kdrag0n / safetynet-fix

Google SafetyNet attestation workarounds for Magisk
MIT License
6.19k stars 324 forks source link

Does not passes CTS profile match in android 12 #187

Closed crossdefalt closed 2 years ago

crossdefalt commented 2 years ago

After successfully installing latest module in magisk these are the output of SafetyNet test Safety Net Request success Response signature validation success Basic Integrity success CTS profile match fail

Attorelle commented 2 years ago

Try to use "prop spoofer" to change yours fingerprint, etc.

brightdroid commented 2 years ago

I've the same problem with latest OnePlus 8T version KB2003_11_C.20

ruszok commented 2 years ago

I've the same problem with latest OnePlus 8T version KB2003_11_C.20

Same. Screenshot_2022-05-30-21-29-33-76_9492aa3750dca76abb7c25b39a5f1e8e Screenshot_2022-05-30-22-37-13-05_4aae5e5c7232b4014d16720d2baa6855

idanny76 commented 2 years ago

Any fix yet?

ruszok commented 2 years ago

Temporary fix: IMG_20220602_224457 Screenshot_2022-06-02-22-50-36-92_0ecf870e1d5390b9ac21ebc76f00749d Screenshot_2022-06-02-22-53-35-89_84d3000e3f4017145260f7618db1d683

qriozum commented 2 years ago

@ruszok

Colleague @rori999 for the OP8PRO model checked Fingerprint from the "10" and "11" versions and they did not work, despite the change in "Magiskhide" still did not undergo the test "CTS Profiles Matched".

On your screenshot, what is the module marked as the third, is it necessary?

After changing Fingerprint in "Magiskhide", will the system be updated by the official channel via OTA?

ruszok commented 2 years ago

1, 2 - for safetynet (after that safetynet works). 3 - it's necessary for fingerprint reader.

qriozum commented 2 years ago

1, 2 - dla safetynet (po tym safetynet działa). 3 - jest niezbędny dla czytnika linii papilarnych.

@Ruszok - for a fingerprint scanner, "SafetyNet -Fix" is enough, but in the V2.3.0 version.

Can you answer my question related to OTA updates after changing Fingerprint in "Magiskhide"?

ruszok commented 2 years ago

In c20 fingerprint reader works after safetynet 2.3.0 (or 2.2.1 with mod) but safetynet fail. If change device fingerprint by magiskhide props safetynet passed but fingerprint reader doesn't work. So must install ColorOS module - then fingerprint reader works fine.

I can't update OTA incremental after magisk. OTA full works - if there is full package.

qriozum commented 2 years ago

In c20 fingerprint reader works after safetynet 2.3.0 (or 2.2.1 with mod) but safetynet fail. If change device fingerprint by magiskhide props safetynet passed but fingerprint reader doesn't work. So must install ColorOS module - then fingerprint reader works fine.

I can't update OTA incremental after magisk. OTA full works - if there is full package.

@ruszok I understand now, thanks for the clarification.

You're right, after root (via Magisk) incremental OTAs never worked, you have to wait for the full OTA (full ROM) in that case.

idanny76 commented 2 years ago

In c20 fingerprint reader works after safetynet 2.3.0 (or 2.2.1 with mod) but safetynet fail. If change device fingerprint by magiskhide props safetynet passed but fingerprint reader doesn't work. So must install ColorOS module - then fingerprint reader works fine.

I can't update OTA incremental after magisk. OTA full works - if there is full package.

@ruszok I understand now, thanks for the clarification.

You're right, after root (via Magisk) incremental OTAs never worked, you have to wait for the full OTA (full ROM) in that case.

I have updated incremental with magisk for a while now. What I do is in Magisk.... I select Uninstall Magisk and Restore Images. After that...... I go to the incremental OTA update and install. When the installation finishes and ask for a reboot, I go back to Magisk, select install on inactive slot and reboot.

ruszok commented 2 years ago

Right. It is possible like that. But I don't remember - magisk settings are restored after that?

idanny76 commented 2 years ago

Right. It is possible like that. But I don't remember - magisk settings are restored after that?

Yes, everything gets restored with magisk. You do not need to reinstall or configure any settings. Everything in Magisk is saved and transferred to the new slot. It works exactly as if you were installing the full OTA and then going into magisk and installing in inactive slot. The only extra step for incremental updates is restoring boot images. Because for a full OTA doesn't care about boot img, but incremental does.

ruszok commented 2 years ago

Ok. So I will try when will be OTA incremental.

If install full package I also need to reinstall magisk (option: after OTA). Without that lost magisk - do it's same in both cases right? Or I misunderstand something?

idanny76 commented 2 years ago

Ok. So I will try when will be OTA incremental.

If install full package I also need to reinstall magisk (option: after OTA). Without that lost magisk - do it's same in both cases right? Or I misunderstand something?

When you install full OTA, you still need to go into magisk before reboot to install in inactive slot. If you don't, you have to obtain boot.img and root again. When is incremental.... If you don't uninstall Magisk to restore boot img... It will fail. When I say uninstall Magisk is doing a restore boot images and not a complete uninstall. Once you restore images, it will allow you to install incremental and then before reboot install magisk to inactive slot.

ruszok commented 2 years ago

Understood. Will try. Thanks.

alfredonodo commented 2 years ago

1, 2 - for safetynet (after that safetynet works). 3 - it's necessary for fingerprint reader.

I tried, but it doesn't work for me. I only have microG instead of Google Services. Could this be the problem? If so, is there a way around it? Thanks

Vladi69 commented 2 years ago

Great solution! Finally Gpay working fine (again) on my OP8T with A12

Zibri commented 2 years ago

I have basic integrity pass and cts fail with original stock rom and only the bootloader unlocked. (on YASNAC) On play integrity checker (which uses the new API) I have red crosses on meet_device_integrity and meets strong integrity but a green on meets basic integrity. On a clean phone wiped and factory restored. (but with unlocked bootloader)

SsNiPeR1 commented 1 year ago

any android 13 workaround? cus i did all the following previously on a11 & a12 and everything worked, but android 13 for some reason does not work

Zibri commented 1 year ago

with the latest magisk delta it passes cts but only BASIC... I really wonder if there is a way to make it pass completely..

yyehhyyaa commented 1 year ago

Screenshot_20230821-152458_Yet Another SafetyNet Attestation Checker Any solution?

SsNiPeR1 commented 1 year ago

guys google the safetynet fix MOD, it works for me

alfredonodo commented 1 year ago

Screenshot_20230821-152458_Yet Another SafetyNet Attestation Checker Any solution? You can try to follow this.

idanny76 commented 1 year ago

Screenshot_20230821-152458_Yet Another SafetyNet Attestation Checker Any solution? You can try to follow this.

I am using this safetynet mod and it's working for me. https://github.com/Displax/safetynet-fix