yashsingh1/xdaforums huggingface dataset:
[Android Software Development] m0han:
You've edited your post to imply that I offered help. I can't remember doing that. Not sure why you quoted my post that was a reply to @pndwal's post.

The dev has said 'The solution is using Zygisk of Magisk Alpha + Shamiko'. I'm not using any of the three ATM.
[Android Software Development] zgfg:
Ok, I see. You must have the last word or what. Quote me again and answer, I will not read nor answer

I'm just puzzled why do you comment all the time if it's not for your phone/config and you don't use it

But anyway, going to play indoors football
[Android Software Development] m0han:
Because all the time you were (i) doubting me, (ii) failing to realise/accept that an apk was made available here that when installed showed up as TEE F*cker, (iii) trying to show me up in poor light etc. etc. :D

Edit: I'll be man enough to apologise if @swer45 says he never made such an app available here in the first place. I will also ask the mods to remove my posts (if they don't do that themselves).
[Android Software Development] pndwal:
I have Xiaomi Redmi Note 8 w/ Magisk Alpha (w/ unfinished native bridge loading for Magisk WIP), modded USNF and Shamiko (up to date)...

Without module:

View attachment 5904703

With module:

View attachment 5904725

Perhaps it's breaking native bridge loaded Zygisk (although it is apparently functioning?)

View attachment 5904727

... Maybe we just need to wait for this final fallback not implemented yet?:

View attachment 5904723

🙃 PW
[Android Software Development] chiteroman:
View attachment 5905085

I found the way to move a file into process data dir so now I will inject an apk file with Pine and see if I can hook that Java methods.

Safetynet-fix copy a classes.dex as byte array and send it through Zygisk socket to GMS process, I can't do that because DexClassLoader require a path to the file, so I need the apk is in target directory. After all operations the module will be detached from process (dlclose) and the apk should do the work.
[Android Software Development] pndwal:
@canyie may also be interested in helping you hide bootloader status this way... 😛 PS
[Android Software Development] chiteroman:
The application I made before called "TEE Fvcker" was something quick for the user who asked me to try it. I do not recommend using it because the hook I used is quite insecure and can break the functionality of other applications. Besides the name is censored by the forum.
[Android Software Development] m0han:
The name did fvck up the thread a bit :D. As I posted earlier, I uninstalled it immediately. And, I'm not using Zygisk or Magisk Alpha or Shamiko. But, good luck with your project.
[Android Software Development] Mepsipax:
Hey, quick question: Do we still need Displax' mod after version 2.4.0, since it's supposed to fix play integrity as well?
[Android Software Development] Nergal di Cuthah:
The mod currently starts hiding sooner than official 2.4.0
[Android Software Development] Mepsipax:
Hm, Im Not sure if that's supposed to be better tbh. All I can say is that my device does not pass integrity with vanilla safety net fix after following the guide here: https://xdaforums.com/t/guide-root-...nlock-bootloader-pass-safetynet-more.4388733/

So I guess I should try Displax or is the guide wrong?
[Android Software Development] Nergal di Cuthah:
Yes try mod
[Android Software Development] Homeboy76:
The guide was not written for

vanilla safety net fix

.

The guide recommends using Displax Safety Net Fix, if you are having problems with Kdrag0n Safety Net Fix.

[OP, ~ ~ ~ Part II - INSTRUCTIONS ~ ~ ~...

5. Root/Reroot with Magisk and Pass SafetyNet.,

• Pass Safety Net with SafetyNet Fix,

1. Download File(s)]

<<Edited - removed number 3>>
[Android Software Development] Homeboy76:
The guide was not written for

vanilla safety net fix

.

The guide recommends using Displax Safety Net Fix, if you are having problems with Kdrag0n Safety Net Fix.

[OP, ~ ~ ~ Part II - INSTRUCTIONS ~ ~ ~...

5. Root/Reroot with Magisk and Pass SafetyNet.,

• Pass Safety Net with SafetyNet Fix,

1. Download File(s)]
[Android Software Development] Mepsipax:
"Vanilla" is just software lingo for "unmodified" or "plain", sorry about the confusion. So yes, i used unmodded universal safety net fix. This guide is for both that and displax'. Is the guide correct? I will try Displax then.
[Android Software Development] Homeboy76:
I edited the guide: [OP, ~ ~ ~ Part II - INSTRUCTIONS ~ ~ ~..., 5. Root/Reroot with Magisk and Pass SafetyNet.,

• Pass Safety Net with SafetyNet Fix.]

I removed

Kdrag0n Safety Net Fix

to avoid confusion.
[Android Software Development] Adromir:
Can someone tell me what apps I need to activate Tee Hide for?
[Android Software Development] chiteroman:
TEE-Hide only hide an unlocked bootloader, if an app is not working because it checks an unlocked bootloader, this module maybe be useful.
[Android Software Development] immortalwon:
I tried to use this app on 8-ball pool game, but it had no effect. 8-ball pool is detecting something from magisk or bootloader that is causing the app not to start and keep crash. Hope someone can figure it out.
[Android Software Development] jorgeccastro:
Worked for me! thanks.

Pixel 7 on StatixOS ROM Android13
[Android Software Development] chiteroman:
Maybe is detecting Magisk app or Zygisk. I don't know if exist an app that checks unlocked bootloader.
[Android Software Development] chiteroman:
New huge update for the Xposed module, also now the repo it's in LSPosed repo so it will appear in LSPosed app. You will want to install it :D

GitHub - swer45/AttestationSpoofer: Xposed module that spoofs a fake root of trust in local attestations

Xposed module that spoofs a fake root of trust in local attestations - GitHub - swer45/AttestationSpoofer: Xposed module that spoofs a fake root of trust in local attestations

github.com

View attachment 5908765View attachment 5908767

As you can see, now the module will spoof a locked bootloader with a verified boot state in RootOfTrust. This should work in all devices that have a TEE or StrongBox. If someone crash tag me and I will try to fix it.

Also I'm working in Magisk module (Zygisk), but it's difficult XD.
[Android Software Development] zgfg:
Perfect
[Android Software Development] chiteroman:
View attachment 5908799

With this module you can start the CIB Egypt Mobile Banking which is the only app I know they check if you have an unlocked bootloader. Enjoy 😎😎😎
[Android Software Development] chiteroman:
Hey @shoey63 , can you use this app? https://play.google.com/store/apps/details?id=com.CIB.Digital.MB

They check if you have an unlocked bootloader, but I don't know if they check a blacklisted device.

If you can't with your broken TEE phone I will try to do a bypass.
[Android Software Development] pndwal:
A challenge; I still can't open Starling Bank... It can be done using whitelist hiding + blocking firebaseremoteconfig.googleapis.com URL apparently however... 😛 PW
[Android Software Development] zgfg:
Interesting, just checked and found that that URL is already blocked in my AdAway by the hosts sources I use
[Android Software Development] osm0sis:
Really intrigued whether this will make OnePlus' broken TEE report as working. 😯
[Android Software Development] chiteroman:
If TEE don't sign the certificate with attestation extensions it won't work. https://source.android.com/docs/security/features/keystore/attestation
[Android Software Development] pndwal:
Woops... 'Starling' Bank... Cursed spellchecker... Fixed now... PW
[Android Software Development] shoey63:
Force closes
[Android Software Development] shoey63:
Already hidden.

Still FC with or without TEE hide.

But why am I testing?I don't need TEE hide

On Rog phone3.

View attachment 5908991
[Android Software Development] chiteroman:
The serial number of TEE certificate is banned, that's why you can't pass Strong and CIB force closes, Key Attestation Demo doesn't have the blacklist devices list updated: https://github.com/vvb2060/KeyAttestation/blob/master/app/src/main/res/raw/status.json
[Android Software Development] chiteroman:
I can't too, the firebaseremoteconfig domain maybe save our device info.
[Android Software Development] pndwal:
I can confirm CIB works with this however... Guess it's only relying on on-device attestation like Key Attestation demo...

Am I correct that if banks follow Google guidelines and use server based certificate verification they will effectively have a strong attestation to true bootloader state without needing Play Integrity API, and that there will be no ready means to spoof signals to bypass this? Ie. Key attestation already gives banks a strong device integrity check with no need to enforce PI API's deviceIntegrity verdict... 🙁

Anyway, please keep us informed re. Progress with alternative hooking to hide XPosed, Zygisk and injection into zygote along with orange B/L state... 👍 PW
[Android Software Development] ReMiOS:
I've read various comments on users who have this working, while others do not..

Since i just recovered fron a bootloop after installing LSposed (only flashing ROMS en wiping data solves it)

i would like to know if this should work for my installation.

Can anyone confirm this should work on:

Samsung S10+ SM-G975F Android 12 ( kernel fixes 03-2023 )

Magisk 26.1

TWRP v3.7.9_9.2 in recovery

Ambasadii_Cruel-HVJ5-G97xF-v6.9-S Kernel

multidisabler-samsung-3.5-corsicanu
[Android Software Development] zgfg:
What TWRP you have is not related to Magisk modules.

However, Magisk modules should be installed from Magisk app, Modules tab (NOT from TWRP)

Also, LSPosed and USNF are Zygisk modules, hence you must enable Zygisk in Magisk app, reboot and check if Magisk app shows that Zygisk is enabled

Don't know what you mean by 'working' or not but you should test by eg Play Integrity API Checker from PlayStore, you must pass Basic and Device Integrity

Btw, do not use USNF module from this thread but safetynet-fix-v2.4.0-MOD_1.2.zip (modded and newer USNF).

Find its thread on XDA and/or find the earlier posts in this thread pointing there

Also, since you have TWRP - if you have bootloop after installing some module, use TWRP File mngr, go to /data/adb/modules, inside find a folder corresponding to that module, delete its folder and reboot. Dirty way (clean way: add a file named "disable" or "uninstall" into that folder, without quotes) and reboot.

No need to flash the ROM to recover

Edit: USNF will not help you (to pass Play Integrity) if your ROM or Kernel enforces SE Linux Permissive mode. With Permissive mode you will never pass SN/PI - find another ROM instead
[Android Software Development] ReMiOS:
Thanks for your response !

I mean wil it not bootloop my phone and wil pass the integrity tests after installing

Found that thread already, but on the link below i've read it's says:

"It is particularly useful for current-gen Google Pixel users.Pixel phone's"

xda safetynet

Tried this, disabled one by one all modules in reverse order i installed them.

I don't know if my kernel is in permissive mode ..
[Android Software Development] zgfg:
Ok so is your Zygisk enabled, did you install safetynet-fix-v2.4.0-MOD_1.2.zip and reboot, and did you test by PI API Checker. Eg, post it's screenshot

Only a user with exact device, ROM and Kernel may tell you how would it work for you. Otherwise only useless guesses (eg, I have Xiaomi, what can I tell you for your Sammy ROM and custom Kernel). Therefore, you have to test on your side
[Android Software Development] ReMiOS:
I've installed safetynet-fix-v2.4.0-MOD_1.2.zip

All went fine only strong_integrity check failed

View attachment 5909423

Samsung S10+ SM-G975F Android 12

Magisk 26.1

TWRP v3.7.9_9.2 in recovery

Ambasadii_Cruel-HVJ5-G97xF-v6.9-S Kernel ( patch level 01-03-2023 )

multidisabler-samsung-3.5-corsicanu

safetynet-fix-v2.4.0-MOD_1.2.zip
[Android Software Development] zgfg:
Yeah, that's it. You cannot pass Strong with your unlocked Bootloader
[Android Software Development] emlo16:
Why install Safetynet fix when you can do without it?

View attachment 5910559
[Android Software Development] zgfg:
Maybe you have Xiaomi.eu ROM that already comes with the integrated USNF

Also, don't test deprecated SafetyNet but the new Play Integrity API
[Android Software Development] emlo16:
Tested with all my devices with different ROMs. PE, OctaviOS, AncientOS, EvolutionX and Bootleggers 😉
[Android Software Development] chiteroman:
Don't use safetynet checker, use this: https://play.google.com/store/apps/details?id=gr.nikolasspyr.integritycheck

Also, that roms already have a fix hardcoded. @kdrag0n said it's better:

View attachment 5910631
[Android Software Development] pndwal:
Yeah... Maybe most custom ROMs now integrate SNF (per Proton model) or other spoofing... But what about Stock ROM users... 😉

BTW, if you root w/ Magisk you can just add appropriate gms processes to denylist; you still won't need USNF. 👍 PW
[Android Software Development] ipdev:
Just to mention, official LineageOS builds are not allowed to include 'hacks' like this.

LineageOS Charter - [Github] - SafetyNet

"- All devices MUST NOT alter SafetyNet validation responses."

Cheers. :cowboy:
[Android Software Development] pndwal:
Official LOS plays by the book... Won't bundle GApps either... PW
[Android Software Development] ipdev:
LineageOS - [Wiki] - Google apps

"Google apps are the proprietary Google-branded applications that come pre-installed with most Android devices, such as the Play Store, Gmail, Maps, etc. Due to licensing restrictions, these apps cannot come pre-installed with LineageOS and must be installed separately."

---

I remember awhile back (might have been shortly after LineageOS risen from the ashes of CM).

Someone posted a link to a discussion between Lineage and Google about it.

Lineage was trying to find out what they had to do or if they could become a "licensed" partner.

Cheers. :cowboy:

PS.

Sorry all for the OT. 😉

Forgot what thread we are in.
[Android Software Development] pndwal:
Are you thinking of something I posted about Shawn's suggestion that "perhaps what we need to do is to find a way for third-party ROMs to get approved, after proving that they pass the compliance tests and don't subvert the security model..." and Luca's response that it may be "doable"?... The original post was here:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-82011917

and found the twitter link (which I hadn't included due to different XDA policy re. social media links back then):

www.twitter.com/luca020400/status/1238159758319931392

Sad it didn't seem to get traction... 🙃 PW

PS. I'm blaming you...
[Android Software Development] chiteroman:
That's why I hate Lineage, I don't understand that "rules"...
[Android Software Development] pndwal:
'Hate' is a strong word!...

Anyway, when the original CyanogenMod bundled all proprietary GApps for one thing, Google issued their infamous "Cease And Desist" order and Steve Kondik thought his baby was dead!...

However Google were quick to clarify that although custom OS's could not legitimately bundle GApps (Nb. other ROMs still do), users are welcome to 'sideload' the same (as devices themselves are generally certified through CTS while custom ROMs are not)...

So OpenGapps was formed to offer legitimised seperate packages, Steve continued with CM project, users continued to use vanilla CM (and later LOS) with proprietary Google Apps, and all in the custom mod world was sweet again...

Of course Google must have realised they nearly shot themselves in the foot with that action, but they scrambled to offer a solution / compromise that wouldn't result in the death of CM or custom ROMs as we know them...

I think the Lineage team simply see that Google is actually the custom modders benefactor and is (in reality) supportive of them and custom mods/ROMs in general if Devs play by the rules, and LOS is simply willing to do so...

Also, they are in the best position to get their custom ROM approved/certified in future (see my post above) by being careful 'not to subvert Google's security model' by tampering expected signals... Note that Magisk now follows this same policy, and I think that's not just because John is a Googler now; it's also a sign of his maturity as a responsible dev...

And ensuring that the main custom mods (ROM, root/overlay framework) comply in no way prevents "those passionate about hiding" from "doing their job"!... Both history and you are proving that.

Personally I think LOS is great and follows a great tradition! 🙃 PW
[Android Software Development] MobAndro:
Hello,

Would we have hope to see your module again please ?

Because, it's very great 😆
[Android Software Development] chiteroman:
Yeah, problems with LSPosed repo. Here it is: https://github.com/swer45/AttestationSpoofer
[Android Software Development] zgfg:
Thanks

Is this Attention Spoofer now the same as previous TEE Hide?

Please in future increase the version number and if possible sign that PlayProtect would not complain.

(I install other 6 or so LSPosed modules with no problem from the PlayProtect side - only for your module I must always disable PlayProtect to be able to install the apk)
[Android Software Development] MobAndro:
Thank you so much ☺️

But, it's fully compatible with USNF Mod of Displax or SN Sensitive Props of HuskyDG please ? 😣
[Android Software Development] zgfg:
It's independent of USNF

You cannot use this module to spoof Google Play Services to think that Bootloader is locked (and eg to pass Strong Integrity) - read its README on GitHub

It"s enabled by default for KeyAttestation app, you can enable for Momo and other apps if you think they look for unlocked Bootloader (but not by using SafetyNet or Play Integrity APIs)

On the other side, module does not affect USNF (nevertheless, do not enable Google Play Services for the module)
[Android Software Development] MobAndro:
Very well and thank you very much for all this additional informations 😃

I want to install Magisk Delta which seems better than the Official actually 😄

After reading several different threads on XDA in the last few days, only do you know if SN Sensitive Props of HuskyDG is also compatible with Magisk Official if I go back on it just in case please ?

Otherwise, I will take USNF Mod of Displax for Magisk Official.
[Android Software Development] zgfg:
I run Sensitive props with official Magisk v26201 (Canary)

Actually I also run his Magisk Hide module (hence using MagiskHide instead of DenyList) and then not Shamiko

In fact, I have them installed all and I manage from Magisk app which combination of them I want to enable/disable

---

On my daily driver I run Delta (Canary) in SuList mode (MagiskHide but whitelist type config)
[Android Software Development] MobAndro:
Okay, I understand and thanks a lot again ☺️
[Android Software Development] molitar:
Question: Is it possible to get the device to pass Strong? The first two pass fine.
[Android Software Development] immortalwon:
If your bootloader is unlocked, strong will never pass.

Yes, there are exceptions but they are rare and Google is actively looking for those rare exceptions so they can patch them.
[Android Software Development] molitar:
Thanks for this.. I'll be happy with what is passing. Google Pay worked but it kept throwing up a warning that warning went away with this new module.
[Android Software Development] chiteroman:
There aren't any app that uses Strong by the moment. Only few apps checks things like unlocked bootloader or broken TEE like CIB, but can be bypassed with my module.

Also it's possible to pass Strong, for example. some xiaomi.eu ROMs have this feature: https://xdaforums.com/t/xposed-attestationspoofer.4586251/post-88545625
[Android Software Development] husharon:
Hey, I'm with s21 ultra with cacnary magisk. Since the last update to 2.4 kdrag0n my wifi calling doesn't work. Does anyone have this problem?
[Android Software Development] chiteroman:
Did you try to use Displax fork? USNF of kdrag0n is outdated.

https://github.com/Displax/safetynet-fix/releases/latest
[Android Software Development] husharon:
No, but I'll try it
[Android Software Development] husharon:
It's work!!! Thank u
[Android Software Development] GoblinHero:
Yes, USNF breaks wifi calling on some phones. Displax fork has this problem (at least on my phone) too.
[Android Software Development] creeve4:
Any info regarding USNF breaking Visual Voicemail on Pixel phones?
[Android Software Development] abdulhkeem:
The fix for it stopping is easy just go to Magisk - enter the settings - scroll down to Configure DenyList - tick both Google Play Store and Play Services, here is where it is important after ticking both tap them again you will have a list turn all of them on it should work after you reboot after doing this!
[Android Software Development] pndwal:
Do you know why I cannot find Native Test (NativeDetector):

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-88561709

in app selection list (via LSPosed Manager) for Attestation Spoofer? Ta, PW
[Android Software Development] chiteroman:
True, idk why, maybe LSPosed manager bug
[Android Software Development] whitehollow:
Is it possible that Samsung secure folder trip safetinet? I don't know what happened but I had to clear data of Google play store services and framework and I uninstalled and reinstalled magisk hide props and safetinet fix but my Google wallet doesn't work. What can I do ? I'm using beyond Rom with android 13 magisk and lsposed
[Android Software Development] zgfg:
First, (btw, that's being discussed here for months), are you using the right USNF module - ie, not the one from this thread but the newer safetynet-fix-v2.4.0-MOD_1.2 from the other thread (but every page or two, there are posts here that point to there)

Then, with that right USNF module, try without MHPC (ie, please do not use outdated guides since things continually change)

However, if your custom ROM runs SELinux in Permissive mode, it will not work - look then for another custom ROM
[Android Software Development] whitehollow:
Yes I'm using the last usnf and everything worked fine with my rom before I tried to clean Google play store data. Safetinet was on pass. I was already on the last fix , maybe deleting Google play data tripped something
[Android Software Development] ipdev:
It broke for me a few (maybe more) months ago.

I assumed it was an update to Phone (com.google.android.dialer) that was not compatible with older Android.

I still run an Android 11 rom on my main phone (Pixel 3a XL). 😉

Interested if the module is now the culprit. :unsure:

Fix for "Visual Voicemail" ?

I assume you are running with Magisk's Denylist not enforced.

If enforced, this module will remove GMS (Google Play services) from the list on boot.

When not enforcing, the list is not used by Magisk (or this module).

Other apps, like Shamiko, might use the list instead of creating one of it's own.

Please expand on your comment a bit.

- What Magisk (official or one of the branches).

- What other modules are you running.

- Are you enforcing Denylist in Magisk?

If so, then Play Services does not need to be added to the list since this module removes it on boot.

Cheers all. :cowboy:
[Android Software Development] ipdev:
I keep seeing this noted and question it.

Might be device related but, I run an unofficial Lineage 20 build on my Nexus 7 (2013) and pass PI with just the USNF_mod module.

BOARD_KERNEL_CMDLINE := console=ttyHSL0,115200,n8 androidboot.hardware=flo user_debug=31 msm_rtb.filter=0x3F ehci-hcd.park=3 androidboot.selinux=permissive

View attachment 5916889 View attachment 5916883

Maybe it is based on the kernel version or device release Android version?

¯\_(ツ)_/¯

Cheers. :cowboy:
[Android Software Development] abdulhkeem:
No for the google safety net i noticed it failed after i updated to magisk 26 from 25 so i kept searching for a fix just wanted to share it here if no one figured out how to pass it!

- official magisk

- i have these modules, knoxpatch enhancer, shamiko, systemless hosts, safetynet by kdrag0n, zygisk.

- no enforcing shamiko takes care of that i guess.

That's all i did to get it back working.