yashsingh1/xdaforums huggingface dataset:
[Xposed Framework Modules] Slim2none4u:
Look here

Xiaomi Poco F3 / Xiaomi Mi 11X / Redmi K40

The Xiaomi Poco F3 is a 6.67" phone with a 1080x2400p resolution display. The Qualcomm SM8250-AC Snapdragon 870 5G chipset is paired with 6/8GB of RAM and 128/256GB of storage. The main camera is 48+8+5MP and the selfie camera is 20MP. The battery has a 4520mAh capacity.

xdaforums.com
[Xposed Framework Modules] Cryomichel:
Thanks a lot. Your module saved my phone. Owing a LG G8, I messed up trying to crossflash another firmware and found myself with the stock backup app refusing to work. Google also messed up.

Unlocked bootloader, rooted with magisk, installed your module and backup app and Goole apps worked again. Thanks a lot for making my phone last longer.
[Xposed Framework Modules] NEO701:
Hi All,

Module was working great for me to pass CIB banking app bootloader checks up to version 3.5.

with the latest update v3.8 it can't pass the checks for CIB anymore, so I had to rollback to v3.5.

Is it possible to check what is the issue with latest v3.8 and CIB app?

My device is Nothing Phone (2) running Android 14.

Thanks in advance. :)
[Xposed Framework Modules] AnyNameYouWish:
I tried this module on France Identité app (both 3.8 and 3.5, regarding to last post) but I can't get access to the app (I've made a topic about it here)

Does that mean the issue is related to STRONG INTEGRITY as mentionned in this post?
[Xposed Framework Modules] CoinCoin88:
Hey all,

I'm tinkering with a OP 10 Pro now that replade my 8 Pro, and have been struggling to have it work properly with streaming apps after unlocking the bootloader. After a lot of reading Un understand it has to do with TEE, chain of trust failing after unlocking the BL, and strange widevine-related behavior following this, but the exact details as to "what is happening" still elude me (I've attempted a post in the OP 10 Pro forums to try and get more explanations but sor far, no luck).

In short, should this module be a way to circumvent the issue arising with widevine L1 becoming corrupted after unlocking the bootloader on these phones ? Or am I wrong here ? In my case, widevine showed L1 in DRMInfo but streaming apps would fail, and after using this module widevine reverts to a working L3 level meaning streaming works, but in SD. That's suboptimal, but better than nothing. Is there hope for "better than better than nothing" ?

Thanks heaps
[Xposed Framework Modules] exis_tenz:
I might be or not be wrong here. Fact is, it's very hard to gain any help or information. Maybe some could help. I am using a OnePlus 9 running e/OS (Lineage based). Therefore the BL is unlocked. I am rooted with Magisk 27.0 and so far all my banking apps etc. work. Set-up with Magisk: Shamiko, USNF, Zygisk LSPosed (Bootloader Spoofer). Like said, EVERYTHING works EXCEPT my German Payback-App which I really want to use. After starting this app it tells me (translated from German): "This app cannot be started, since your environment is insecure und your data might be endangered".

I have installed e/OS (Lineage Android 12, S) on an OnePlus 7pro as well. A clean install, without root and ONLY an unlocked BL. There I get the same respons. Payback themselves are not helping (you can't contact their developers) and so far I am blocked from the app.

If anyone is willing to dive into this: any help is welcome. I am a quite experienced USER of Android, but definitely not an expert! I could upload the APK anytime if someone is interested. Latest version is 24.02.2900 (versions prior to 24.XX.XXXX won't work anyway - "too old") and it has to be the German version (there are other country-versions too) de.payback.client.android

Hope someone can help!
[Xposed Framework Modules] chiteroman:
Is this ? https://apkcombo.com/es/payback/de.payback.client.android/
[Xposed Framework Modules] exis_tenz:
Please take this file, it's the right version: Payback App in my Mega-account
[Xposed Framework Modules] chiteroman:
View attachment 6080742

Working.

Did you try using other Magisk ? Like Kitsune or Alpha.
[Xposed Framework Modules] exis_tenz:
I don't understand WHAT triggers this app to not work. I do not get this screen. I used an 25.XX version till a few weeks back (that one worked, but that version was about 8 months old). Then the app wouldn't start unless I updated and after updating it wouldn't work.

Could it have to do with TEE on OnePlus 9 (I don't understand this but I've read about it). Like said, either rooted or non-rooted on a Lineage based rom... Nothing!

Either Magisk 25, 26 or 27. With all modules as written and in a clean install of e/OS A13 without root or anything.
[Xposed Framework Modules] amn1987:
This worked w/o any issue in a device with only Basic Integrity passing. Rooted with Kitsune. No Zygisk or LSPosed. Could be some app whose presence is being deemed malicious? TWRP folder, Shizuku etc. IIRC some German apps took offense to the presence of Termux!
[Xposed Framework Modules] exis_tenz:
I had it on a freshly flashes OnePlus 7pro running e/OS, NON-ROOTED (so no TWRP, Magisk, Zygisk, LSPosed, Shizuku, Termux).

Just a clean install. And the app already says my device is "not secure and my data might be endangered" (translated from German)? So the only think I can think of, the app searches for an unlocked bootloader. Then when I root it and use the module it's still the same. I have also installed the "hide user Debug, Test-keys and Lineage OS" module. All the same. Deny list, everything is activated.

All my banking apps work with my set-up but this pisser won't.

Like said, clean install of e/OS, Aurora Store and nothing else. Clean install.
[Xposed Framework Modules] amn1987:
Is it a user-debug build in case of e/OS as opposed to user?
[Xposed Framework Modules] x111:
is there a way to pass MEETS_STRONG_INTEGRITY ?
[Xposed Framework Modules] zgfg:
return to stock and re-lock bootloader😁

there is one more way, search for the post and link in the pif thread

chiteroman posted about ten days ago (?), link to his github with instructions there.

he and imo one more guy succeeded

you will have to decompile /apex to smali, replace keymaster keys (you must find the leaked vendor keys on the net), recompile and flash

good chance that you brick your phone.

i didn't try, so don't ask me for help and i will also not search for the posts, links, etc.

that was all i can help😬

good luck
[Xposed Framework Modules] chiteroman:
Why do you want Strong to pass ?
[Xposed Framework Modules] x111:
so all nasty payment apps, and other crap that I have to use will work.
[Xposed Framework Modules] shoey63:
No guarantee of that at all.

Hardly any apps check for MEETS_STRONG_INTEGRITY. There are a multitude of ways for apps to check if a device is on original unmodified firmware with a locked bootloader, some of which we may not even be aware of.
[Xposed Framework Modules] x111:
ok, true story, I guess I will have to continue to use a second phone just for those crap apps :(
[Xposed Framework Modules] mrspeccy:
I think the Payback app exploits a kernel vulnerability that has been fixed recently: https://github.com/tiann/KernelSU/issues/1328

So my advice would be to update the kernel.
[Xposed Framework Modules] ingkey:
"Ingress is not supported on this device configuration." Error (Android Only) — Ingress Help Center

In an effort to combat cheating, as of 2.138, Ingress only supports Android devices that meet Google Play Integrity’s (GPI) BASIC_INTEGRITY

niantic.helpshift.com
[Xposed Framework Modules] dknight178:
Hi, I've also tried this module (using Oneplus open, rooted and unlocked bootloader) but unlike you, my disney+ does not work despite adding it to bootloader spoofer. Have tried with and without adding disney+ to shamiko/alpha, to HMA etc. How did you make this module 'work' (or at least lead to widevine being L3 but at least working)? Thanks
[Xposed Framework Modules] casouzaj:
I guess the problem is LSPosed. As soon as I install it, some apps stop working. I wish this module worked without LSPosed, e.g. as a Magisk module.
[Xposed Framework Modules] CoinCoin88:
You're making a great point : i just tried and Disney+ does not work... Oddly enough, Netflix does. Maybe Disney doesn't have that sort of rollback to a lower DRM level...
[Xposed Framework Modules] dknight178:
Are you saying Disney+ won't work without LSposed?
[Xposed Framework Modules] casouzaj:
I use Disney+, but I ditched LSPosed.
[Xposed Framework Modules] pndwal:
Assuming you have L1 Widevine security (if not I've posted several times about fixes for that w/ various OEM implementations) and DEVICE_INTEGRITY verdict, you generally need to hide LSPosed modules from apps using HMA module, ie hide HMA itself, all other Xposed modules and any apps even root related (including hidden Magisk App to defeat newer detection methods used by Sparkasse (push-TAN) bank etc) from Disney+ etc... use Ruru Detector etc to see if effective/what's missed... 👀 PW
[Xposed Framework Modules] CoinCoin88:
Hey.

I didn't know about HMA until your post and was relying on Shamiko + Magisk's denylist (not enforced, but it contained everything that, as supposed to not see tampering). I've installed and setup HMA following the guide liked from here. Everything seems properly hidden aside from from development mode enabled and debugging mode enabled, flagged as "suspicious".

Yet, still the same error in Disney+. Did you mean it was supposed to work that way?

Also, somewhat related, is that HMA setup supposed to fully replace Shamiko along with Magisk's denylist? If so, I'll delete everything that was there and remove shamiko.
[Xposed Framework Modules] pndwal:
I mentioned "you generally need" to hide LSPosed modules etc from apps using HMA module because many apps detect LSPosed or mod related apps by detecting apps/applist by various means although even Google generally believes that this is an abuse and has sought to better enforce sensitive permissions to try (with limited success) to curb the practice... I don't know that Disney+ is actually doing this but many banks do...

Anyway, have you taken Hide the Magisk App, also checked Ruru results after configuring HMA?

Please say what error...

Also say what Magisk version you have and confirm you have latest LSPosed, Shamiko and HMA modules, also Widevine L1 security level in DRM Info app and MEET_DEVICE_INTEGRITY for PI...

No!... You need to understand that Shamiko is the go-to stand-alone replacement for MagiskHide, a proper root and mod trace hiding module using hidelist mode (even though it hijacks list from disabled DenyList) unlike DenyList (which won't hide suspicious props or other traces and will deny/revert Magisk and module modifications; hidelist solutions don't do that)...

HMA is not 'root' hiding, rather it simply hides the presence of other apps (including Xposed modules) from configured apps as these may (deceitfully?) detect/deem them to be evidence of a compromised environment... Bank apps are known not only to detect root apps, but anything 'suspicious' including managers for Xposed etc, Applist, Ruru and other detectors etc etc...

So both approaches have become essential to use some apps, and additional hiding/spoofing may also be required, eg for additional sensitive props (not handled by Shamiko etc) where custom ROMs are used etc, OEM unlocking, Developer Options, presence of directories like TWRP, addon.d etc... Also, certain modules don't clean up properly after uninstalling and are still detected, eg XprivacyLua... If detected after uninstalling you'll need to remove folders like data/system/xlua manually...

Don't...

👀 PW
[Xposed Framework Modules] dknight178:
What phone do you have? Your phone is rooted, right?
[Xposed Framework Modules] dknight178:
What device are you using? Just found out the liboemcrypto does not work for android 14 so it seems I need to remove my root and lock my bootloader
[Xposed Framework Modules] casouzaj:
Not anymore. I switched to DerpFest ROM (also A14), which passes both basic and device integrity tests `per se`.
[Xposed Framework Modules] CoinCoin88:
A OnePlus 10 pro 5G, unlocked and rooted. There's a modded version of that liboemcrypto disabler floating around here on xda, specifically made for some devices under A14. It also requires another module to mount some specific partitions (someone correct me if that's wrong).

See link to this post for both the liboemcrypto disabler module and the extended mount module.
[Xposed Framework Modules] dknight178:
Thanks. Aee you on A14?

Have tried this already but not working - DRM info still shows widevine L1
[Xposed Framework Modules] pndwal:
Mmm... Widevine is tricky, especially since different OEM clearly do it in various ways, and some obviously don't follow Google standard practice.

Not sure why you think it's reverting to L3 if DRM Info etc show L1, or that it's a TEE issue at all... 'broken' TEE in OnePlus etc is really just broken keymaster/chain of trust data implementations within TEE OS. TEE OS actually still works; it may simply be that root breaks use of liboemcrypto.so Library on some devices so L1 can't work and L3 fallback requires breaking recognition of the library or other trigger, or apparently even that the streaming may need to whitelist a device to allow it to allow HD streaming/decryption. See this old XDA article:

https://www.xda-developers.com/andr...570.1208112111.1713622812-89174003.1705383048

Nb. liboemcrypto disabler module breaks camera and other functions in some devices. Also, issue may be lost keys for L1, but again I think you won't see L1 in DRM Info app if that occurs... See this post:

https://xdaforums.com/t/magisk-general-support-discussion.3432382/post-89126051

Also, do Momo or Key Attestation demo apps indicate the TEE (ie Keymaster implementation) is really "broken" on your late OP device?

Netflix should start at least regardless of DRM status which should only affect streaming/decoding; another issue perhaps?... Not sure why BootloaderSpoofer would even help; it basically works only for apps that use Key Attestation directly (not via integrity APIs) but are too lazy to implement proper server side verification of the extension data... Spoofing is impossible AFAIK for apps that do this properly and Google points out that trust is easily broken when validation is done on the KeyStore's device...

Well done... Can't help with that error and not sure why that gets low res streaming working in Disney. 🤷... App seems to perform some checks here I guess...

Completely different functions, and I explained a bit about both above... Wouldn't expect BootloaderSpoofer to help for Widevine/DRM...

Exactly...

Well L1 security level is probably quite valid, so 'apps don't have to deal with some unknown checks or device whitelisting absent etc' seems more likely to me...

As said above, I doubt BootloaderSpoofer does anything for these apps unless they happen to poll key extension data (ie implement Key Attestation model) and use a poor (flawed) method to verify the data... I'm pretty sure Netflix only uses Google APIs including Play Integrity and Widevine however, and if any of these streaming apps did start using Key Attestation they'd no doubt do it right, meaning no-one would have TEE decoded streaming (ie. HD DRM content) on modded devices if they check for unlocked/compromised devices that way. 😬 (It amazes me that even the *anks hardly ever seem to implement Key attestation natively.)

Hope something helps in quest for fixed HD streaming or just understanding... 😉 PW
[Xposed Framework Modules] CoinCoin88:
Since your answer is extremely thorough and raises only a few questions, I'll try and preserve only these sections !

Regarding this, here's what I observed using on my OP10Pro. Mint, DRMInfo returns Widevine L1 and a 5-digit SystemID. After unlocking the BL (not rooting etc), il still shows L1, but the SystemID changes and now has 10 digits. This has apparently been described and (somewhat) explained in another post I raised specifically. This is presumably what causes what I'm naively calling the "flawed L1". Now, how different apps handle this case is a mystery.

In that situation, Netflix does not start (error -93 on the splash screen, see this post), D+ starts, Prime Video starts, but none are able to stream at all. Applying BootloaderSpoofer allows Netflix to start and stream, but in the app menu, it shows a L3 Widevine. Prime Video streams correctly, D+ didn't.

Liboemcrypto disabler effectively returns Widevine to L3 (in DRMInfo), and all streaming apps now work, albeit in SD.

That's a good question. I'm not sure I read KeyAttestation right, but it doesn't look like anything bad shows here in KeyAttestation (see attached screenshot, note that BootloaderSpoofer is enabled and does its magic). I haven't tried Momo though.

All in all, BootloaderSpoofer does _something_ for Netflix, at least in my case.
[Xposed Framework Modules] asisandroid:
If someone finds a good strong bypass (Yes very unlikely but let's say you do), theoretically you could setup a farm and make it so people can proxy their strong integrity requests to the one with a bypass and charge a small fee for it so we aren't 250% doomed because in future like any app will require strong
[Xposed Framework Modules] zgfg:
No, you cannot 'proxy' stolen (Strong) PI results from the other device

You cannot even reuse your own previous (Strong) PI verdict

How Play Integrity works, particularly the Strong attestation on Trusred Execution Environment, how it uses state of the art cryptography, tokens, timestamps, private keys, everything has been explained couple of times in the PIF thread here on XDA

You can also study from the official tech doc (not just the first page, click below to Next, etc and go through the whole architecture)::

Overview of the Play Integrity API | Google Play | Android Developers

developer.android.com

See also:

Verify hardware-backed key pairs with Key Attestation | App quality | Android Developers

A tool for verifying security properties of hardware-backed key pairs.

developer.android.com

And:

Trusty TEE | Android Open Source Project

source.android.com
[Xposed Framework Modules] CoinCoin88:
Odd finding : while unlocking the BL one OnePlus (and presumably other OEMs) may trigger a change in SystemID and therefore weird voodoo things in Widevine, liboemcrypto disabler reverts the System ID to "something else"

Does that mean that spoofing SystemID is something feasible?

First pic: unlocked BL, BootloaderSpoofer enabled, liboemcrypto disabler disabled (flawed systemid, 10 chr).

Second pic: unlocked BL, BootloaderSpoofer enabled, liboemcrypto disabler enabled (correct systemid, 5 chr, but L3 as expected)
[Xposed Framework Modules] dknight178:
Thanks for this post.

I finally switched from alpha to stable 27 and finally got the liboemcrypto disabled to work. Cheers!
[Xposed Framework Modules] Arcinth:
Latest beta 4.0 doesn't work on my poco f5 android 13
[Xposed Framework Modules] Vicep83:
4.0 doesn't work on Pixel 7, Android 14View attachment 6096729
[Xposed Framework Modules] black.horse:
Yes Bank Iris App not working.

After add this app into bootloader spoofing, app closing automatically. And with out adding it's detect root

Kindly help.

iris by YES BANK - Mobile App - Apps on Google Play

Mobile banking app by YES BANK. Savings Account, Instant Loan, Bill Pay & more

play.google.com
[Xposed Framework Modules] thiefxhunter:
Hi dev, i really apreciate your work!

I tested the latest beta (4.0) on the Galaxy S24u and Tab s9u (Both on A14, 6.1) and its not working, says that the bootloader is unlocked, and when i try to open a bank app, its closing immediately after opening, i tested the spoof on Play integrity checker and its not passing all the 3 veredicts, (when off, passing the basic and device integrity) maybe something broke the integrity ?
[Xposed Framework Modules] westruk:
Try disable lsposed/zygisk
[Xposed Framework Modules] bou1l3m:
can you explain to us how to change the key in this module?
[Xposed Framework Modules] Vision:
BootloaderSpoofer/app/src/main/java/es/chiteroman/bootloaderspoofer/Xposed.java at main · chiteroman/BootloaderSpoofer

Spoof locked bootloader on local attestations. Contribute to chiteroman/BootloaderSpoofer development by creating an account on GitHub.

github.com
[Xposed Framework Modules] bou1l3m:
with what tool can I recompile the project?
[Xposed Framework Modules] Vision:
Is already decompile as zip on Github, click in code and download as zip and extract it in desired location and open it as project on Android Studio.

EDIT: You can use and this https://github.com/REAndroid/APKEditor for extra help
[Xposed Framework Modules] bou1l3m:
all keys are compatible or you will need specific keys ?
[Xposed Framework Modules] Vision:
Unfortunately, I don't know about that, but good question, I hope @chiteroman tell us
[Xposed Framework Modules] MasonJames1988:
Absolute life saver! This works on my S24 Ultra for WhatsApp.. I've been plagued for days with.. you must use the official version of WhatsApp. Installed bootloader spoofer and added WhatsApp, cleared its data and rebooted. WhatsApp now works perfectly fine. Thank you so much
[Xposed Framework Modules] bou1l3m:
the bootloader spoofer takes effect just the beta version lasted a week before being revoked
[Xposed Framework Modules] zgfg:
I use WA since I know for myself 😁, always on the rooted phones (and therefore with unlocked BL), and I never ever heard of WA complaining about 'root' or whatever. Using WA on daily basis, with a dozen of active chats and literally tens of msgs a day).

And I never needed any measures to hide anything from WA (DenyList, HMA, whatever)

I don't have BL Spoofer (I just tested it couple of times but only for Key attestation and eventually removed both from my phone since there were no real use case for)

And frankly, monitoring and participating here on XDA in several threads about Magisk, hiding 'root, Play Integrity, MS Tunes - every day somebody complains or asks about various 'banking' or e-citizen apps, McDonald's loyalty app, particular Face photo editor, you name them, that by this or that way do not run (properly) on our phones with unlocked BL, with custom ROMs, Magisk, LSPosed modules, ad-blockers- but this is for me the first time I hear about WhatsApp in that context?
[Xposed Framework Modules] godecij942:
Can someone help test these two apps below? For some reason after a recent update both stopped working (crashes upon opening). Funnily enough I don't have any issues with the local Australian banking apps.

Baby monitor (very random I realise):

MyVTech Baby Pro - Apps on Google Play

Free app for use with VTech RM series WiFi enabled Full HD Baby Monitors

play.google.com

Digital Driver's License (was previously working with HMA late last year):

Queensland Digital Licence - Apps on Google Play

Official Qld Government app

play.google.com
[Xposed Framework Modules] shadowstep:
Actually it's a very well known issue, but you haven't heard about it because it's only plagued users who were using unofficial WhatsApp mods. One day Meta decided enough was enough and there was a ban wave. The error message described by @MasonJames1988 is exactly what the users started to see... even after switching to the official WhatsApp version. You're right that WhatsApp works fine with root (even without being hidden), but Meta surely isn't happy with modded APKs.
[Xposed Framework Modules] MasonJames1988:
The thing with that is.. i wasnt using a modded apk, never have done for Whatsapp.
[Xposed Framework Modules] shadowstep:
That's a first! No idea why you got the error message then, since it specifically mentions that the user must use the official app to continue. 🤷‍♂️
[Xposed Framework Modules] Vision:
@chiteroman

When release this and the source code?

View attachment 6103165
[Xposed Framework Modules] Slim2none4u:
Since when is it ok to ask for updates in any thread?
[Xposed Framework Modules] Vision:
I don't ask from @chiteroman make a updates, I ask when release the existing updated.

He write on TG from 26 April and I ask for any news about this.
[Xposed Framework Modules] chiteroman:
FrameworkPatch is updated, and BootloaderSpoofer is very easy to detect, I don't know if continue updating it...