#!/su/bin/sush\nmount -o rw,remount rootfs /\nchmod 0751 /\nmount -o ro,remount rootfs /'>/su/su.d/06suhide; chmod 0700 /su/su.d/06suhide

Now install Root switch.

In my case v1.3.1.2

Checkmark the following see screenshot:

Reboot the device

After system is back online do the following disable root in root switch app, see screenshot:

Now you're good to go and you must check if safetynet passes, to me this procedure worked 6 times in a row now.

It took a lot of time but I finally found it out for my device.

It only seems to the right way in my case if I flash all in one go if I reboot during an earlier step all goes well but safetynet won't pass.

Hopefully this can help someone.
[SuperSU] westeight:
Not using phh. I'm using SuperSU. Xposed does not need to be disabled.

LeeDroid 2.7.0

ElementalX 0.22

SuperSu 2.78 SR1

SuHide 0.55

Magisk v8

Xposed 86.6

Root Switch 1.2.9.1

XSetProp 0.2
[SuperSU] michaeldcoates:
Quick question, am I right in thinking that once a phone has been unlocked and failed a satefynet test that it will always fail even if you relock the bootloader?

Currently I'm using Nexus 6P 7.1 with SR1 2.78 SU and of course I can't get SUHide to work yet so my banking apps are useless. I considered relocking the bootloader and starting again but if they won't work anyway then so point. I'll be gutted if more apps start using safetynet. I rely on uber for work a lot so if they use it then I'm knackered - I'd have to get a new phone if the above statement I made is actually correct :S
[SuperSU] grep_i:
I don't think it's correct I myself had many times failed safetynet with unlocked bootloader but also passed a lot times.

Right now I'm passing safetynet again, half of this day I did not pass safetynet.

So it is possible to pass safetynet again after a failure, don't know how it applies to your situation.

I guess if you flash factory image on your device it will pass safetynet but there are no guarantees some mentioned they didn't succeed some say they do.

I guess you have to try to find out.
[SuperSU] bobby janow:
Once you relock the BL you will always always pass.
[SuperSU] Coogibay37:
I install everything correctly when I open magisk manager it gave me a pop up telling me update magisk and install when I hit to update and install it updates and when it's time to reboot I hit reboot it just go on a boot loop I go back to recovery mode install Skyhigh kernel on my Galaxy Note 5 from T-Mobile when I boot up it's not install and give me the same pop up does anybody have a fix or tell me what I'm doing wrong I have a Galaxy Note 5 from T-Mobile running on a custom ROM Note 7 please help me I'm trying to everything nothing seems to work to play Pokemon go
[SuperSU] justmiike:
Anyone using a Galaxy Note that has been successful in passing SafetyNet with Xposed? Anything to add with my setup below to get Xposed working?

My setup at the moment is:

Magisk 8

phh-superuser-magisk-r259

SafetyNet passes.

When Xposed 86.6 is installed, it fails. However, I can deactivate it via the Xposed manager, and SafetyNet passes.

I can always reboot to use it, but would be nice for a solution. Tried every other method, and this seems like the only one that works.
[SuperSU] bouchigo:
[MENTION=2659927]bobby janow[/MENTION]

Check your pm's :good:
[SuperSU] aostrom:
I only have two cards that work with AP, I suppose I can try deleting one and re-adding it. I'll try that tonight.
[SuperSU] robertjayc:
try this rom Phronesis Rom N7 v3.1 you'll love it! from note 3 to note 7! my phone is also note 3.

http://xdaforums.com/galaxy-note-3/development/rom-phronesis-mm-rom-v1-0-feature-rich-t3463244
[SuperSU] voland66:
Locking bootloader forces a complete factory reset. At least on nexuses this is enough to pass safetynet (I do not know if other tamper detection methods, such as samsung's knox, would trigger safetynet but bootloader relock is sufficient for nexuses). I did that with nexus 5x, my android pay is working (did not pay yet but re-added all the cards).
[SuperSU] ddimple4:
For Nexus 5 and earlier, one can use the BootUnlocker for Nexus app from the Play store to lock/unlock the bootloader (once you have root).

Locking won't give an automatic pass, however. :(
[SuperSU] michaeldcoates:
That's reassuring, I had read concerns from some people that it would affect their re-sale value because their phones would be blacklisted. Perhaps that's just a fear based on the direction they assume Google are going in and not something that has actually happened yet. I wish SUHide was working with 7.1.1 but I guess it takes a long time for these things to be worked out. Perhaps it'll never work again with 7.1 onwards... I read concern over that too which ultimately means a lot of people (like me) won't be rooting at all in the future. To be honest I only rooted for GA and I don't regret it now I've used it because it's amazing in my opinion, just a shame I can't use WF or AP apps :/ If an app like Uber updated to check for bootloader unlock as well then I'd have to revert to stock as I rely on it. Total nightmare!

---------- Post added at 04:17 AM ---------- Previous post was at 04:13 AM ----------

I believe apps that are signed up to use safetynet (banking, android pay, pokemon go...) check both root and bootloader so while suhide would allow root if it worked with 7.1.1., there's no way to hide an unlocked bootloader (apart from with a Nexus 5 and that app) so if you're using 7.1.1. you cannot bypass safetynet checks. Is that right?
[SuperSU] bouchigo:
That's not correct. Though suhide has to be updated to work with 7.1.1, you can get SafetyNet to pass with an unlocked bootloader and a modified boot.img. I'm currently running a Nexus 6P with unlocked bootloader and Magisk(since suhide causes a bootloop on 7.1.1) and SafetyNet passes just fine. I was also able to add a card with no issues. I haven't used AP today as I've had no need, but I expect it to work just fine.
[SuperSU] michaeldcoates:
Forgive me but a quick google didn't help much, what is Magisk? An app I can easily install by any chance?
[SuperSU] Triviox:
http://xdaforums.com/apps/magisk/official-magisk-v7-universal-systemless-t3473445/
[SuperSU] bouchigo:
Check your pm's.
[SuperSU] aostrom:
I removedd one of my cards, and was able to re-add it, including the "checking with your bank" step. I'll try another transaction tomorrow.
[SuperSU] ashxdafan:
Hi [MENTION=4635364]Triviox[/MENTION], thanks for sharing. Guess it's safe to say it's probably not a good idea for me since my device is a s7 edge. Workaround would be different. Damn you curved edges... ;)

---------- Post added at 08:14 AM ---------- Previous post was at 08:07 AM ----------

[MENTION=3539146]Vipriel[/MENTION]

Thank you lots mate. That's well explained and thorough.

Learnt quite a few new things too! I guess at this point 1) wiping clean is a must and 2) there's no way to have xposed working as well for either setup mentioned above.

Boy I wish I'm wrong.

[MENTION=631273]Chainfire[/MENTION]

Save us all!

Cheers Xda

---------- Post added at 08:18 AM ---------- Previous post was at 08:14 AM ----------

Theres suhide and magisk hide. Wouldn't we all give the world to have xposed hide in this day and age.

:D:D:D
[SuperSU] fozzie:
Yep, exactly the same here on my OnePlus One. Both SafetyNet apps pass & I can add a card in AP. However, transactions fail. Now what?!
[SuperSU] gvalro:
Sony Xperia Z2

SuperSu SR1 + RootSwitch 1.2.4

Working Pogo

Safetynet green

Huawei P9 Lite

Magisk V8 + Phh´s Super User r259.zip

Working Pogo

Safety net REd
[SuperSU] iXaidyiu:
Suhide seems not working, added 10172 to suhide using the following code line by line:

adb shell
su/suhide/add 10172 //add Android Pay

then I tried to inspect the list by the codes:

su/suhide/list

and I get the following:

com.google.android.gms.unstable
10172

which I considered as normal since I can see 10172 is presented in the list. So I rebooted the device and used the SafetyNet Helper to check the CTE integrity. It turns out:

SafetyNet request: success
Response validation: fail

Error Msg:
Respose payload validation failed

Regarding this error, I disabled both systemless xposed v86.2 and SuperSU SR1 by RootSwitcher. After rebooting my phone, it STILL cannot pass the SafetyNet CTE test with the same error msg.

My device info:

Xperia Z2 D6503 stock based ROM eXistenZ v5.6.5

Unlocked BL

SuperSU v2.78 SR1

Systemless Xposed v86.2

Suhide v0.55

SELinux status: Permissive (byeselinux)

What have I wrongly done or missed? Can it be fixed? Or it is a already a known issue?

iX
[SuperSU] thdervenis:
Blacklisted it with correctly (as stated in OP) before I posted, root gets detected.

Sorry if I wasn't clear.
[SuperSU] HamsterHam:
I must be doing something wrong. [MENTION=631273]Chainfire[/MENTION] can you help me please. Cheers.
[SuperSU] Evo_Shift:
Wow, cool. I had pretty much just given up on Android pay and disabled it. Time to dust it off. Thanks for this :)

Edit - Just successfully purchased a soda from a vending machine using my Nexus 5X on Android 7.
[SuperSU] Chainfire:
Assuming you did reboot after blacklisting it, yeah, it probably just detects the GUI. Link to the APK might be helpful.
[SuperSU] Pig Vomit:
Working great on otherwise stock 6P with 7.0.
[SuperSU] thdervenis:
Yeap, killed before, rebooted now ...and it gets detected

Here is the link to the bank app, no need to do anything more than just launch it, it displays a toast "Rooted device detected"

https://play.google.com/store/apps/details?id=gr.winbank.mobile
[SuperSU] WhammyDroid:
Flashed suhide, then re-flased SuperSU 2.76 on N6. After rebooting, SU isn't installed/root access cannot be granted.
[SuperSU] Honestly Annoying:
[MENTION=1109155]codefire[/MENTION] to the rescueee
[SuperSU] JoshDaWhite:
Well , thank you a lot Chain fire.I will test on a Oneplus 3 and report back.
[SuperSU] dratsablive:
Flashed on Nexus 6P. Systemless root Su v2.76. Wasn't able to add card to AP before. But I can add cards now.
[SuperSU] HamsterHam:
Did you have to add android pay to the list or not? Cheers.
[SuperSU] Evo_Shift:
When Google drops the next OTA, if we choose to sideload it, will we need to flash suhide before SuperSU again? That's assuming they don't block this and it still works after the next OTA.
[SuperSU] HamsterHam:
Can someone explain how to blacklist apps? I keep getting no such file or directory. Tried everything I can think of. Cheers.

Also android pay doesn't work on my ROM still.
[SuperSU] B4oE:
How can we go about making this work on the Axon 7? Any time I try flashing SuperSU v2.76 or v2.77 (Beta) after flashing suhide-v0.01.zip my device freezes and then powers off. The only one that does not cause my device to freeze is SuperSU v2.65. However, according to the original post, only v2.76 and higher should be used. Please help out when you can.
[SuperSU] danman7:
So, I'm running Pure Nexus on a 6 (Shamu). I flash suhide-v0.01.zip and then Flash the 2.76 supersu. Once I reboot, I receive a notification that I need to update the SU Binary. However, it fails to do so and ultimately times out and recommends a reboot. Rebooting does nothing to resolve the issue. I can flash the suhide-rm-v0.01.zip, and the reflash 2.76 SU and I am back to where I started.

Suggestions?
[SuperSU] NYLimited:
No, it is already listed.

Read first post - slowly!
[SuperSU] HamsterHam:
Yeah, that was what I read as well but just wanted to make sure as it doesn't work on my phone using custom ROM.
[SuperSU] dratsablive:
I didn't add anything yet. Just flashed the zip then SU, then reboot.
[SuperSU] sjcali566:
Still not able to get Android Pay to work on my rooted LG G5 (H830) with stock rom.
[SuperSU] elreydenj:
at what point do you see that screen? Where you able to successfully add a credit card?
[SuperSU] Shinegod:
Someone? Must I make superSU a system app before flashing?
[SuperSU] corkiejp:
No!

Read the first post you need systemless supersu for this to work. If you have the option to do the above your device doesn't have systemless supersu.
[SuperSU] Federixbest:
I am on CM13, could I flash it?
[SuperSU] Shinegod:
How to do that? I actually have normal superSU 2.78 and blocked bootloader.
[SuperSU] Ch3vr0n:
Will this new method have a more user friendly method (rather than terminal) to add specific apps to the block list?
[SuperSU] bobby janow:
What are you doing here? No one on earth has a blocked bootloader.

---------- Post added at 05:57 PM ---------- Previous post was at 05:55 PM ----------

I think at some point it will. But first we need to get a working build with defaults. I think even a tutorial on how to do it would be helpful if not a GUI for it. But first things first.
[SuperSU] Ch3vr0n:
I know at some point it will, hence the question to know if this new approach WAS that. I can wait though.
[SuperSU] bobby janow:
That is to be determined but I doubt it's the reason. It didn't work with safety net and SuperSU needed updating according to the OP. The GUI will be topping on the cake when it comes.
[SuperSU] GatorsUF:
So I had suhide working the other day with version 0.01. I upgraded my Nexus6P to the latest factory images and tried reflashing the latest version, followed the instruction on the front page exactly. Now I can't do anything with Android Pay. Do I need to "blacklist" it as I didn't need to do that the first time with v0.01, but I'm on the latest version 0.16 now. Sorry for the question hate asking when I know the answer is likely an easy fix.
[SuperSU] aostrom:
Why can't people read the thread before posting? Google has changed Safteynet, and suhide, in all current variations, does not work to enable Android Pay or any app that uses safteynet. Those of us who read even one page back are patiently waiting for Chainfire to build code that uses a new approach he is working on.

In the long run, though, this is a losing proposition because they are Google and we are not, so at some point they will implement a "nuclear option" (my wording, no one else's) and hook into somewhere in the OS beyond our reach and it will be over. For now, however, each side seems to enjoy the challenge of getting the upper hand in the battle for preventing rooted phones from using Android Pay. Luckily, we have a determined, talented champion in Chainfire, and we need to support our champion, not discourage him with endless questions that have been asked and answered.
[SuperSU] Shinegod:
Is there any method to unlock the bootloader without losing all data on Marshmallow?
[SuperSU] Humpie:
Just make sure you have a backup of all, I repeat, all your data (including photos and whatnot). It would be a big security flaw if your data wouldn't disappear with a bootloader unlock.
[SuperSU] Shinegod:
What do you suggest for a backup, Titanium Backup or Android SDK?
[SuperSU] Humpie:
A backup of the complete /data/ partition (including /data/media/0 (sdcard)) would do. But what I usually do is make a backup using titanium, so the files are on /sdcard and then copy that entire thing to a pc or usb device. It's mandatory to get the files off the phone, that way they can't be wiped.
[SuperSU] Shinegod:
Thanks mate, but what if I do a nandroid backup with TWRP? If I do a nandroid, then unlock the bootloader and restore the backup, the bootloader still remains unlocked or not?
[SuperSU] Humpie:
That should work, but can you boot in twrp without an unlocked bootloader?
[SuperSU] Shinegod:
Yea, I usually do it without any problem..I probably choose this solution. And I will transfer the backup from the sd card to pc for security.
[SuperSU] Humpie:
Good luck! Well it's not just for security, a bootloader unlock will wipe your sdcard too, so yeah
[SuperSU] Shinegod:
What if I simply take the sdcard away from the phone during the unlocking bootloader process?
[SuperSU] Humpie:
You'll be safe, it's mostly for phones like the nexusses/nexi (idk :p) where there is no sdcard slot, just an internal one
[SuperSU] 135Shadowsoul:
There are some rumors that selinux (ernfoce), no xposed and locked bootloader on some devices work.

maybe not all 3 are needed. Did you try without xposed? a lot of reports were about xposed is hard to hide on some devices at the moment
[SuperSU] iXaidyiu:
Yes I did tried disabling xposed then reboot, but still cannot.

P's I remembered once I tried several days ago having a clean install stock rom with Unlocked bootloader but with the absence with SuperSU and Xposed and Android Pay still can run flawlessly. So I can make sure that Unlocked bootloader is not a problem of my case.
[SuperSU] 135Shadowsoul:
there might be a difference between disabling and uninstalling xposed

do you have any chance selinux enforcing? if you kernel supports it, you can do it via terminal (emulator, adb) with:

su
setenforce 1
[SuperSU] DodoGTA:
Is it normal to get "Response payload validation failed" SafetyNet Helper message after just installing systemless SuperSU?
[SuperSU] iXaidyiu:
I think not.
[SuperSU] shoey63:
Actually, it's now normal. Google are all over systemless root.
[SuperSU] Barfelonous:
So the tools we've been using cannot possibly hide xposed?
[SuperSU] iXaidyiu:
So that's mean now suhide can no longer work anymore:crying:?
[SuperSU] Triviox:
Why? With SuperSU v2.78 SR1 systemless, suhide 0.55, rootswitch 1.3.1.2 and xposed 86.2 systemless; i can pass safetynet (play pogo) using xposed (snorlax module for exemple) at same time.
[SuperSU] Barfelonous:
I've flashed all of those and still get validation on safety net
[SuperSU] iXaidyiu:
May I know what device are you using?
[SuperSU] shoey63:
The original question didn't mention about hiding xposed, just if systemless SuperSU by itself fails SafetNet, which it does. See abovepost by [MENTION=4635364]Triviox[/MENTION] ^^
[SuperSU] clambert11:
Said the guy at Google so he could block SafetyNet on the said device. :D Kidding, of course.
[SuperSU] Barfelonous:
I've had it working but haven't had any luck with xposed. I'm still new to this
[SuperSU] DodoGTA:
Can I pass SafetyNet by installing Root Switch, checking "Stop all su daemons" option in that app and disabling root with that app (after flashing systemless SuperSU)?
[SuperSU] Triviox:
Galaxy s5 g900m with CM13 rom
[SuperSU] negroxxx:
a user could spend safetynet s6 and play pogo?

install different roms with SuperSU 2.78 + suhide+ rootswitch and it was not safetynet (blue)

custom rom tried without SuperSU and safetynet is green.

the problem is the boot loader.

someone could help not want to install roms stock.
[SuperSU] shoey63:
Should do, if your kernel is enforcing. Just do it and see.
[SuperSU] DodoGTA:
My SELinux status is Permissive (because of f***ing proprietary blobs)

Note: My device freezes when trying to set SELinux mode to Enforcing

I've disabled root and now I'm getting to this screen when checking for SafetyNet:
[SuperSU] Barfelonous:
Yeah I've got the SElinux toggle. Can't get anything to work with xposed.
[SuperSU] iXaidyiu:
Just thought you were using a SONY.

I wanted to try Magisk and Magiskhide so as to hide SuperSU and Xposed, but given that there are problems concerning ramdisk on SONY devices that it cannot be patched correctly. So I just cant use that method and I am frustrating as hell now:crying::crying::crying::crying:
[SuperSU] grep_i:
You can still patch it it's only a more difficult procedure.

You have to backup boot.img decompress it and adjust it to your needs and repack it basically.
[SuperSU] shoey63:
Flash stock MM rom and use Advanced Stock Kernel by [MENTION=4102242]Gustavo RD78[/MENTION]

You should be good to go after that.
[SuperSU] iXaidyiu:
You mean after I flashed that kernel I can have SuperSU, Xposed, Magisk all sorts of thing work on my Z2? Or there are some minor withdrawal (eg SELinux must be set to ENFORCING)?
[SuperSU] alexpower:
Go to the next round with safetynet.

Unlocked bootloader detection: pass

Hide xposed: pass

Hide root: pass (not a comfort way)

Result safetynet green.

Maybe till Thursday for next google update.

Gesendet von meinem HTC 10 mit Tapatalk
[SuperSU] shoey63:
Yup. Flash stock MM ftf (no custom stuff), Then fastboot the kernel, and go for it!
[SuperSU] grep_i:
Can you tell which version of the installer and from which developer is blocked by new safetynet.

Also may I know what your source is for this testing of which version of safetynet you got.

Up to now no one seems to be able to provide an answer about how to know which safetynet version you have got checking your device or if there are even multiple versions of safetynet or not.

All purely speculations.

I've got it working with Xposed enabled and got multiple Xposed apk on my device.
[SuperSU] iXaidyiu:
But isnt [MENTION=4470081]topjohnwu[/MENTION] stated that SONY devices has two ramdisk that is unpatchable to the correct one:confused:

This kernel can kill that s***?
[SuperSU] DodoGTA:
How do I pass SafetyNet with Permissive SELinux?
[SuperSU] shoey63:
Yeah, cm, omni etc. but the Gustavo one is a pure single ramdisk boot image. I should know, I told him how to do it[emoji4]

Anyway, you can't kill your phone by fastbooting a boot.img (Only dodgy zips can do that).
[SuperSU] alexpower:
I think depends on your device(some will pass see posts in thread), but with enforcing the chances are better to bypass

Gesendet von meinem HTC 10 mit Tapatalk
[SuperSU] Barfelonous:
I'm trying on a sprint note 3 with cm 13 RR rom. For this to work correctly I would need to ditch my RR rom?