kdrag0n / safetynet-fix

Google SafetyNet attestation workarounds for Magisk
MIT License
6.19k stars 324 forks source link

SafetyNet failed [ctsProfile] #78

Closed ghost closed 3 years ago

ghost commented 3 years ago

Google released a fix tonight As I understand it, in order to pass CTSprofile, you need certification on the TPM module

Catfriend1 commented 3 years ago

I'm seeing cts profile failed on pixelexperience since today, without the kdragon mod installed. It doesn't even work when installing v1.2.

mazzz1y commented 3 years ago

https://telegra.ph/Pass-Safetynet-on-Rooted-Device-09-02-2

This instruction helped me -- disallow tracking for google play services in XPrivacyLua and clear data. Please check

AndreasAZiegler commented 3 years ago

@dmirubtsov Thanks for the hint, but the guide doesn't work for my Nokia 6.1 with LineageOS 18.1

mazzz1y commented 3 years ago

@AndreasAZiegler I tested it on my Note9 with LineageOS 18.1 and it works

Please double check the steps. Need to add play services to both lsp and xprivacylua -- easy to miss it

Also I use 'google pixel 2' fingerprint.

Maybe something is different on your device. If it don't work let's check comments from another guys

AnyoeDove commented 3 years ago

@dmirubtsov Thanks! It works on my Pixel 3! Not sure how or why tho haha.

Use tracking (fake user agent for WebView only, Build properties, network/SIM country/operator)

AndreasAZiegler commented 3 years ago

@dmirubtsov Thanks for your help. I did not set up https://github.com/Magisk-Modules-Repo/MagiskHidePropsConf properly. It is now working.

prochanunez17 commented 3 years ago

@dmirubtsov Worked on my Pixel 4a 5G running LineageOS 18.1 thank you :)

Catfriend1 commented 3 years ago

The above posted telegraph solution worked for me. Thosw steps were enough. I didn't trust the attached zip download, so I went into magisk's module tab with the repository and grabbed lsposed and riru from there. Got the xprivacylua app directly from fdroid.

-- Open Magisk and Flash Riru Core, But do not reboot.

 -- Go back and flash Lsposed in magisk & reboot your device. 

 -- Now install XPrivacyLua apk

 -- Open Lsposed and go to modules section and choose XPrivacyLua from there.

 -- Select system framework, Settings storage and Google Play services there.(Uncheck the system apps from hide section settings for Play services to show up)

-- Reboot your device

 -- Open XPrivacyLua and search google play services, click drop down menu in left of play services and tick 'use tracking' as shown in the screenshot.

-- Now clear play services and play store data through your phone's settings. 

Now gpay is working again. thanks!

arifpedia commented 3 years ago

@SBence : I think so. I have deleted my comment

zzahkaboom24 commented 3 years ago

@arifpedia yep, i tried 6 checker apps including the safetynet checker app and magisk, all 5 of them passed except the one you mentioned

R4wd0g commented 3 years ago

I reproduced the @dmirubtsov tip and got success. Additionally, I installed this magisk module to make Google pay work: GPay-SQLite-Fix https://github.com/stylemessiah/GPay-SQLite-Fix

mazzz1y commented 3 years ago

@R4wd0g it works on my Note9 without that

Maybe it depends on device/os

non-bin commented 3 years ago

The XPrivacyLua method didn't work for me :(

Pixel 4a (tried stock & lineage)

BlueBartender commented 3 years ago

I believe the bug is in that SafetyNet checker app. I've tried two others and they both reported a SafetyNet pass.

Agreed. The app I was using was failing because it "can't access google play services". After trying and retrying the Lua settings, I finally tried a couple other apps, and all was well. Working on Pixel 5.

CodeCracker-oss commented 3 years ago

@Catfriend1 Works flawlessly on my pixel 4, safteynet now success once again. Havent tested yet though, but I believe this safteynet-fix module still needs to be installed and enabled.

Thank you

NoXeDev commented 3 years ago

There is youtube video. That work for me : https://www.youtube.com/watch?v=I9A3yxAi-Ww

Catfriend1 commented 3 years ago

@dhammel I did not install the safety net fix module and it works.

CodeCracker-oss commented 3 years ago

@Catfriend1 Oh, ok. Then im going to later see what part of the process is actually bypassing safteynet, it looked like as part of xuaprivacylua that it was restricting tracking, figured the wrest was handled by this module, maybe i was wrong. Ill disable it later, reboot and re-run safteynet test to see my results.

I noticed that after tris trick, when opening GPay, it showed message that im not using account (my e-mail), and told me to confirm, I clicked confirm and noticed my 5 Credit Cards I had added, removed, from GPay as well as power menu. They werent removed from power menu until after opening GPay. Thats a bit weird, maybe false or empty tracking data being reported to Google Play services from xprivacylua caused this? lol

This cat and mouse game is still ongoing it seems, for roughly 8 months this module always worked, hopefully theres a fix developer can come up with for this module.

huxley101 commented 3 years ago

You are all such beautiful people helping to solve these problems. Gpay is back in business now after I followed the instructions above. (I also had to re add my cards but it looks happy now) I have no idea if running the xprivacy etc will slow my phone down but root is absolutely essential for a developer and I don't see why google should be punishing me when there really is no risk to security.

Pharaoh2k commented 3 years ago

It's a bit funny that the solution/workaround posted here actually got nothing to do with the excellent @kdrag0n module and works even without it installed. Hopefully @kdrag0n can upgrade safetynet-fix to make this XPrivacyLua solution unnecessary.

ghost commented 3 years ago

Hopefully @kdrag0n can upgrade safetynet-fix to make this XPrivacyLua solution unnecessary.

Adding model props to kdrag0n's fix makes it work without any need for XPrivacyLua.

qqUber commented 3 years ago

@

I reproduced the @dmirubtsov tip and got success. Additionally, I installed this magisk module to make Google pay work: GPay-SQLite-Fix https://github.com/stylemessiah/GPay-SQLite-Fix

Thx bro, it's work on mi9t with latest pixel exp ui A11

bongochong commented 3 years ago

Using MagiskHide Props Config to delete the ro.product.model prop was the only method that fixed this for me. Worked like a charm. I imagine that it could cause issues on certain devices, but it was much less time consuming than the method involving Riru, and it actually worked, unlike the safetynet-fix module uploaded by Displax.

Edit: I should note that this was done on a Moto G7 Power running the latest release of Resurrection Remix (based on LineageOS).

non-bin commented 3 years ago

@bryce-lynch:

Adding model props to kdrag0n's fix makes it work without any need for XPrivacyLua.

This worked for my P4a with lineage!

guoyanhuyun commented 3 years ago

https://telegra.ph/Pass-Safetynet-on-Rooted-Device-09-02-2

This instruction helped me -- disallow tracking for google play services in XPrivacyLua and clear data. Please check

worked on Pixel 3 Android 11

Conan179 commented 3 years ago

disallow tracking for google play services in XPrivacyLua and clear data. Please check

Working on note 20 ultra 5g and note 9. I am more surprised that it works, that it is so eager to pass the check ...

Guroff1974 commented 3 years ago

safetynet-fix-v1.2.0-MOD.zip by Displax

Abolfazl commented 3 years ago

safetynet-fix-v1.2.0-MOD.zip

Just an FYI, this zip file comes directly from https://forum.xda-developers.com/t/magisk-general-support-discussion.3432382/post-85573473 (MD5 hashes match for the files). I just tested it on my Pixel 5 and was able to have SafetyNet pass without having to install riru, lsposed, or XPrivacyLua.

gordboy commented 3 years ago

The method by @bongochong a few posts back worked great for me.

  1. Install USNF and MHPC modules
  2. reboot and run props in a root shell
  3. choose a fingerprint
  4. delete the ro.product.model key
  5. reboot

Of course, Google will break everything again just when we thought all was well ... :)

Samsung Galaxy Tab S5e (gts4lvwifi) LOS 18.1

Catfriend1 commented 3 years ago

Does v2.0.0 also fix this issue? @kdrag0n

Abuzarar commented 3 years ago

I used this but it is not working

kdrag0n commented 3 years ago

Fixed in v2.1.0 without affecting UX or breaking device-specific features.

Abuzarar commented 3 years ago

It is not downloading give a gmail link please

Catfriend1 commented 3 years ago

Download costs money - will take two days of consideration

stamepicmorg commented 3 years ago

give a gmail link please

or you can support developer and buy preview-version with 2 bucks

ghost commented 3 years ago

Fixed in v2.1.0 without affecting UX or breaking device-specific features.

Is there an ETA when 2.1.0 leaves preview? Not everybody (including myself) can subscribe but would still be interested in the fix.