yashsingh1/xdaforums huggingface dataset:
[Xposed General] wilsonhlacerda:
Have you tried with old v0.4.5.1??? If not, try it.

Something changed from v0.4.5.1 to v0.4.6.x and newer that makes some devices / Custom ROMs to stuck on boot. Unfortunately also no devs' comment on that.
[Xposed General] ianmacd:
Yes, I've tried that. The above fix worked for my Exynos-based Note10+ last year, but this year's Qualcomm-based Samsung devices need some new fix. My Note20 Ultra works, because it's Exynos-based, but neither my Fold2 nor my Tab S7+ does.

I should try building a permissive kernel and seeing whether that will boot, but I keep attending to more important matters.
[Xposed General] mark_zukerberg:
Is there any way to change android id without having to restart the device every time on oreo+\Q roms
[Xposed General] cucumbersmell:
I've used these before for the same reason on other devices. Unfortunately, I've had them for so long that I don't know who to credit them to, but you should be able to flash either one of these in TWRP to make your current kernel permissive.

Permissiver v4

Kernel Permissive Patcher
[Xposed General] ianmacd:
Thanks, but these won't work on Samsung devices without a custom kernel.
[Xposed General] cucumbersmell:
Has anyone gotten edxposed working on LOS18?
[Xposed General] names:
Running Android 11 on my OnePlus 8 Pro with the latest canary build of Magisk and when getting Edxposed YAHFA v0.5.0.6 installed and working, Brave Browser crashes/won't work. I have blacklisted the app with no luck. The only way I get Brave to work properly again is by disabling the Edxposed module in Magisk.

Is anyone else seeing similar behavior? Apologies if this had already been addressed.
[Xposed General] mrjuniork:
Have you activated app list mode withing edxposed manager settings? Coz that option had me constantly crashing chrome.
[Xposed General] names:
I've tried with the option both toggled on and off with the same result.
[Xposed General] fgprodigal:
safetynet can pass when edxposed disabled. cant pass when i active this module.

Android 11, canary 0.5.0.6
[Xposed General] Brandroid28:
saw somewhere on GitHub that the canary build causes chromium to crash

you're on 11? and changing that setting caused it to stop crashing?
[Xposed General] mrjuniork:
Yes, I'm on 11 and changing that setting got me back in the chrome game.
[Xposed General] Brandroid28:
did you add chrome and brave to the blacklist after activating app list mode? it worked for me as suggested by the other user
[Xposed General] names:
I have made sure both Brave and Chrome are toggled but I get the same result of the app crashing. I tried forcing a stop of Brave and Chrome and clearing data, just incase, but still crashes.
[Xposed General] names:
Interestingly enough, switched off YAHFA for SandHook and the crashing issue is gone. Thanks everyone for your help.
[Xposed General] RMarques:
Can anyone confirm if EdXposed is working on PiXeN OS A11 OP6/6T?
[Xposed General] Brandroid28:
it's weird. now mine are back to crashing. gotta be some knack to it working
[Xposed General] kevin01523:
Hmm seems the latest version trips safetynet now even with the blacklist ticked

Safetynet is ok if i disable it on magisk

Still works yesterday
[Xposed General] kodein:
Exactly the same problem ....
[Xposed General] eliezerjk90:
Same here...
[Xposed General] Kendrenogen:
SafetyNet for me also stopped passing with EdXposed on yesterday night. I think SafetyNet itself was updated.
[Xposed General] elicoth:
Same here
[Xposed General] JD. A:
This happens every couple of months. Hopefully a new canary with a fix gets pushed soon.
[Xposed General] kevin01523:
Hmm ? i hope it gets updated with the riru 22 implementation it looks promising
[Xposed General] textbook:
I experienced the same thing. I have a Oneplus 7 Pro, I updated to the latest Oxygen OS Open Beta 19 (Still Android 10), Magisk canary is working perfectly and I can pass safetynet check... But as soon as I install EdXposed framework 0.5.0.6 then my phone becomes really unstable and after a reboot my screen starts going black and then my phone asks me if I want to wait or close system.

Then when I go into magisk and check safetynet, I also fail that.

I honestly don't care if I pass safetynet, but I REALLY want XprivacyLua to work... So I am just hoping for any update that can get EdXposed working again.

THANK YOU TO THE DEV THAT MAKES EDXPOSED!
[Xposed General] eliezerjk90:
If you don't care about passing safetynet, maybe you could try to use older version which stable enough for your setup?
[Xposed General] Gautham0123:
Installed everything like you said and Snapchat is working for now. But in magisk>modules, the edxposed zip that I installed from Snapchat tab is not shown separately. Riru - core and riru - edxposed are there. Did I **** it up?
[Xposed General] adriansticoid0312:
So I tested the 4527 canary build. SafetyNet is still failing sometimes, but even with SN failing, I can still find Netflix and other apps in the Play Store that won't appear if SafetyNet is borked.
[Xposed General] Soumy1234:
No no, that's perfectly normal. That's how it's supposed to be. Edxposed needs Riru Core to work, which is a separate module.
[Xposed General] Hirs_E_Fruit:
OOS 10.0.5 OnePlus 7 Pro

Magisk 20.4

EdXposed v0.4.6.1 (45610)

SafetyNet is failing
[Xposed General] josehdx:
same here

A1: Pixel experience android 10

Magisk: 20.4

Edxposed: 0.4.6.2 YAHFA

xposed manager: 4.5.7

Riru 19.7

CST passes after dissabling EdXposed module :(
[Xposed General] purval6300:
yes both basic integrity and cts failed with edxposed 0.4.6.1 ( both sandhook and yahfa) ....without edxposed safetynet is passing..
[Xposed General] Al765436:
Riru 19.5

Modded magisk

Yahha 0.4.6.0 beta

Edxposed installer 2.2.5

You can blacklist Google services, play & framework

Works to hide it from safety net

---------- Post added at 05:39 PM ---------- Previous post was at 05:34 PM ----------

https://r.tapatalk.com/shareLink/to...&share_fid=73822&share_type=t&link_source=app
[Xposed General] Al765436:
Modded magisk i mentioned in previous post. I'm using it for months, no problems View attachment Magisk-v20.2-025b0605.zip
[Xposed General] Tyakrish:
[MENTION=8430637]mlgmxyysd[/MENTION]

Safety Net has started failing for edxposed now.

I had Google Play, Play Services and GSF in blacklist mode.

That worked for me for months with official magisk (Never needed to use modded magisk). Safety Net used to pass fine, even one or two days back.

Now it fails. Only way to pass Safety Net, is to disable edxposed in Magisk manager and reboot.

Also tried using whitelist mode and only enabling the apps that I want. Still it fails.

I guess Google has blocked edxposed in safetynet checks, completely now.

Though it still passes without edxposed. That means Magisk is not blocked yet. So it cannot be that hardware attestation id bug, that [MENTION=4470081]topjohnwu[/MENTION] mentioned on twitter. Am I right ?

Anyone has a fix to this ? Will modded Magisk help in this case ? Or we should choose between edxposed and safety net and say goodbye to the other ?

Lineage 16

Magisk 20.4

Exposed 0.4.6.1 and also with 0.4.6.2 (Both YAHFA), it fails

Exposed manager 4.5.7

Riru core 19.7
[Xposed General] Al765436:
Install exactly what i said in post 27,it'll work

---------- Post added at 12:18 AM ---------- Previous post was at 12:18 AM ----------

Install exactly what i said in post 27,it'll work
[Xposed General] Tyakrish:
Deleted
[Xposed General] Tyakrish:
[MENTION=8430637]mlgmxyysd[/MENTION]

I found a way to pass safety net with edxposed installed.

I modified the EdXposed 0.4.6.1 zip

Safety Net was not failing due to the hardware attestation bug that topjohnwu mentioned on Twitter. Google had reverted that change, to safety net soon after that.

And Safety net is still passing.

This safety net failure was due to Google recognizing the path where exposed module was installed.

I modified the path where edxposed gets installed.

I changed the module Id from 'riru_edxposed' to something else like 'riru_meowcat'

And I also changed all the instances where 'riru_edxposed' occurs to this new id inside the zip.

I also changed the path of "/data/misc/riru/modules/edxp" to something else like "/data/misc/riru/modules/edpxp"

After I did the following modifications to the edxposed zip, I removed the existing edxposed module and installed this modified module.

And then Safety Net passed !

So I think Google detected the path where edxposed was installed.

If this path is somehow randomized from time to time, then we can easily pass safety net.

Only problem now is that the Edxposed manager. It detects Edxposed as installed, when I installed the modified zip. But it shows that Edxposed is not activated.

Any suggestions on what I can do to activate it ?
[Xposed General] DarkSJ1998:
I recently discovered that EdXposed Manager now shows up as a module in EdXposed Manager itself. You've to enable it so that EdXposed shows activated IMO (I'm assuming).

Trying it right now, will revert back if it works.

Edit: Nope, it still doesn't work and that's why, the Black list option doesn't work either. This maybe the issue why SafetyNet isn't passing.
[Xposed General] mlgmxyysd:
I also found the same thing. I am currently working on countering these detections. In order to ensure that they will not be detected again, I used a random file name
[Xposed General] Soumy1234:
But it's not like they're randomly generated every install, right? If Google blacklists those file names, too, then it will be a tiresome game of cat and mouse...
[Xposed General] mlgmxyysd:
r a n d o m e v e r y i n s t a l l:laugh:

It's a BIGGER HAMMER THAN GOOGLE's

https://twitter.com/topjohnwu/status/1245956080779198464
[Xposed General] Soumy1234:
I just saw the changelog of the latest canary, and I was not expecting this. I swear devs like you are wizards or something. Kuddos to you and your team :good:
[Xposed General] Al765436:
I haven't got a newer one, it all works well, it is from a trusted source, im using it months, i do all my banking through a good browser on my phone for more security anyway.
[Xposed General] adriansticoid0312:
I installed 4536 and SafetyNet passes again. But EdXposed Manager should be running so that the blacklisting works, else SafetyNet fails. Could there be a way to have the blacklisting work in background so it keeps passing?
[Xposed General] textbook:
I was already using 0.5.0.6 for months. And it was working perfectly. I don't think downgrading will help, but I can try it.
[Xposed General] ystokar:
Same problem here

I have same problem with ob9 on op7t. Even with stable version of exposed...
[Xposed General] Kaustubhx:
UnidentifiedEdXposed Manager

As everyone knows that recently safety net is failing on some devices so, I dig into some research about the modules and manager and found a guy on telegram who calims to have his method working but with a unknown EdXposed Manager. As I was concern about the privacy I decided to ask it in the FOURM. I,ve attached the APK. If anyone or the developer himself can tell is it safe or now it will be of great help. :o
[Xposed General] Soumy1234:
I've been using this version of Edxposed Manager for some time now and it seems to be safe and I can confirm it has no issues. However, it doesn't help passing SN now since it's Google's side that's changed.
[Xposed General] ystokar:
Does it work with riru 22?
[Xposed General] Soumy1234:
Nope. Edxposed hasn't been updated yet to support riru 22
[Xposed General] TheUndertaker21:
No one ui 3.0 support yet
[Xposed General] BrikHaus:
First post says Android 11 (R) is supported, but I can't get it to work on my Pixel 2XL.

Does anyone have this actually working on a Pixel 2XL? Thanks!
[Xposed General] Kaustubhx:
Well yeah, I still gave it a try as I am paranoid. But weird something happend, In magisk it shows CTS passed without HiddenCore but under GPlay setting 'devices is not certified'.

------End of the Road--------

(Until Riru v22.x)
[Xposed General] Soumy1234:
[MENTION=4490913]cracky.ice[/MENTION] found a solution to passing SafetyNet on this thread: https://xdaforums.com/pixel-4-xl/how-to/xposed-discussion-thread-t3992607/post83847559

You have to use Edxposed 4563 instead of the latest 4564.
[Xposed General] Windoors:
What's the current working setup for passing safetynet?

I tried magisk v21 and sandhook canary but it failed.

---------- Post added at 08:13 AM ---------- Previous post was at 08:09 AM ----------

My ROM passes safetynet by default but fails in edxposed. To get it working I tried enabling blacklisting using edxposed but safetynet still fails.

Safetynet used to pass before installing edxposed but no longer passes even after disabling riru core and riru edxposed in magisk.
[Xposed General] lilbrat:
Ok this worked on my stock os OnePlus 6t, as you can see it passes, and device is playstore certified... I used the above and the manager posted a few post above this one.... (Kaustubhx)
[Xposed General] Hirs_E_Fruit:
what are your settings in the xposed manager?
[Xposed General] pndwal:
Solution for SafetyNet is simple:

Remove or disable Riru - EdXposed (Riru core is ok), reboot, clear cache for Google Play Services. > SafetyNet Success! (Hopefully ;) ) PW
[Xposed General] lilbrat:
Actually haven't touched anything...
[Xposed General] Windoors:
Thanks It worked with edxposed disabled. But I need edxoposed. Tried both 5.0.6 of yahfa and sandhook, checked "pass safetynet" but doesn't pass.

---------- Post added at 12:36 AM ---------- Previous post was at 12:20 AM ----------

On sandhook 4563 It passes safetynet but chromepie module doesn't work. On yahfa it does so thats good
[Xposed General] Kaustubhx:
To make it sound less confusing.

(If you have RIRU and EdXposed running, remove it from the magisk and reboot then check the safety net, If it passes)

Here are the steps :-

1- first turn off internet don't turn on internet or wifi.

2-install edxposed manager preview build apk.

3-open edxposed in settings enable skip status check.

4-now force stop or close edxposed.

5-enable edxposed manager in edxposed module.

6-now in edxposed setting turn on application mode and enable pass safetynet option.

7-now restart edxposed manager.

8-in applications add play store also in blacklist as google play service and google service framework already added when we checked pass safetynet option.

9-Now install riru core.

10-download edxposed canary build v0.4.6.4 (4563)

flash canary through magisk manager.

11-Now reboot and turn on internet.

---------------

NOTE :- (If you follow the 3rd step and did the 4th step it will allow you to enable edxposed module without riru or edxposed module installed)
[Xposed General] pndwal:
Seems v0.4.6.4 (4563) is now Stable build as of yesterday.

I just installed latest Magisk Canary 21006 / 313, then Riru Core / Riru EdXposed 4563 YAHFA (both from Magisk repo) on Mi Pad 4 for kicks... Well, just to test w/ SafetyNet.

Happily, I can report that this is passing 'out-of-the-box', and without even enabling App List mode / Pass SafetyNet! :good:

It also seems stable, with no 'intermittent' basicIntegrity trips as yet. :)

No such luck when I substituted 4563 SandHook, even with enabled App List mode / Pass SafetyNet and G Play Services cache cleared. :(

Next, tried Canary 4564 SandHook... No dice w/ standard settings, or otherwise either. :(

Hope Stable YAHFA is good for you! PW

Edit: I've now added a module, and SafetyNet immediately fails.

Solution is simply to enable App List mode and White List mode in Settings / Framework (so App List mode, White List mode and Force hook modules are selected here) and reboot. [Interestingly, Pass SafetyNet is not required!]*

*Edit 2: I just had a basicIntegrity fail with only these settings!

So I've now enabled Pass SafetyNet Pass and rebooted, SafetyNet is fixed, and I'll watch / report if I get any more intermittent basicIntegrity trips.

Nb. If basicIntegrity fail persists, clear Google Play Services cache. If Play Store Certification is lost, you may need to clear Google Play Store data also. PW
[Xposed General] Brandroid28:
i wanna be sure. android r is only supported in canary 5.0.6 right now?
[Xposed General] beeshyams:
Does Chrome or said using webview work on this configuration?
[Xposed General] pndwal:
:confused: ... Chrome is working fine. PW
[Xposed General] useformildaccess:
I have to get rid of my two other devices so I couldn't test if they present any 'intermittent' basicIntegrity trips but my current device, OnePlus 7T, suffers from it. I have disabled battery optimization for both Magisk and EdXposed managers but it has not resolved the issue. In essence, OnePlus devices are notorious to preferring battery life over proper functionality of apps according to DontKillMyAPP.com, so the 'intermittent' basicIntegrity trips could be a OnePlus device issue. Thanks [MENTION=7550078]pndwal[/MENTION] for your feedback on the Mi Pad 4. I would appreciate it if others, specifically OnePlus 7T device owners, to give feedback if they have or have not noticed any 'intermittent' basicIntegrity trips on their device so I can rule out if it is an issue local to just only my device. Thanks.
[Xposed General] pndwal:
No problem...

Have you tried with this YAHFA build directly from Magisk repo, w/ only the changes mentioned: App List mode and White List mode enabled in Settings / Framework (so App List mode, White List mode and Force hook modules are selected here), then reboot?

I'm interested to get to the bottom of basicIntegrity trips. I think battery optimization may be a red herring somehow...

Google should be detecting signs of system integrity compromise, commonly unusual bind mechanisms, other evidence of root, etc. PW
[Xposed General] c19932:
I have a 7T as well. have you figured out how to pass safetynet as of now?
[Xposed General] useformildaccess:
Interesting! EdXposed was just updated in Magisk repo on November 7th so I will be reinstalling it from there to try out your troubleshoot. I do have "App List mode" and "Force hook modules" enabled but instead of "White List mode", I have blacklisted Google Service Framework, Google Play Services, and Google Play Store. I might be confused and mistaken, but If I enable "White List mode", selecting apps that will load EdXposed modules gets complicated because for lack of a single whitelisted app, one or more modules' functionality might be broken - even with "Force Hook modules" enabled. For example, in the case of "DisableFlagSecure" EdXposed module (to capture screen in apps that normally wouldn't allow it), would it have full functionality with just "Force Hook modules" enabled and without the need for whitelisting any other apps it will work on?

Same setup on the OP7T with Magisk Canary 21006 / 313, then Riru Core / Riru EdXposed 4563 YAHFA and I also am passing SafetyNet; except for the 'intermittent' basicIntegrity trips that results in ctsProfile fail as well. But it does pass fully at subsequent attempts. But again, that was with me blacklisting Google Play Services, Google Play Store, and Google Pay. Try going into airplane mode, reboot, clear the cache and data of Google Play Services, Google Play Store, and Google Pay, reboot, and exit from airplane mode then check for SafetyNet.
[Xposed General] pndwal:
Great!

Do you have SafetyNet pass with EdXposed and modules?

If not, please would you try my method above ( https://xdaforums.com/xposed/development/official-edxposed-successor-xposed-t4070199/post83883807 w/ Riru Core and YAHFA modules from Magisk repo, and Whitelist mode w/ Pass SafetyNet on) on 7T, and report results here? :good: PW
[Xposed General] pndwal:
I'm completely unfamiliar with the finer details... This is my foray into EdXposed, and I only played with current stable and Canary builds. I read documentation / wiki info on settings, but this seem to be dated. For example, I read about and saw screenshots, but couldn't find any settings / toggles for Blacklist in current builds (apart from Pass SafetyNet mention)... Maybe it's obsolete, or I'm missing something?

Anyway, after finding SafetyNet passes with current YAHFA (only) builds, I found that this is retained with simple modules I installed (eg Cool Tool) simply by enabling Whitelist mode before module installation, but I just now had a basicIntegrity fail with only these settings!

So I've now enabled Pass SafetyNet Pass and rebooted, SafetyNet is fixed, and I'll watch / report if I get any more intermittent basicIntegrity trips. [Edited previous post.]

FWIW, it does seem that this is now the intended method as I can't find Blacklist etc except in old documentation...

I don't really understand selecting apps that will load EdXposed modules either: is that what Applications (white List) is for?... (I've only run Cool Tool etc. thru app icon) ...looks simple enough though; Xposed modules can't be deselected in this list, but seems all other apps can be selected or deselected.

Doesn't seem to matter if toggle is on in 'Modules' either, even after reboot... Cool Tool still appears and works toggled off. What does toggle do?

... So there are clearly big holes in my understanding of EdXposed. Please fill me in on what I'm missing, and (anyone), please enlighten me on key Xposed advantages / uses / modules.

Hope my cursory / noob observations are of some use. PW
[Xposed General] useformildaccess:
Interestingly, your suggestion about installing EdXposed YAHFA module from Magisk repo seems to have somewhat fixed the 'intermittent' basicIntegrity trips. I have been sporadically checking SaftyNet and it was tripped only once within a span of 12 hours. And that was right after manually invoked Google Play Store apps update during a charge cycle. I want to give it some time before I can confidently claim that I am not experiencing any 'intermittent' basicIntegrity trips. I will clear the cache and data of Google Pay and Google Play Store and let Google Play Store update apps automatically and give it about 48 hours while sporadically checking SaftyNet. If there is any 'intermittent' basicIntegrity trips that I am not polling but has happened Netflix will be listed incompatible in Google Play Store and hours later (24-48) Google Pay will report device security fail.

As far as EdXposed settings, dissecting the only available documentation I could find that is under each toggle's description, I have been using the app under the premise that "App List mode" can break system-wide modules' functionality in "White List mode" given that it loads EdXposed modules on the selected apps and the intent of most modules is to perform a set of tasks on the system and therefore most likely need to be loaded on all packages in the system except on blacklisted apps - unless you are working with a module that is intended to "tweak" a specific package in which case you can just whitelist it and experience the intended functionality. In the case of "Force hook modules", I think it is applicable if your are whitelisting apps as it will add the package/app of the module to the whitelist without you toggling the switch; as in the case of "Pass SafetyNet" where it will add Google Service Framework and Google Play Services to the blacklist without you toggling the switch in the Applications tab of the manager. But again, this is just my read and it might not be accurate.
[Xposed General] pndwal:
Thanks for that.

Glad it seems better, but I'll save you the wait for basicIntegrity trip; I had my tablet in sleep mode some hours, and just switched on and checked SafetyNet again; basicIntegrity fail again! Clearing Play Services and reboot fixed.

So it appears you intermittent fails are real, but may not be model specific. They are likely now standard fare, occuring across device model range.

Disabled Pass SafetyNet again and rebooted. No change; still passing. So I'm not sure that this toggle is working any more. PW
[Xposed General] Fire God:
YAHFA is a hook framework for Android ART. It provides an efficient way for Java method hooking or replacement. Currently it supports:

Android 5.0(API 21)

Android 5.1(API 22)

Android 6.0(API 23)

Android 7.0(API 24)

Android 7.1(API 25)

Android 8.0(API 26)

Android 8.1(API 27)

Android 9.0(API 28)

Android 10.0(API 29)

not see api 30 :|