[BUG] Safety net is tripped now!

[ghost]

Safety net is tripped now!

[VarunS2002]

Deactivating all modules is passing safetynet
Activating any module breaks it

[VarunS2002]

I'm using 0.4.5.1
What about you?

[wilsonhlacerda]

Yeah! Same bug here (but I've found workaround!)

Here:
Lineage OS 16 (Android 9)
Newest Official Magisk Canary:
20.2 (20102)
Manager 7.4.1 (255)
Manager Hidden
Newest EdXposed Manager v4.5.1
Newest Riru v19.5
Newest UNOFFICIAL EdXposed v0.4.6.0 beta (4471) SandHook (by Dark_Eyes_ at XDA Forum, to run with official Magisk)
Google Play Store v17.3.16

Lots of modules, including system wide XprivacyLua, Xposed Edge Pro,.....

SafetyNet completely broken in Magisk check. Both CTS and BasicIntegrity fail.

WORKAROUND: after turn on EdXposed Manager Black List feature and turn it on for Play Store, Play Services and Google Framework, SafetyNet becomes all green again! :) Try it!

Hope a fix. Thanks.

[VarunS2002]

Thank you so much dude the workaround worked
I tested it on the Latest Stable of Magisk and 0.4.5.1 Sandhook

[joxon]

Yeah! Same bug here (but I've found workaround!)

Here:
Lineage OS 16 (Android 9)
Newest Official Magisk Canary:
20.2 (20102)
Manager 7.4.1 (255)
Manager Hidden
Newest EdXposed Manager v4.5.1
Newest Riru v19.5
Newest UNOFFICIAL EdXposed v0.4.6.0 beta (4471) SandHook (by Dark_Eyes_ at XDA Forum, to run with official Magisk)
Google Play Store v17.3.16

Lots of modules, including system wide XprivacyLua, Xposed Edge Pro,.....

SafetyNet completely broken in Magisk check. Both CTS and BasicIntegrity fail.

WORKAROUND: after turn on EdXposed Manager Black List feature and turn it on for Play Store, Play Services and Google Framework, SafetyNet becomes all green again! :) Try it!

Hope a fix. Thanks.

Oneplus 7 Pro
AOSiP-9.0-Official-guacamole-20190913
Magisk Canary 20.2 (20102)
Magisk Manager 7.4.1 (255) Hidden
EdXposed Manager v4.5.1
Riru - Core v19.5
Riru - EdXposed v0.4.6.0 SandHook
Google Play Store 17.3.16
Google Play Services 19.5.30

Thank you for your solution but it doesn't work though. Am I missing something? I opened EdXposed Manager then ->Application List -> toggle on "Google Play Store", "Google Play Services" (I have not found any "Google framework" though).

Update: open EdXposed Manager -> Settings -> toggle on "App List Mode" -> Application List -> toggle on "Google Play Store", "Google Play Services" -> reboot -> safetynet passed. Yay!

[blackcatdev]

Unfortunately I had to check also "App List Mode" in Exposed Manager options to pass SafetyNet.

[MlgmXyysd]

Yeah! Same bug here (but I've found workaround!)
Here:
Lineage OS 16 (Android 9)
Newest Official Magisk Canary:
20.2 (20102)
Manager 7.4.1 (255)
Manager Hidden
Newest EdXposed Manager v4.5.1
Newest Riru v19.5
Newest UNOFFICIAL EdXposed v0.4.6.0 beta (4471) SandHook (by Dark_Eyes_ at XDA Forum, to run with official Magisk)
Google Play Store v17.3.16
Lots of modules, including system wide XprivacyLua, Xposed Edge Pro,.....
SafetyNet completely broken in Magisk check. Both CTS and BasicIntegrity fail.
WORKAROUND: after turn on EdXposed Manager Black List feature and turn it on for Play Store, Play Services and Google Framework, SafetyNet becomes all green again! :) Try it!
Hope a fix. Thanks.

Oneplus 7 Pro
AOSiP-9.0-Official-guacamole-20190913
Magisk Canary 20.2 (20102)
Magisk Manager 7.4.1 (255) Hidden
EdXposed Manager v4.5.1
Riru - Core v19.5
Riru - EdXposed v0.4.6.0 SandHook
Google Play Store 17.3.16
Google Play Services 19.5.30

Thank you for your solution but it doesn't work though. Am I missing something? I opened EdXposed Manager then ->Application List -> toggle on "Google Play Store", "Google Play Services" (I have not found any "Google framework" though).

Update: open EdXposed Manager -> Settings -> toggle on "App List Mode" -> Application List -> toggle on "Google Play Store", "Google Play Services" -> reboot -> safetynet passed. Yay!

oh...only pass basicIntegrity on my phone...

[blackcatdev]

Yeah! Same bug here (but I've found workaround!)
Here:
Lineage OS 16 (Android 9)
Newest Official Magisk Canary:
20.2 (20102)
Manager 7.4.1 (255)
Manager Hidden
Newest EdXposed Manager v4.5.1
Newest Riru v19.5
Newest UNOFFICIAL EdXposed v0.4.6.0 beta (4471) SandHook (by Dark_Eyes_ at XDA Forum, to run with official Magisk)
Google Play Store v17.3.16
Lots of modules, including system wide XprivacyLua, Xposed Edge Pro,.....
SafetyNet completely broken in Magisk check. Both CTS and BasicIntegrity fail.
WORKAROUND: after turn on EdXposed Manager Black List feature and turn it on for Play Store, Play Services and Google Framework, SafetyNet becomes all green again! :) Try it!
Hope a fix. Thanks.

Oneplus 7 Pro
AOSiP-9.0-Official-guacamole-20190913
Magisk Canary 20.2 (20102)
Magisk Manager 7.4.1 (255) Hidden
EdXposed Manager v4.5.1
Riru - Core v19.5
Riru - EdXposed v0.4.6.0 SandHook
Google Play Store 17.3.16
Google Play Services 19.5.30
Thank you for your solution but it doesn't work though. Am I missing something? I opened EdXposed Manager then ->Application List -> toggle on "Google Play Store", "Google Play Services" (I have not found any "Google framework" though).
Update: open EdXposed Manager -> Settings -> toggle on "App List Mode" -> Application List -> toggle on "Google Play Store", "Google Play Services" -> reboot -> safetynet passed. Yay!

oh...only pass basicIntegrity on my phone...

Have you tried SafetyPatch or MagiskHide Props Config module?

[cscomic]

Same problem here, after Google play service auto-update last Sunday. It will come ok when I only disable edXposed.

Sony Xperia XZ1
Android 8.0
Magisk 20.1
Riru 19.5
Riru - edXposed 0.4.5.1

solosu's Magisk will cause boot loop, so I haven't test 0.4.6 yet

[kgr17]

WORKAROUND: after turn on EdXposed Manager Black List feature and turn it on for Play Store, Play Services and Google Framework, SafetyNet becomes all green again! :) Try it!

Can confirm it works! Thanks!

[tupac55]

Can confirm this bug and also the working workaround.. but the workaround make sudohide not working anymore :(

Patched magisk with the latest yahfa 4471
Xiaomi Mi9T miui 9.10.24 China beta / Android 10

[wilsonhlacerda]

Can confirm this bug and also the working workaround.. but the workaround make sudohide not working anymore :(

Patched magisk with the latest yahfa 4471
Xiaomi Mi9T miui 9.10.24 China beta / Android 10

Sudohide stops completely? Or just don't hide apps to Play Store (and Google Services, Framework) anymore?

Probably it is failing only to hide app updates on Play Store, isn't it? To hide other generic app A from B I believe it should work, although I haven't tested it.

[tupac55]

Can confirm this bug and also the working workaround.. but the workaround make sudohide not working anymore :(
Patched magisk with the latest yahfa 4471
Xiaomi Mi9T miui 9.10.24 China beta / Android 10

Sudohide stops completely? Or just don't hide apps to Play Store (and Google Services, Framework) anymore?

Probably it is failing only to hide app updates on Play Store, isn't it? To hide other generic app A from B I believe it should work, although I haven't tested it.

It fails to hide..., if I don't enable Googe play store on the app list to make sudohide working, safety net become false after a while (it first says true)

[Senliast]

Same problem, SafetyNet now detects EdXposed.
The workaround is working, but it would be nice if a permanent solution would be found in the next time)

[SteveYoungs]

The workaround works in that Magisk Manager will report safetynet passes. The workaround doesn't work in that Google Pay won't work.

Disabling the EdXposed Magisk module is the only way I've found that'll let me use Google Pay.

[OmarNamis]

@wilsonhlacerda I can confirm this.

[ghost]

The workaround is a hit and miss. Sometimes it passes, sometimes it fails a few seconds later. A permanent solution is needed.

[sipe]

Update: open EdXposed Manager -> Settings -> toggle on "App List Mode" -> Application List -> toggle on "Google Play Store", "Google Play Services" -> reboot -> safetynet passed. Yay!

Hello all,

HTC U11
Stock Android 9 3.23.709.6
Magisk 20.2 (20100)
Manager 7.4.0 (253)
EdXposed Manager v4.5.1 4463 YAHFA
Riru v19.5
Google Play Store v17.3.16
Google Play Services v19.5.30

Confirmed GPay working workaround, Magisk safetynet also passes, selected Google Play services and Google Services Framework.

Thank you.

[ghost]

Ok, the workaround works when EdXposed Manager is open in the background. I tried deoptimizing battery for the Manager, and now SafetyNet works.

EDIT: Never mind. Still hit and miss.

[chaoscalm]

We can still use sudohide, so far I added to blacklist only the services and framework; I also tested with a old version of SandHook with success, I can confirm that "App List Mode" enabled seems essential in order to success.

[shmykelsa]

For me SafetyNet passing is quite interesting. After enabling EdXposed + modules, upon every reboot the first check of Safetynet within Magisk Manager will fail in both profiles. Second check will report all trues. Checking with other apps will report always true. But then leaving the device for some time will result in Magisk reporting safetynet false again. I assume that Magisk Manager is bugged in SafetyNet check?

EDIT: No, it's not just Magisk. Even with other Safetynet checkers, randomly Safetynet fails, but then the moment very after it passes fine.

[saqie1393]

open EdXposed Manager -> Settings -> toggle on "App List Mode" ->

i am not find these setting ?

[kgr17]

open EdXposed Manager -> Settings -> toggle on "App List Mode" ->

i am not find these setting ?

I use the Edxposed Installer app and it's in menu> edxp settings> black list (toggle). Then reboot and go to menu> black list

[p1r473]

Workaround is not working for me. Can someone post clearer instructions?

[DU1R]

I did only the application list workaround and it's working for version "0.4.5.1_beta(4463) (YAHFA)" on my OP6T running stock 9.0.17 and Magisk Stable 20.1.

Here are more detailed instructions:
Open EdXposed Manager
Tap the menu icon on top left
Tap settings.
Scroll down to the bottom and toggle "App List Mode"
Go back to main screen (back button or arrow at top left)
Tap menu icon again
Tap Application List
Tap the toggle for "Google Play Services"
Tap the toggle for "Google Play Store"
Reboot phone
Wait 1-2 minutes after reboot and device will pass.

I literally just did this on my phone so I can't say yet as to whether it works intermittently or not, but I can confirm it passes SafetyNet check in Magisk Manager and Pokemon GO now opens where before it wasn't.

[zioukovsky]

safetynet works but snapfreedom do nothing :/ lets see how long I will wait for ban :D

[Senliast]

safetynet works but snapfreedom do nothing :/ lets see how long I will wait for ban :D

Are you sure that you do not have SC alpha?
Deselect and select snapfreedom in EdXposed manager, reboot device.

P.S. Snapchat doesn't ban for failing SafetyNet

[hoistedPetard]

Has anyone tried the Hidden Core module in EdXposed? It is passing SafetyNet for me without any blacklisting or switching modes, just install and reboot.

For posterity, I am running EdXposed YAHFA 0.4.5.1. EdXposed Manager 4.5.1 under Magisk v20.1 / Android Pie.

https://ibb.co/xLBxDDV
https://ibb.co/F6y1hcH

[nritech]

All is working good for me but decided to not use root anymore on phone. But I still use root apps on Taichi

[iamehsangh]

i added Store,Framework,Services to Blacklist, Still all false, Only way is HiddenCore Module in Xposed...
i dont know why i getting some lags with this module!!

[blackcatdev]

There's new version of Riru Core in Magisk that isn't triggering SafetyNet.

[TuRDMaN]

There's new version of Riru Core in Magisk that isn't triggering SafetyNet.

I installed Riru Core v21.1, and I am passing SafetyNet now. I saw there is a new Canary Riru EdXposed module (v0.5.0.0 4548), so I installed that.... and I am getting "EdXposed Framework is installed, but not active." I tried to reverting to the previous Canary version, but get the same error.

So I'm guessing we have to wait for a new EdXposed update that works with Riru Core v21.1?

Edit: Reinstalling EdXposed Manager got everything working again

[MikePerreman]

Hello all, just wanted to add my 2c:
These modules let me install vanced (root) and pass safteynet with edxpoded running. If it's worth anything, I'm running MSM Xtended (Android 10) on a OnePlus5t

[JasonKhew96]

Notes:

1. Make sure your device passed safetynet before installing Magisk.
2. Turn on magisk hide after installing Magisk.
3. If your device can only pass basicIntegrity, get Magiskhide Props Config and get a new fingerprint.
4. Install Riru - Core v21.1 or later version, Riru - EdXposed (4546) and latest EdXposed Manager
5. Turn on Applist / Black/Whitelist mode and passed safetynet switch, reboot.
6. Check safetynet in Magisk Manager (check multiple time, it's buggy), if all red, clear gsf data (will break all fcm/gcm notifications).

FFS, don't use HiddenCore module, it fakes the response from safetynet response only, and it only works on magisk manager(?)

[Nowaker]

clear gsf data

What's gsf and how do I clear its data?

[kotori2]

@Nowaker Google Service Framework

[Nowaker]

Cool, and how to clear its data?

[Nowaker]

I've found something. On OnePlus 6: Settings > Apps > See all $number apps > ... > Show System > Google Services Framework > Storage & cache > Clear cache and Clear storage.

I've followed all steps, except (3): If your device can only pass basicIntegrity, get Magiskhide Props Config and get a new fingerprint. After installing Riru Core and EdXposed, my device passes neither of the checks: ctsProfile: false, basicIntegrity: false. In this case, what should I do?

[EkriirkE]

I'd like to add that while clearing Play Services restores safety net, so does simply rebooting and you don't lose your Google Pay cards. Even the Soft Reboot restores it. Hidden Core always shows green, and app updates will randomly trip it. But I just soft reboot, verity with safety check in magisk, and Google Pay works again (and other things like pokemon go). Sometimes you need to wait a couple minutes and click "check Phone" a few times before Pay says the phone is valid and no root is detectd

[nritech]

Has anyone tried new magisk? Crap ui and drains battery

[BobbyWibowo]

After installing Riru Core and EdXposed, my device passes neither of the checks: ctsProfile: false, basicIntegrity: false. In this case, what should I do?

Did you have any progress with this, mate?

My bad, forgot to enable App List mode in EdXposed to blacklist GSF. After clearing data & cache of GSF, Play Services and Play Store, then rebooting, everything worked as they should.

[gusarov]

Hi guys, finally this worked for me! The key point was - an upgrade to Canary version of Riru - EdExposed.
Today latest official version is 0.4.6.2 (4529) and Safety Net is red no matter what I'm doing.
For those who struggling: All you need to do is:

1. Open EdExposed Manager, Canary Tab: Download latest here (today it is 4564) to your Downloads folder.
2. Open Magisk Manager, Modules, "Install From Storage", and select the ZIP you just donloaded
   Install & reboot.

[ayush5harma]

Hi guys, finally this worked for me! The key point was - an upgrade to Canary version of Riru - EdExposed.
Today latest official version is 0.4.6.2 (4529) and Safety Net is red no matter what I'm doing.
For those who struggling: All you need to do is:

1. Open EdExposed Manager, Canary Tab: Download latest here (today it is 4564) to your Downloads folder.
2. Open Magisk Manager, Modules, "Install From Storage", and select the ZIP you just donloaded
   Install & reboot.

One shouldn't be using edxposed build from android_r branch on android q, it also leads to safetynet issue.The version 0.4.6.4 (4563) is the latest build for those in android Q and can be downloaded from :(https://ci.appveyor.com/project/ElderDrivers/edxposed/builds/35441002/artifacts)

You can always check for these builds from AppVeyor build history and download them from the artifacts tab
(https://ci.appveyor.com/project/ElderDrivers/edxposed/history)

[Raslin777]

Safetynet tripped again. Using v0.5.0.6 sandhook, Edxposed Hide, Edxposed manager v4.6.0pre and Magisk 20.4, Magisk Hide, Magiskhide props 5.3.6, Riru core v21.3. Just started yesterday didn't change anything on phone. Didn't have any issues before that passing safetynet. If I disable Edxposed in Magisk it passes again.

[robbyoconnor]

This is going to be a game of cat and mouse. It will fail. The tricks on this issue will likely work.

…

On 10/29/20 8:53 PM, Raslin777 wrote: Safetynet tripped again. Using v0.5.0.6 sandhook, Edxposed Hide, Edxposed manager v4.6.0pre and Magisk 20.4, Magisk Hide, Magiskhide props 5.3.6, Riru core v21.3. Just started yesterday didn't change anything on phone. Didn't have any issues before that. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#386 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAAFUME46HBWSYSBWBTK3VLSNIE67ANCNFSM4JJOWDLA>.

[shenzhigang]

Is it necessary to care about SafetyNet in China, when SafetyNet depends on GMS which is not available in China?

[google-mirror]

Is it necessary to care about SafetyNet in China, when SafetyNet depends on GMS which is not available in China?

Huawei's HMS

[Raslin777]

decodedJWTPayload json:{"nonce":"1jV/tfIHKP8iByQ3Bfz2jetTu2QY6mWUgtt7p3JvRaA=","timestampMs":1604365258086,"ctsProfileMatch":false,"apkCertificateDigestSha256":[],"basicIntegrity":false,"advice":"RESTORE_TO_FACTORY_ROM","evaluationType":"BASIC"}

[Raslin777]

I thought basic always passes. It's hardware backed that fails
https://www.didgeridoohan.com/magisk/MagiskHideSafetyNet

[ghost]

Confirmed that SafetyNet is tripped by EdXposed 4564 on Magisk 21.0. Disable EdXposed & SafetyNet check will pass. Device is OnePlus 8 Pro on OxygenOS 11.

[ondrejdolezal93]

Hello, is there any way to pass safetynet these days with xposed modules enabled?

[google-mirror]

Hello, is there any way to pass safetynet these days with xposed modules enabled?

No way.

[Raslin777]

But it's not for me

[ayush5harma]

Hello, is there any way to pass safetynet these days with xposed modules enabled?

enable riru hide( by creating empty enable_hide file at /data/adb/riru/ ) and then use applist mode in edxposed manager and blacklist playstore ,playservices ,carrier services,and google service framework

[EkriirkE]

enable riru hide( by creating empty enable_hide file at /data/adb/riru/ ) and then use applist mode in edxposed manager and blacklist playstore ,playservices ,carrier services,and google service framework

This worked, but why is it a "hidden" setting?

[ayush5harma]

enable riru hide( by creating empty enable_hide file at /data/adb/riru/ ) and then use applist mode in edxposed manager and blacklist playstore ,playservices ,carrier services,and google service framework

This worked, but why is it a "hidden" setting?

hide can be toggled by individual modules (disabled by default).It leaves it to the module since this commit so its edxposed that should toggle riru hide on when applist mode is used.

Anyways it will only make safetynet pass for those whose safetynet started failing after enabling modules in edxposed which makes use of riru , but for those, whose safetynet always failed since rooting, this won't work either.

In short it's like for those whom it will work, can check out by trying to enable it by creating empty enable_hide file at /data/adb/riru/

[kotori2]

Nah. EdXposed does enable hide by default, but enable_hide is a global switch, so you should create that file so that hide can work. Ayush Sharma <notifications@github.com> 于 2020年12月4日周五 16:32写道：

…

enable riru hide( by creating empty enable_hide file at /data/adb/riru/ ) and then use applist mode in edxposed manager and blacklist playstore ,playservices ,carrier services,and google service framework This worked, but why is it a "hidden" setting? hide can be toggled by individual modules (disabled by default) <https://github.com/RikkaApps/Riru/commit/dd993324e9d6ce3934cf710dd8544312fa8068ff>.It leaves it to the module since this commit so its Edxposed that should toggle riru hide on by itself when applist mode is used. But anyways it will only make safetynet pass for those whose safetynet started failing after enabling modules in edxposed which makes use of riru , but for those, whose safetynet always failed since rooting, this won't work either.The magisk devs also disabled magisk hide by default in the manager because it doesn't work for all these days. In short it's like For those whom it will work, can check out by trying to enable it. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#386 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEGYNSOZNKRIHZJVXZIEI63STCNAFANCNFSM4JJOWDLA> .