search

ElderDrivers / EdXposed

Elder driver Xposed Framework.
https://edxp.meowcat.org/
GNU General Public License v3.0
5.4k stars 624 forks source link

[BUG] Safety net is tripped now! #386

Closed ghost closed 4 years ago

ghost commented 4 years ago

Safety net is tripped now!

VarunS2002 commented 4 years ago

Deactivating all modules is passing safetynet Activating any module breaks it

VarunS2002 commented 4 years ago

I'm using 0.4.5.1 What about you?

wilsonhlacerda commented 4 years ago

Yeah! Same bug here (but I've found workaround!)

Here: Lineage OS 16 (Android 9) Newest Official Magisk Canary: 20.2 (20102) Manager 7.4.1 (255) Manager Hidden Newest EdXposed Manager v4.5.1 Newest Riru v19.5 Newest UNOFFICIAL EdXposed v0.4.6.0 beta (4471) SandHook (by DarkEyes at XDA Forum, to run with official Magisk) Google Play Store v17.3.16

Lots of modules, including system wide XprivacyLua, Xposed Edge Pro,.....

SafetyNet completely broken in Magisk check. Both CTS and BasicIntegrity fail.

WORKAROUND: after turn on EdXposed Manager Black List feature and turn it on for Play Store, Play Services and Google Framework, SafetyNet becomes all green again! :) Try it!

Hope a fix. Thanks.

VarunS2002 commented 4 years ago

Thank you so much dude the workaround worked I tested it on the Latest Stable of Magisk and 0.4.5.1 Sandhook

joxon commented 4 years ago

Yeah! Same bug here (but I've found workaround!)

Here: Lineage OS 16 (Android 9) Newest Official Magisk Canary: 20.2 (20102) Manager 7.4.1 (255) Manager Hidden Newest EdXposed Manager v4.5.1 Newest Riru v19.5 Newest UNOFFICIAL EdXposed v0.4.6.0 beta (4471) SandHook (by DarkEyes at XDA Forum, to run with official Magisk) Google Play Store v17.3.16

Lots of modules, including system wide XprivacyLua, Xposed Edge Pro,.....

SafetyNet completely broken in Magisk check. Both CTS and BasicIntegrity fail.

WORKAROUND: after turn on EdXposed Manager Black List feature and turn it on for Play Store, Play Services and Google Framework, SafetyNet becomes all green again! :) Try it!

Hope a fix. Thanks.

Oneplus 7 Pro AOSiP-9.0-Official-guacamole-20190913 Magisk Canary 20.2 (20102) Magisk Manager 7.4.1 (255) Hidden EdXposed Manager v4.5.1 Riru - Core v19.5 Riru - EdXposed v0.4.6.0 SandHook Google Play Store 17.3.16 Google Play Services 19.5.30

Thank you for your solution but it doesn't work though. Am I missing something? I opened EdXposed Manager then ->Application List -> toggle on "Google Play Store", "Google Play Services" (I have not found any "Google framework" though).

Update: open EdXposed Manager -> Settings -> toggle on "App List Mode" -> Application List -> toggle on "Google Play Store", "Google Play Services" -> reboot -> safetynet passed. Yay!

blackcatdev commented 4 years ago

Unfortunately I had to check also "App List Mode" in Exposed Manager options to pass SafetyNet.

MlgmXyysd commented 4 years ago

Yeah! Same bug here (but I've found workaround!) Here: Lineage OS 16 (Android 9) Newest Official Magisk Canary: 20.2 (20102) Manager 7.4.1 (255) Manager Hidden Newest EdXposed Manager v4.5.1 Newest Riru v19.5 Newest UNOFFICIAL EdXposed v0.4.6.0 beta (4471) SandHook (by DarkEyes at XDA Forum, to run with official Magisk) Google Play Store v17.3.16 Lots of modules, including system wide XprivacyLua, Xposed Edge Pro,..... SafetyNet completely broken in Magisk check. Both CTS and BasicIntegrity fail. WORKAROUND: after turn on EdXposed Manager Black List feature and turn it on for Play Store, Play Services and Google Framework, SafetyNet becomes all green again! :) Try it! Hope a fix. Thanks.

Oneplus 7 Pro AOSiP-9.0-Official-guacamole-20190913 Magisk Canary 20.2 (20102) Magisk Manager 7.4.1 (255) Hidden EdXposed Manager v4.5.1 Riru - Core v19.5 Riru - EdXposed v0.4.6.0 SandHook Google Play Store 17.3.16 Google Play Services 19.5.30

Thank you for your solution but it doesn't work though. Am I missing something? I opened EdXposed Manager then ->Application List -> toggle on "Google Play Store", "Google Play Services" (I have not found any "Google framework" though).

Update: open EdXposed Manager -> Settings -> toggle on "App List Mode" -> Application List -> toggle on "Google Play Store", "Google Play Services" -> reboot -> safetynet passed. Yay!

oh...only pass basicIntegrity on my phone...

blackcatdev commented 4 years ago

Yeah! Same bug here (but I've found workaround!) Here: Lineage OS 16 (Android 9) Newest Official Magisk Canary: 20.2 (20102) Manager 7.4.1 (255) Manager Hidden Newest EdXposed Manager v4.5.1 Newest Riru v19.5 Newest UNOFFICIAL EdXposed v0.4.6.0 beta (4471) SandHook (by DarkEyes at XDA Forum, to run with official Magisk) Google Play Store v17.3.16 Lots of modules, including system wide XprivacyLua, Xposed Edge Pro,..... SafetyNet completely broken in Magisk check. Both CTS and BasicIntegrity fail. WORKAROUND: after turn on EdXposed Manager Black List feature and turn it on for Play Store, Play Services and Google Framework, SafetyNet becomes all green again! :) Try it! Hope a fix. Thanks.

Oneplus 7 Pro AOSiP-9.0-Official-guacamole-20190913 Magisk Canary 20.2 (20102) Magisk Manager 7.4.1 (255) Hidden EdXposed Manager v4.5.1 Riru - Core v19.5 Riru - EdXposed v0.4.6.0 SandHook Google Play Store 17.3.16 Google Play Services 19.5.30 Thank you for your solution but it doesn't work though. Am I missing something? I opened EdXposed Manager then ->Application List -> toggle on "Google Play Store", "Google Play Services" (I have not found any "Google framework" though). Update: open EdXposed Manager -> Settings -> toggle on "App List Mode" -> Application List -> toggle on "Google Play Store", "Google Play Services" -> reboot -> safetynet passed. Yay!

oh...only pass basicIntegrity on my phone...

Have you tried SafetyPatch or MagiskHide Props Config module?

cscomic commented 4 years ago

Same problem here, after Google play service auto-update last Sunday. It will come ok when I only disable edXposed.

Sony Xperia XZ1 Android 8.0 Magisk 20.1 Riru 19.5 Riru - edXposed 0.4.5.1

solosu's Magisk will cause boot loop, so I haven't test 0.4.6 yet

kgr17 commented 4 years ago

WORKAROUND: after turn on EdXposed Manager Black List feature and turn it on for Play Store, Play Services and Google Framework, SafetyNet becomes all green again! :) Try it!

Can confirm it works! Thanks!

tupac55 commented 4 years ago

Can confirm this bug and also the working workaround.. but the workaround make sudohide not working anymore :(

Patched magisk with the latest yahfa 4471 Xiaomi Mi9T miui 9.10.24 China beta / Android 10

wilsonhlacerda commented 4 years ago

Can confirm this bug and also the working workaround.. but the workaround make sudohide not working anymore :(

Patched magisk with the latest yahfa 4471 Xiaomi Mi9T miui 9.10.24 China beta / Android 10

Sudohide stops completely? Or just don't hide apps to Play Store (and Google Services, Framework) anymore?

Probably it is failing only to hide app updates on Play Store, isn't it? To hide other generic app A from B I believe it should work, although I haven't tested it.

tupac55 commented 4 years ago

Can confirm this bug and also the working workaround.. but the workaround make sudohide not working anymore :( Patched magisk with the latest yahfa 4471 Xiaomi Mi9T miui 9.10.24 China beta / Android 10

Sudohide stops completely? Or just don't hide apps to Play Store (and Google Services, Framework) anymore?

Probably it is failing only to hide app updates on Play Store, isn't it? To hide other generic app A from B I believe it should work, although I haven't tested it.

It fails to hide..., if I don't enable Googe play store on the app list to make sudohide working, safety net become false after a while (it first says true)

Senliast commented 4 years ago

Same problem, SafetyNet now detects EdXposed. The workaround is working, but it would be nice if a permanent solution would be found in the next time)

SteveYoungs commented 4 years ago

The workaround works in that Magisk Manager will report safetynet passes. The workaround doesn't work in that Google Pay won't work.

Disabling the EdXposed Magisk module is the only way I've found that'll let me use Google Pay.

OmarNamis commented 4 years ago

@wilsonhlacerda I can confirm this.

ghost commented 4 years ago

The workaround is a hit and miss. Sometimes it passes, sometimes it fails a few seconds later. A permanent solution is needed.

sipe commented 4 years ago

Update: open EdXposed Manager -> Settings -> toggle on "App List Mode" -> Application List -> toggle on "Google Play Store", "Google Play Services" -> reboot -> safetynet passed. Yay!

Hello all,

HTC U11 Stock Android 9 3.23.709.6 Magisk 20.2 (20100) Manager 7.4.0 (253) EdXposed Manager v4.5.1 4463 YAHFA Riru v19.5 Google Play Store v17.3.16 Google Play Services v19.5.30

Confirmed GPay working workaround, Magisk safetynet also passes, selected Google Play services and Google Services Framework.

Thank you.

ghost commented 4 years ago

Ok, the workaround works when EdXposed Manager is open in the background. I tried deoptimizing battery for the Manager, and now SafetyNet works.

EDIT: Never mind. Still hit and miss.

chaoscalm commented 4 years ago

We can still use sudohide, so far I added to blacklist only the services and framework; I also tested with a old version of SandHook with success, I can confirm that "App List Mode" enabled seems essential in order to success.

shmykelsa commented 4 years ago

For me SafetyNet passing is quite interesting. After enabling EdXposed + modules, upon every reboot the first check of Safetynet within Magisk Manager will fail in both profiles. Second check will report all trues. Checking with other apps will report always true. But then leaving the device for some time will result in Magisk reporting safetynet false again. I assume that Magisk Manager is bugged in SafetyNet check?

EDIT: No, it's not just Magisk. Even with other Safetynet checkers, randomly Safetynet fails, but then the moment very after it passes fine.

saqie1393 commented 4 years ago

open EdXposed Manager -> Settings -> toggle on "App List Mode" ->

i am not find these setting ?

kgr17 commented 4 years ago

open EdXposed Manager -> Settings -> toggle on "App List Mode" ->

i am not find these setting ?

I use the Edxposed Installer app and it's in menu> edxp settings> black list (toggle). Then reboot and go to menu> black list

p1r473 commented 4 years ago

Workaround is not working for me. Can someone post clearer instructions?

DU1R commented 4 years ago

I did only the application list workaround and it's working for version "0.4.5.1_beta(4463) (YAHFA)" on my OP6T running stock 9.0.17 and Magisk Stable 20.1.

Here are more detailed instructions: Open EdXposed Manager Tap the menu icon on top left Tap settings. Scroll down to the bottom and toggle "App List Mode" Go back to main screen (back button or arrow at top left) Tap menu icon again Tap Application List Tap the toggle for "Google Play Services" Tap the toggle for "Google Play Store" Reboot phone Wait 1-2 minutes after reboot and device will pass.

I literally just did this on my phone so I can't say yet as to whether it works intermittently or not, but I can confirm it passes SafetyNet check in Magisk Manager and Pokemon GO now opens where before it wasn't.

zioukovsky commented 4 years ago

safetynet works but snapfreedom do nothing :/ lets see how long I will wait for ban :D

Senliast commented 4 years ago

safetynet works but snapfreedom do nothing :/ lets see how long I will wait for ban :D

Are you sure that you do not have SC alpha? Deselect and select snapfreedom in EdXposed manager, reboot device.

P.S. Snapchat doesn't ban for failing SafetyNet

hoistedPetard commented 4 years ago

Has anyone tried the Hidden Core module in EdXposed? It is passing SafetyNet for me without any blacklisting or switching modes, just install and reboot.

For posterity, I am running EdXposed YAHFA 0.4.5.1. EdXposed Manager 4.5.1 under Magisk v20.1 / Android Pie.

https://ibb.co/xLBxDDV https://ibb.co/F6y1hcH

joxon commented 4 years ago

Has anyone tried the Hidden Core module in EdXposed? It is passing SafetyNet for me without any blacklisting or switching modes, just install and reboot.

For posterity, I am running EdXposed YAHFA 0.4.5.1. EdXposed Manager 4.5.1 under Magisk v20.1 / Android Pie.

https://ibb.co/xLBxDDV https://ibb.co/F6y1hcH

Confirmed working. Disabled AppList Mode in EdXposed Manager and enabled HiddenCore Module. Rebooted and passed SafetyNet in Magisk Manager.

However, Pokemon go won't be able to start up, throwing out the "unable to authenticate" error.

tupac55 commented 4 years ago

Has anyone tried the Hidden Core module in EdXposed? It is passing SafetyNet for me without any blacklisting or switching modes, just install and reboot.

For posterity, I am running EdXposed YAHFA 0.4.5.1. EdXposed Manager 4.5.1 under Magisk v20.1 / Android Pie.

https://ibb.co/xLBxDDV https://ibb.co/F6y1hcH

This module is making chrome app crashing again and again :(

wrongway213 commented 4 years ago

Has anyone tried the Hidden Core module in EdXposed? It is passing SafetyNet for me without any blacklisting or switching modes, just install and reboot. For posterity, I am running EdXposed YAHFA 0.4.5.1. EdXposed Manager 4.5.1 under Magisk v20.1 / Android Pie. https://ibb.co/xLBxDDV https://ibb.co/F6y1hcH

This module is making chrome app crashing again and again :(

Yeah, I can confirm this makes Chrome crash without fail unless I roll back to version 74. It works with Hidden Core Module on that version.

hoistedPetard commented 4 years ago

I did read the few writeups on XDA about it and agree caution is advisable, but it looks like it is not malicious and that it at least used to work as advertised.

If it is killing Chrome, that will be a deal breaker for a lot of people. Oh well, something will happen soon, it always does. :)

p1r473 commented 4 years ago

I did only the application list workaround and it's working for version "0.4.5.1_beta(4463) (YAHFA)" on my OP6T running stock 9.0.17 and Magisk Stable 20.1.

Here are more detailed instructions: Open EdXposed Manager Tap the menu icon on top left Tap settings. Scroll down to the bottom and toggle "App List Mode" Go back to main screen (back button or arrow at top left) Tap menu icon again Tap Application List Tap the toggle for "Google Play Services" Tap the toggle for "Google Play Store" Reboot phone Wait 1-2 minutes after reboot and device will pass.

I literally just did this on my phone so I can't say yet as to whether it works intermittently or not, but I can confirm it passes SafetyNet check in Magisk Manager and Pokemon GO now opens where before it wasn't.

Followed this and it did not work for me. Still failing Safetynet.

robbyoconnor commented 4 years ago

It works for me! Ensure you blacklist Pokemon Go in both Magisk Hide and EdXposed Manager.

robbyoconnor commented 4 years ago

So this is really weird, it will pass and then start failing on me randomly and then pass after I kill off the gms data dir and reboot

robbyoconnor commented 4 years ago

@ffsec -- It checked all of the packages within Google Play Services.

ecompton59 commented 4 years ago

and add magisk mod adb and fastboot Android ndk it stops random reboots and helps with edxposed

tupac55 commented 4 years ago

I found an other workaround that works better than this inconsistent " app list mode " workaround...

My workaround is simply go to TWRP and wipe cache and dalvik .. safety net is true and stay true without inconsistency until next reboot .. so every reboot have to wipe cache and dalvik to pass safety net until an other better workaround or a permanent fix is made

robbyoconnor commented 4 years ago

Works for me on Android 10 by just blacklisting via MagiskHide and EdXposed Manager. Also on A/B devices, there is no cache partition.

ai212983 commented 4 years ago

Does NOT works for me. Android 10, Riru Core 19.5, EdXposed 0.4.6.0_beta (YAHFA) with selinux fix (probably that fix itself is a problem)

robbyoconnor commented 4 years ago

Working fine for me. See this: https://forum.xda-developers.com/apps/magisk/magisk-google-pay-gms-17-1-22-pie-t3929950

Don't change it -- just setting the db read-only to the user, group and inaccessible entirely to the world (440) worked for me.

On 11/13/19 1:56 PM, Dimitri Fedorov wrote:

Does NOT works for me. Android 10, Riru Core 19.5, EdXposed 0.4.6.0_beta (YAHFA) with selinux fix

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/ElderDrivers/EdXposed/issues/386?email_source=notifications&email_token=AAAFUMEAVDKK53U73SQJZ43QTREVXA5CNFSM4JJOWDLKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOED7HZQI#issuecomment-553548993, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAAFUMBL5BVYG232H4WH7ETQTREVXANCNFSM4JJOWDLA.

Dreamerrrr commented 4 years ago

A few days ago I tried most of the fixes listed here and would swap between tripping and passing SafetyNet.

Today, I've done two things differently, and I haven't tripped SafetyNet yet with EdXposed + GravityBox + MinMinGuard + XPrivacyLua.

I updated this Magisk module (GPay-SQLite-Fix) and EdXposed Manager to 4.5.2.

I have Google Play Services, Google Play Store, Google Services Framework, and Carrier Services marked on EdXposed Black List and I do NOT have App List Mode enabled anymore.

I'll be watching my phone over the next few days to see if anything breaks.

EDIT: Over a week in. Still passing SafetyNet. Still certified in Play Store. Still have the ability to download apps like Netflix in Play Store. I forgot to mention I am also using the "SafetyPatch" Magisk module, but I was using that before I updated the GPay-SQLite-Fix module and would fail from time to time. Also using a custom kernel (ElementalX).

thippeswamydc commented 4 years ago

A few days ago I tried most of the fixes listed here and would swap between tripping and passing SafetyNet.

Today, I've done two things differently, and I haven't tripped SafetyNet yet with EdXposed + GravityBox + MinMinGuard + XPrivacyLua.

I updated this Magisk module (GPay-SQLite-Fix) and EdXposed Manager to 4.5.2.

I have Google Play Services, Google Play Store, Google Services Framework, and Carrier Services marked on EdXposed Black List and I do NOT have App List Mode enabled anymore.

I'll be watching my phone over the next few days to see if anything breaks.

Hi, Thank you, I tried all what u said and it worked for me.

gautamajay52 commented 4 years ago

I have found a module in edxposed named "HiddenCore Module'', this helped me to pass safety net without any workaround.

Try this.... If is it passing for you or not.

tupac55 commented 4 years ago

I have found a module in edxposed named "HiddenCore Module'', this helped me to pass safety net without any workaround.

Try this.... If is it passing for you or not.

This module as said before only trick and doesn't fully pass the safety net ( you can't download Netflix or use gpay with it ) more of that it makes chrome browser crash

gautamajay52 commented 4 years ago

I have found a module in edxposed named "HiddenCore Module'', this helped me to pass safety net without any workaround. Try this.... If is it passing for you or not.

This module as said before only trick and doesn't fully pass the safety net ( you can't download Netflix or use gpay with it ) more of that it makes chrome browser crash

No bro...it is all working Right now I am using this module along with GPay, Chrome, And other 4 different banking apps too. Sorry to say that I am not using netflix. But I am going to install, and tell u the result.

I have also flashed a magisk module - safety patch as before this bug this module is doing its job to pass the safety net. Now I have to use both for passing safety net.

cscomic commented 4 years ago

No any other module, just follow steps below I pass the safetynet:

  1. add "Google Play Service" , "Google Play Store", "Google Services Framework" into blacklist in edXposed Manager App.
  2. make sure the "Black/White list" option is on in "edXp Settings".
  3. reboot, then the "Basic Integrity" pass, and google pay, netflix, mhxr, mario run… can run
  4. for addition, get Magisk module "safety patch" can make "ctsProfile" pass , when Magisk's version is 18+
hoistedPetard commented 4 years ago

If anyone needs JUST Netflix, the Magisk module Libemcrypto Disable works fine with no other modules or blacklisting. This will not work for Pay though.

HiddenCore is hit and miss, it works about as well as sudohide, which is to say that it is slightly more effective than a rabbits foot.

piyoosh-singh commented 4 years ago

SafetyNet Failed

Device : raphelin Rom : MIUI 11, Android Q Using Magisk 20.1 Edxposed : 4.5.2

added "Google Play Service" , "Google Play Store", "Google Services Framework" into blacklist in edXposed Manager App.

Tried various alpha & canary built of sandhook & YAHFA. Still no success. Finally i have to remove Edxposed

ecompton59 commented 4 years ago

probably running different kernel is reason you're having issue with install smurf works and stop crashing with the adb and fastboot magisk mod it creats a wrapper script to point where adb file is located (magisk and mods are there)