How i can bypass this
TEE BROKEN ?
Unlocked BL AND ROOTED
All hided but still this TEE BROKEN
Same question mine
TEE (or Trusted Execution Environment) makes hiding root impossible, BUT some Magisk modules manage to break connection with TEE, so the device will fallback to basic methods of detecting root, so you can hide Magisk, Zygisk etc.. You can't hide that TEE is broken, but thanks to this "breaker" you can hide all your rooty things.
oliyase said:
TEE (or Trusted Execution Environment) makes hiding root impossible, BUT some Magisk modules manage to break connection with TEE, so the device will fallback to basic methods of detecting root, so you can hide Magisk, Zygisk etc.. You can't hide that TEE is broken, but thanks to this "breaker" you can hide all your rooty things.
Click to expand...
Click to collapse
Where can I download that "Breaker"?
ShinXhua said:
Where can I download that "Breaker"?
Click to expand...
Click to collapse
Just search for Displax's "Universal SafetyNet Fix"
GitHub - Displax/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
Google SafetyNet attestation workarounds for Magisk - GitHub - Displax/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
github.com
oliyase said:
Just search for Displax's "Universal SafetyNet Fix"
GitHub - Displax/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
Google SafetyNet attestation workarounds for Magisk - GitHub - Displax/safetynet-fix: Google SafetyNet attestation workarounds for Magisk
github.com
Click to expand...
Click to collapse
I have that installed on my Magisk Moduel,,
But the "Tee broken" is not fixed.
SafetyNet don't help to fix "Tee broken"
Can you contact me via telegram?
I want to talk more but not here (@Hasan288s)
Related
How to safety net pass on magisk 13.3 on latest beta rom miui 9 7.8.10
Universal SafetyNet Fix
follow these steps..
go to magisk menu : downloads
search : Universal SafetyNet Fix (v1.10.1)
click downloads (reboot if nessasary)
in main menu -> Tap to start SafetyNet check
Good luck..
Hi,
This guide help you to find a correct configuration and make environment for installing EdXposed and pass SafetyNet (and more) on a official Nord rom (tested on my EU 10.5.8)
All apps pass SafetyNet, Xposed and Magisk test (bank app, tv app, pogo, mario kart, ...)
Code:
ADVICE
This method need to put SELinux in permissive mode, it's no safe for your phone security..
But almost years, all my phone is in permissive mode, no problems ever for my.
Use at your risk!
Instructions :
-Install last official android 10 version for you device
-Root your devices (follow this guide)
-(Optional) Flash TWRP Recovery with fastboot in recovery partition
-Install/upgrade Magisk/Magisk Manager in the last stable version
-Reboot
-In Magisk setting tab, disable and enable "magisk hide" switch
-Install busybox app (don't open now) (my app is by Stericson, i suppose work on other busybox app)
-Go to Magisk manager and download following module :
. BusyBox for android NDK
. App Systemizer
. Magisk for recovery (mm) (only if you have flashed TWRP)
. Debloater (only if you need to debloat app per app your phone)
. Active systemless host in Magisk options (if you need AdAway)
. Flash youtube vanced with magisk if you need vanced (install root method doesn't work for me)
-Reboot
-Check if BusyBox (1.31.1. osm0sis) is installed on /system/xbin on your BusyBox app companion
-Open terminal and tip (once at once):
Code:
su
systemize
s
c
-Create a new file called "08setperm" in /data/adb/post-fs-data.d
Put this code inside:
Code:
#!/system/sh
setenforce 0
-Install latest Riru Core in magisk manager.
-Install EdXposed Manager
-Reboot
-Go to EdXposed Manager and install the latest canary Sandhook version
-In options tab, switch on "App List Mode" and "Instant Module List"
-Browse, download and install "HiddenCore Module" on Manager
-Go on module tab and active EdXposed module and HiddenCore module
-Reboot
-Go to Blacklist tab on EdXposed Manager and enable:
. Your apps (like with magisk hide feature)
. Carrier service
. Google framework
. Google game
. Google play store
. Google play service
-Go to Magisk Manager and hide:
. Your apps
. Google play service (uncheck and check again)
-Disable usb debugging in dev options (for full spoof)
-Reboot and done!
My favorites apps/module:
. Battery charge limit (example: stop night charge at 99% and wait to discharge to 90% and charge again to 99% target)
. Migrate (the new best app saver, titanium backup is.. hum..)
. adaway (block ads, add repo on this app for better work)
. Mixplorer (cool file/root explorer)
. Materiel terminal (cool terminal, no superficial tweek)
. AodNotify (the best notification light for me..)
. Wifi Key View (show yours wifi keys)
. Liveboot (watch and save a logcat in place of boot animation)
. Alltrans xposed (translate all your apps)
. Gravitybox xposed (most customisation)
. Minminguard xposed (ad block for apps)
. LuckyPatcher + xposed module
See you!
Thanks! Did exatcly everything right. And Magisk & Xposed are prefectly hidden from my banking app. But the CompleteControl App (for VISA card) is still detecting it. I don't know what I can do to prevent that. I read in an article that "There are many files and packages that MDMs look for when detecting if a device is rooted. " like
"Su Binaries. The following list of Su binaries are often looked for on rooted devices./system/bin/su
/system/xbin/su
/sbin/su
/system/su
/system/bin/.ext/.su
/system/usr/we-need-root/su-backup
/system/xbin/mu"
---> should I therefore uninstall BusyBox? When clicking on "UNINSTALL" in the app, you get a pretty big disclaimer that you might lose funcionality of many rooted apps, so I didn't. After doing all the steps in #1 post, is it safe to disable and uninstall BusyBox? Is there an alternative to hide root from CompleteControl app? THANKS! Great work with the guide btw...
I followed the instructions, and although Magisk Manager itself thinks SafetyNet passes, other SafetyNet checkers still show it fails everything and e.g. I can't update Netflix or find it when searching the Play Store
Would you like this to get proofread to make this article readable by other people?
---------- Post added at 11:46 PM ---------- Previous post was at 11:45 PM ----------
NTWarrior said:
I followed the instructions, and although Magisk Manager itself thinks SafetyNet passes, other SafetyNet checkers still show it fails everything and e.g. I can't update Netflix or find it when searching the Play Store
Click to expand...
Click to collapse
Download an .apk and install it over Netflix. The latest one might not work, so try out a few different versions.
You quote magisk for recovery but to use it you need to access /data partition. How do you decrypt it?
I installed the current (26) Riru, installing edXposed failed (they don’t support it yet). After some searching, I installed LSPosed instead.
Now I’m passing safety net with just hide props config and no HiddenCore needed
CorePatch
For android R only
A Module For Xposed Framework
Disable signature verification For Android
Features:
allow downgrade application [INSTALL_FAILED_VERSION_DOWNGRADE]
Click to expand...
Click to collapse
allows direct install apps after modify file in apk [ignore invalid digest error etc...]
Click to expand...
Click to collapse
allow overlay install apps with inconsistent signatures
Click to expand...
Click to collapse
you need install latest Edxposed and riru 23
you can download latest edxposed from EdXposed - AppVeyor [dev only]
Download: Releases · coderstory/CorePatch (github.com)
because of bad english , so i can only write in a nutshell
Source Code: coderstory/CorePatch: Disable signature verification For Android (github.com)
Xposed Package Name: com.coderstory.toolkit
Version Information
Status: Beta
Created 2020-12-15
Last Updated 2020-12-15
Thank you for this app. You're a life saviour.
Deleted
Why is it on Android 12 I can't get it to ask for root access and I don't believe it works? I have magisk 24.3 with zygisk
This is for A10/11/12 :
Releases · LSPosed/CorePatch
Disable signature verification For Android. Contribute to LSPosed/CorePatch development by creating an account on GitHub.
github.com
Techguy777 said:
I can't get it to ask for root access
Click to expand...
Click to collapse
it dosn't ask for root
you have to enable the module in lsposed and reboot
loopypalm said:
This is for A10/11/12 :
Releases · LSPosed/CorePatch
Disable signature verification For Android. Contribute to LSPosed/CorePatch development by creating an account on GitHub.
github.com
it dosn't ask for root
you have to enable the module in lsposed and reboot
Click to expand...
Click to collapse
It used to ask for root in android 11. Do I have to enable it for every individual app? Inside LSposed?
Techguy777 said:
Do I have to enable it for every individual app? Inside LSposed?
Click to expand...
Click to collapse
no, only sys framework
Doesn't seem to work on Android 12L sadly
good guys, I have installed Core Patch on my head unit with android 10.
everything works fine, i install system application (music player) correctly. But when I start the application I have denied access to storage devices.
Any help?
Hi i have had magisk all set up on my s9+ running 10 for about a year. For some reason it no longer passes safetynet check
Basic intergrity is tick
Ctsprofile is not
Eval type is now hardware
I have universal safetynet fix 2.0 and magiskhide props config 6.1.2 installed
I have tried installing the New magisk hide toolkit by teamfiles (lsposed, riru and the xprivacy app) this did get eval type showing as basic but didnt fix the cts profile. I have now removed these profiles.
Does anyone know of a way to fix this
I installed Riru and updated universal SafetyNet fix to 2.1.3 now passing all checks
Note: I do not really care what you guys think about Google. These are just the steps I took to replace google services with MicroG. This also only works on Android 11 due to FakeGapps being superior on Android 11 compared to Android 12 for now.
TLDR: Flash Magisk, enable zygisk, install Universal Safety Net Fix, Lsposed + fakestore and Nanodroid microg.
Unlock Bootloader and flash a custom recovery
You can follow the guide here on how to unlock your bootloader and flash a custom recovery: https://forum.xda-developers.com/t/guide-unlock-bootloader-and-flash-xiaomi-eu-rom.3952443/
Flash Magisk
Grab the latest APK from Magisk's Github and rename it from Magisk-vXX.apk to Magisk-vXX.zip then flash it in your recovery of choice
Essential magisk setup
Hide the Magisk app
Enable Zygisk and Enforce Denylist on your banking apps etc.
Install the following Magisk Modules and reboot your device
https://github.com/kdrag0n/safetynet-fix for passing safetynet
https://github.com/LSPosed/LSPosed for installing fakegapps later on which provides signature spoofing
Install and enable fakegapps for signature spoofing support
https://github.com/whew-inc/FakeGApps/ - since our device is on A11, grab the latest v3.0 apk and install it
Open LSPosed (A shortcut should be made on your home screen, if not dial *#*#5776733#*#* (LSposed) in your phone dialer and it should open and enable FakeGapps in the module. System Framework is already ticked and thats all thats needed
Installing MicroG
Grab Nanolx's version of microG from: https://downloads.nanolx.org/NanoDroid/Stable/NanoDroid-microG-23.1.2.20210117.zip
Note on this zip. The installer supports reading a config file to set up following this guide: https://github.com/Nanolx/NanoDroid/blob/master/doc/AlterInstallation.md.
I would recommend downloading the default .nanodroid-setup file in the guide, putting it in your internal storage and making the following configurations.
Line 37 - nanodroid_nlpbackend=1000
Line 55 - nanodroid_play=10 if you want in app purchases to work, nanodroid_play=01 if you do not care about in app purchases
I wouldn't recommend going with aurora services here as it is severely outdated, grab it and flash it manually from aurora's gitlab if you want to use it
Uninstall Google Play Services and ignore all the errors that pop up instantly after that
Install Nanodroid MicroG in magisk. It should debloat the default Google installation on the phone and replace it with MicroG
Updating MicroG and optionally Play store based on the options chosen
I recommend installing F-droid and adding the MicroG fdroid repository from https://microg.org/fdroid.html
There will be an update for MicroG. Update it and you're good to go
If you enabled the patched play store for IAP you can update it by going into Google Play Store > Setings and presss Update Play Store
That should be it. You can further clean up the rom by grabbing https://github.com/Szaki/XiaomiADBFastbootTools and disabling some bloatware (I recommend disabling and not uninstalling)
Note: You will get an error from Device Health Services saying it needs an update to Google Play. Feel free to disable the app using a root app disabler or by using ADB with the following command:
adb shell pm disable-user --user 0 com.google.android.apps.turbo
I've gone a step further and replaced most of the default apps with "Simple" apps from F-Droid such as Simple Contacts, Simple Dialer, Simple Calendar etc. They work really well and there's a companion app that allows shared file themeing among them called Simple Thank You.
See attached files for screenshot of my success.