yashsingh1/xdaforums huggingface dataset:
[Magisk] ipdev:
Hi all.

It's been awhile. :o

[MENTION=7320086]textbook[/MENTION]

I had an odd problem the other week when testing fingerprints.

Set it and rebooted my Pixel 3aXL as I walked out the door on my way to work.

Magisk (canary) was MIA. This caused problems with apps that use su since it did not exist.

Not sure when it disappeared/stopped but, checker apps could still find busybox and note the device was rooted. Scripts and modules that were ran on boot still were in place. I was still passing SafetyNet (so MagiskHide was still working) and the device showed as the fingerprint I was testing. MagiskManager(Renamed as Manager) showed Installed Magisk N/A and the Magisk log was blank.

Since I was at work I couldn't do much except reboot and take a look. Magisk was working but not correctly. After a few more reboots and resetting the fingerprint back to my stock Pixel 3aXL, everything started to work again, including logging.

Since I could not get logs at the time and I have not been able to duplicate this since then, I have no idea what went wrong..

Only mention this since it happened to be the same day as your post.

---

Google's public certified list

I got annoyed with the web based list so, I decided to convert it into a nice clean plain text (tab spacing) file.

Normally I only check it when I test a fingerprint but, recently I've updated it more often.

Not sure how often it is normally updated but, it's been changed quite a bit these past few days.

Might just be Google cleaning up the list and formatting it properly but, there has been quite a lot of changes..

Changes two days ago.

certified.list GitHub - Link

Changes earlier tonight.

certified.list GitHub - Link

---

Note about GSI(s)

Not much time recently but, a few weeks ago, I was able to test the AOSP GSI on my OnePlus 6P.

Using the stock OnePlus 6P (SDK29) firmware, boot and vendor. AOSP GSI (Both user and user-debug builds).

It's broken and not very usable but, WiFi worked so it was time to test..

The biggest problem I had was installing Gapps since I could not mount system r/w in TWRP.

Long story short, I made a Gapps Magisk module ;)

I would not recommend it but, if anyone wants to look at it (try it) feel free..

mModule_sGapps GitHub - Link

Edit:

Forgot I moved that to gitlab due to LFS and file size limitations.

mModule_sGapps GitLab - Link

I was able to pass SafetyNet by using Magisk and MagiskHidePropsConfig to set the fingerprint/security date.

I did not use the GSI option, just selected OnePlus 6P from the fingerprint list and rebooted.

Haven't had time since to test other GSI(s) to see if it's device related or if there is a mod/hack related to vendor and/or system that may be causing the problem?

I noticed in the phh's treble/gsi thread there was mention about the vendor security date. This jumped out at me since I questioned it awhile back when I noticed Google blanking out the vendor security date on some older devices.

Looks like a lot of custom GSI(s) use parts from phh/Lineage. ???

Hopefully I'll have some time this weekend to test other GSI(s) and see what happens..

Cheers all. :cowboy:
[Magisk] Didgeridoohan:
Fingerprints list updated to v93

Did some testing of a few submitted fingerprints and updated the included list (v93).

Thank you to [MENTION=6584717]mario0318[/MENTION], [MENTION=8234677]Some_Random_Username[/MENTION], [MENTION=7370877]Ananaqil12[/MENTION], [MENTION=7908443]Akilesh_15[/MENTION], [MENTION=10122765]CarbonGTR[/MENTION], [MENTION=9302428]TRalperenTR[/MENTION] and [MENTION=10905493]transerrok[/MENTION] for providing the prints for this update.

There's been a lot of Redmi Note 8 Pro prints submitted recently, so apart from updating the India variant print I've also added the Russian variant. So far no China/global prints for this device have passed CTS, so it's very likely that those are simply not certified (like many other China branded devices).

New

LG K20 Plus

Redmi Note 8 Pro Russia

Samsung Galaxy A50

Samsung Galaxy J7 2016

Updated

Nokia 6.1 Plus

Nokia 7 plus

OnePlus 5

OnePlus 5T

Redmi Note 8 Pro India
[Magisk] adammalyck:
I have use LineageOs 16 and LineageOs 17.1 ROM for J5 (2015) but the CTS still false

please update to fix this, thanks for the Dev. :)
[Magisk] Didgeridoohan:
Update to fix what (you need to be a bit more detailed than that)?

If you're using a fingerprint from the list included in the module but still fail CTS, take a look here:

https://github.com/Magisk-Modules-R...DME.md#i-still-cant-pass-the-ctsprofile-check
[Magisk] adammalyck:
Thank you, i will try using Temux for my issue

sorry if my question bad, and sorry for my bad english
[Magisk] Didgeridoohan:
Don't worry about it, your English is fine. It wasn't apparent what you're expecting me to fix, that's all.
[Magisk] karencho777:
hello both of the ctsProfile and basicIntegrity checks report false... when checking getprop ro.build.fingerprint in termux it is shows correct model i have oneplus5 with android 10 please help what should i do?

i have downoaded migaskhide props and install props in termux manually still nothing((
[Magisk] casouzaj:
Just a guess: is Magisk Manager (or whatever name you chose whilst hiding it) residing in the internal storage? If not, move it to that location.
[Magisk] karencho777:
i guess it is in internal storage how to check it?
[Magisk] Didgeridoohan:
Since you're failing both, my first guess would be that MagiskHide isn't enabled.
[Magisk] karencho777:
Of course, it is enabled
[Magisk] casouzaj:
Go to Settings > Apps, slide down and tap on Magisk Manager > Storage, On the top, it will inform you where it is located. If it's not in the internal storage, tap on 'Change', select the internal storage and tap on 'Move'. What [MENTION=4667597]Didgeridoohan[/MENTION] posted above is very important, because Magisk Hide is defaulted to disabled in the latest builds. It's a key to be turned on in Magisk Manager' settings.
[Magisk] karencho777:
it is in internal storage, "3.73MB used in internal storage" so it is in internal storage
[Magisk] Didgeridoohan:
Post the module logs please.

https://github.com/Magisk-Modules-Repo/MagiskHide-Props-Config/blob/master/README.md#logs
[Magisk] casouzaj:
Is Xposed (or its derivatives) installed? Other thoughts: have you changed something in the system partition, like removing a bloat or whatever?
[Magisk] karencho777:
Yes Riru core with Riru Edxposed
[Magisk] casouzaj:
Remove them, reboot and do the Safetynet tests again.
[Magisk] karencho777:
and if i need them? Riru core and Edxposed (modules) were deleted, only Edxposed manager was installed, still could not pass safetynet test
[Magisk] casouzaj:
Remove Edxposed too and reboot, at least for test purposes.
[Magisk] thirtythr33:
I ran into this issue this morning, here is what I did:

1) in magiskhide props config, set up device fingerprint (op6T/A10) - rebooted

2) in edxposed, enabled applist mode, force hook modules, and pass safetynet options

3) wiped cache from Google play services, disable/enable magiskhide in magisk

4) reboot

5) wait about 60 seconds for phone to fully boot and apply all scripts

6)pass safetynet - profit

here are all my screenshots to prove

edit: I also run many modules in both edxposed and in magisk, if you want the list just let me know

edit2: my apologies for going OT, won't happen again
[Magisk] Didgeridoohan:
It's also possible that you need to clear cache for Play Services to pass SafetyNet again after removing EdXposed.

But, now you guys are moving away from the topic of this thread. Please continue any further EdXposed/SafetyNet troubleshooting discussions elsewhere.
[Magisk] karencho777:
i have installed in Edxposed "Hidden core module" now magisk shows that i am passing saetynet test, but i have installed another checker from playstore here is output : "Respond sihnature validation: fail (responcepayload validation failed)"
[Magisk] casouzaj:
Well, I think it's pinpointed now. You now have to define your priorities. And, as [MENTION=4667597]Didgeridoohan[/MENTION] pointed out, this discussion is OT here. Good luck!
[Magisk] karencho777:
magisk show that i am passing test but other checkers dont i even clear cache in all apps google services and safetynet checking app
[Magisk] thirtythr33:
perhaps, but I use sd maid which clears the cache in every app (among other things) and run it regularly.
[Magisk] Didgeridoohan:
Come on guys... I asked you to keep the EdXposed/SafetyNet out of this thread. Please.
[Magisk] karencho777:
if it is really passing one way or another the checker will show it yes?

---------- Post added at 05:37 PM ---------- Previous post was at 05:35 PM ----------

sorry

---------- Post added at 05:49 PM ---------- Previous post was at 05:37 PM ----------

is it possible to spoof the Magisk checker? if not that means it is passing truly
[Magisk] Displax:
Xiaomi Mi A1

xiaomi/tissot/tissot_sprout:9/PKQ1.180917.001/V10.0.22.0.PDHMIXM:user/release-keys__2020-06-01

Xiaomi Mi A2 Lite

xiaomi/daisy/daisy_sprout:10/QKQ1.191002.002/V11.0.7.0.QDLMIXM:user/release-keys__2020-06-01
[Magisk] Some_Random_Username:
OnePlus 8 IN2019 new fingerprint: OnePlus/OnePlus8VZW/OnePlus8VZW:10/QKQ1.191222.002/2004072220:user/release-keys__2020-02-01

Not the latest one, but better than nothing

Also here's an updated fingerprint for OnePlus 8 IN2017: OnePlus/OnePlus8TMO/OnePlus8TMO:10/QKQ1.191222.002/2005062340:user/release-keys__2020-04-01 (which for reference purpose is also sold by Sprint USA due to merge with T-Mobile)
[Magisk] akhil093:
Since yesterday, play store showing my device isn't certified and magisk safteynet test shows cts false but basic integrity true. I have Samsung M30 & I used this module and selected M20(closest to my device in list). After reboot nothing happened. Still cts mismatch. I am using stock android 10 Rom with stock boot loader & stock recovery. I installed magisk by patching the AP file of my rom (select & patch a zip file). Flahed magisk_patched image with Odin. I was using it like this since 4 months & everything was fine. I was passing safteynet without this module but now all of a sudden safteynet got me. Maybe google has improved their safteynet detection and now passing safteynet days are gone. I know there is a way of doing it with red exposed thing but I don't want to use it since some apps detect xposed installed. I have magisk hide on and hidden all google stuff from it but nothing works. Maybe we have to wait for topjohn to get a fix for this. Thanks.
[Magisk] Didgeridoohan:
If it's a SafetyNet update then we're all out of luck and there's likely nothing that can be done about it...

But let's not jump to conclusions just yet.

You say you have MagiskHide enabled, but have you confirmed that it's working? Can you hide root from other apps? Toggling MagiskHide off and on again is always a good thing to try.
[Magisk] akhil093:
Yes! I installed several root testing apps. Magisk hide worked and they can't detect magisk.
[Magisk] Didgeridoohan:
In that case it is very possible that Google has activated hardware key attestation, but I have no way of confirming that myself since my devices are too old to be affected.

And if that's the case there's nothing you can do about it (unless you have a device where it's possible to lock the bootloader even though you have a modified device, but unless you're 100% sure of what you're doing I wouldn't recommend testing that).
[Magisk] akhil093:
One interesting thing I've noticed, I can use all safteynet apps (Netflix,Pokemon go, Google pay & other banking apps) just by toggling hide magisk for those apps. None of the apps ever detected magisk/root once the toggle is on. So it's no problem for me yet as I can run all safteynet apps.
[Magisk] Didgeridoohan:
Those apps aren't using SafetyNet (or they would trigger). But that'll likely change once Google flicks the switch and SafetyNet actually becomes usable.

I've asked around and this isn't hardware attestation. Could be attestation actually... But, this isn't the thread for that kind of troubleshooting.
[Magisk] akhil093:
I digged into it a little, The cts option shows "Attestation failed" & I don't know what that really means. Don't know other people facing this issue or it's just me.
[Magisk] Didgeridoohan:
Check my edited post... And you might want to keep an eye on the Magisk general support thread. You'll find more info there.
[Magisk] jcmm11:
I'm still passing everything (safety net good, play store certified). So they haven't flipped a switch on Google's end. Let's see: Play store: 20.7.16-all [0] [PR] 317546459 (82071600)

Play Services: 20.24.13 (120400-316577029) (202413037)
[Magisk] Filo1995:
Update for Xiaomi Redmi K30 Pro (lmi)

ro.build.fingerprint : Redmi/lmi/lmi:10/QKQ1.191117.002/V12.0.1.0.QJKCNXM:user/release-keys

ro.build.version.security_patch : 2020-06-01
[Magisk] pndwal:
Well, may be flipped for devices as per new 'evaluationType string token' returned. You (and those facing recent ctsProfile fail) should check thread/post OP linked. Discussion there. https://xdaforums.com/apps/magisk/module-magiskhide-props-config-t3789228/post82935227 PW
[Magisk] rdis:
Galaxy Tab A (8.0" 2019) SM-T295

samsung/gtoxx/gto:9/PPR1.180610.011/T295XXS3ATB2:user/release-keys_2020-03-01
[Magisk] Dante63:
I installed the module on my samsung galaxy note 10 plus running Android 10, Magisk 20.4

I still get cts failed even after choosing the fingerprint certification of my phone and rebooting...

Where did I go wrong, so many mobile banking apps I depend on i can't use because root is detected...

Please help me...
[Magisk] curiousrom:
CTS Check Failed

See Hardware-Backed SafetyNet Check by [MENTION=6345368]Displax[/MENTION] and also topjohnwu: Hardware-Backed SafetyNet Attestation Confirmed Deployed in the Wild

***
[Magisk] Dante63:
Well, I'll be damned, time to get a second cheap android phone lol,

because my phone said BASIC, HARDWARE_BACKED and from my understanding,

Nothing can be done about it to make it pass except to reverse root...

So I should delete the Module...?
[Magisk] m555888:
You are not alone, I have got same situation.

In Magisk SafetyNet test, I got ctdProfile: false, basicIntegrity: true.

but other SafetyNet test application, I got false, both of them.

When I using LogCat, my evaluationtype are "BASIC,HARDWARE_BACKED".

My device is Samsung Note 10+ (SM-N9750)

running Android 10 (N9750ZSU2BTC1)

BTW, I didn't install EdXposed, HiddenCore, Riru core etc.

I just using Magisk for root (using Odin method)
[Magisk] nri_tech1183:
The only solution I see is to flash custom rom without UL BL!

Not rooting is perfectly ok, at least we will get to enjoy roms around.
[Magisk] iznogoud69:
Since yesterday cts "false" ... I am on Huawei mate 20 pro with last magisk. I redid all the methods, impossible to set it back to "true" :'(
[Magisk] HRLD:
Stuck at boot animation on Galaxy S6 SM-G920F after setting fingerprint, tried genuine fingerprint copied from stock ROM. I don't think the props are actually setting. Tried all of the boot order settings and default causes the boot stuck, the others don't seem to do anything to the prop.

Tried both canary and stable versions of magisk.

Any help would be much appreciated
[Magisk] curiousrom:
CTS False!

Check this XDA portal article for detailed explanations: SafetyNet’s dreaded hardware attestation is rolling out, making it much harder for Magisk to hide root and also this post.

***
[Magisk] RyanGamingXbox:
Props command fails due to "service.sh" is not running. Tried what the command told me to do, it was no use.

Device: Samsung Galaxy J5 Prime (G570Y/DS)

ROM: Radical OS by asarre (OneUI Port)

Check my attachment for the logs, it put in my internal storage.
[Magisk] iznogoud69:
Sorry, i read but i dont understand what happen :(
[Magisk] Didgeridoohan:
I would have to see some logs (showing the bootloop) to have a chance of determining what happened.
[Magisk] Didgeridoohan:
The Magisk boot stages are broken on your device and the late_start service stage executes too early. Most likely because of one of your modules and my prime suspect is CloudflareDNS4Magisk.
[Magisk] Didgeridoohan:
The days of passing SafetyNet on a device with an unlocked bootloader is most likely over (unless you have an old device that doesn't have the necessary hardware). Any kind of "fix" is extremely unlikely.
[Magisk] HRLD:
new acc so can't attach files

this is the best I can do

drive google com/file/d/1fuYVPjUI_w9DPtw6qm5d0OvTt9IFZTVE/view?usp=sharing

It booted when I changed Device Fingerprint to late_start service
[Magisk] RyanGamingXbox:
Thank you so much. Cloudflare was the problem but I don't use it anymore due to LSpeed. Thanks!
[Magisk] __Michael__:
Hi ,

please add s10.

also tried Samsung Galaxy S10 Plus SM-G975F (10) but it installed Samsung Galaxy A6 Plus SM-A605G (9)..
[Magisk] Didgeridoohan:
First: https://github.com/Magisk-Modules-R...ter/README.md#please-add-support-for-device-x

And I'll take a look if there's any problem with the prints list regarding S10 Plus. Would appreciate a log if you're experiencing issues though...
[Magisk] __Michael__:
Can't provide log because I have s10 and I tried s10 plus version and got bootloop so I removed module in recovery.
[Magisk] Didgeridoohan:
Then how do you know you got an A6 Plus print rather than the S10 Plus?

Anyway, I tested and picking the S10 Plus print have the correct one.
[Magisk] __Michael__:
In the terminal , I chose s10 plus and than got output that install A6 fingerprint.

I will try provide s10 fingerprint info later
[Magisk] kaison320:
can i ask you would it work for samsung a90? Because i dont see the a90 in the list and i know that you will not add only one drives. Therefore can you teach me or tell me which way can i make the cts profile pass??
[Magisk] ipdev:
Hi.

It is a good idea to stay close to your device as you can.

x86/arm/arm64, Brand, ...

With that being said, you should be able to use any passing fingerprint.

When I test fingerprints, I normally just leave the last one set on that device if it passed SafetyNet.

My Pixel3aXL was using a Redmi 7 print for the last few weeks.

The instructions are on Didgeridoohan's GitHub.

Start here since you are looking for fingerprint info.

Spoofing fingerprint GitHub - Link

At the end of that section, it also mentions how to offer a new or updated fingerprint to be added to the list.

Cheers. :cowboy:
[Magisk] kaison320:
that's means maybe i can choose the newest to try？
[Magisk] ipdev:
Yes. Give it a try, if it does not pass, you can try a different one.

Cheers. :cowboy:
[Magisk] ipdev:
View attachment 5053443

I'm an idiot.

Forgot that SafetyNet is currently checking CTS with hardware on some OnePlus, Samsung and Xiaomi.

Oddly enough, Pixel is not..

I found a Samsung A90 print to test and is passes SafetyNet on my Nexus (2013) 7 WiFi and Pixel3a XL.

Attached. You can rename the file to printslist and use it as a custom printslist file.

I'm guessing hardware attestation test is being used on your device??

If so, it might take awhile (or seem like never) before SafetyNet can pass on your device...

Getting OT for this thread. Keep the faith in the xda community, eventually someone will find a hack or work-a-round..

Cheers again. :cowboy:
[Magisk] kaison320:
is it the link dead？
[Magisk] ipdev:
Apparently I can not upload it to xda at the moment. :confused:

MediaFire - Link

gDrive - Link
[Magisk] kaison320:
I rename the file to printslist(no .txt) and i put it in to s new folder which is named “fingerprintd”. But i can found it in the list by using the termux:confused:

is it i do soming wrong？

---------- Post added at 08:40 AM ---------- Previous post was at 08:34 AM ----------

i found it in the list finally but it is still false for the ctsProfile:rolleyes:
[Magisk] Didgeridoohan:
Have you checked if your device is using hardware attestation for SafetyNet? Install the Canary Manager and do a SafetyNet check. If it says "basic" you're good to go (for now) and you've got something else that's messing with your SafetyNet check. If it says "hardware" you are SOL and there is absolutely nothing you can do about it expect to return your device to a completely stock state (some devices can lock their bootloader even without everything being stock, but even if it is possible on your device that is not something you should attempt if you don't know

exactly

what you are doing).

If we're lucky, someone is going to come up with some sort of workaround, but with the nature of this attestation those workarounds will likely only be temporary.
[Magisk] Displax:
Xiaomi Mi A2

xiaomi/jasmine/jasmine_sprout:10/QKQ1.190910.002/V11.0.11.0.QDIMIXM:user/release-keys__2020-06-01

Xiaomi Mi A3

Xiaomi/laurel_sprout/laurel_sprout:10/QKQ1.190910.002/V11.0.16.0.QFQMIXM:user/release-keys__2020-06-05
[Magisk] vycon7676:
Hello All,

I would like to share some info with newbies like me about simple settings that helped me to restore SafetyNet acceptance.

Initially, I used Safety Patch v3 for passing SafetyNet checks and using Google Pay with my Moto 5g phone with a custom firmware.

Later, I guess after some update of Magisk/Magisk Manager, Safety Patch stopped working.

Both checks, basicIntegrity and ctsProfile, failed.

The following settings allowed me to successfully pass SafetyNet checks:

1. I copied the default version of propsconf_conf file taken from the Magisk Hide Props module to /sdcard

2. I set/added the following to the file

The CONFPROPS value was taken from Safety Patch v4.0.1

3. I rebooted my phone
[Magisk] Didgeridoohan:
[MENTION=10935025]vycon7676[/MENTION] The Safetypatcher module stopped working because of the bind mounts it is using and an update to SafetyNet. Got nothing to do with Magisk.

And, I need to point out that you're doing things slightly more complicated than they need to be. If you want to use the configuration file to set a fingerprint you should use the CONFFINGERPRINT variable. Your configuration file would then have this entry only:

CONFFINGERPRINT="Xiaomi/dipper/dipper:8.1.0/OPM1.171019.011/V9.5.9.0.OEAMIFA:user/release-keys__2019-11-01"

Note how the security patch date is added (the instructions for that are in the configuration file). The module scripts will then set all the necessary props automatically. Edit: the security patch date is actually unnecessary for that print. You don't have to set one and it'll pass anyway.

But, it's actually even simpler than that... The print you're using is already included in the module list of certified fingerprints. Just pick Xiaomi Mi 8 and you're done. Or better yet, a fingerprint that matches your device if it isn't a Mi 8.
[Magisk] gfahad799:
can anyone tell me how to pass Samsung A205F Android 10 cts Profile becuse there is old 9 vrrion file in the medule i need sulotion i am worried about banking apps not working
[Magisk] Didgeridoohan:
You can use an Android 9 fingerprint on an Android 10 device. But, first take a look at post #3665 from a couple of days ago to determine if there's any use in trying to pass CTS at all.
[Magisk] etavav:
Stuck at boot animation on Galaxy S6 SM-G920F after setting tags

Stuck at boot animation on Galaxy S6 SM-G920F after setting Tags

Android 10(Lineage 17.1)

Magisk 20.4

MagiskHidePropsConfig v5.2.6-v93(59)

Please help!

Content of /data/adb/mhpc:

I'm newbe. Site say I can't post links now. Please send something to my email mihcoctail@yandex.ru

I will reply to you with link to google drive or .zip up to you.
[Magisk] Didgeridoohan:
I probably won't need to see any logs. Setting different props is a common cause of getting stuck at boot, but fortunately it's easy to get out of:

https://github.com/Magisk-Modules-R...README.md#device-issues-because-of-the-module
[Magisk] etavav:
Thanks. It's not a problem to get out. I guessed myself how to do this.

I need to change prop tags. One of important application check tags with "test-keys" and want run saying "This device is rooted". How to change prop tags?
[Magisk] Didgeridoohan:
That's one of the props that MagiskHide takes care of by default, so you'll just have to make sure it's enabled (which you'd need anyway to hide Magisk). If changing it to release-keys causes your device not to boot I'd recommend you talking to your ROMs developer.