Magisk suddenly not passing SafetyNet - Samsung Galaxy S9 Questions & Answers

I rooted my phone about 6 months ago using the custom OEM unlock fix files and guide by Dr. Ketan. I'm on Magisk 18.0 and Manager ver. 7.0.0, which is the version that came with the guide since I think it's made specifically for my device (SM-G960F). For some reason, it's no longer passing SafetyNet even though it was before.
It's no longer passing the ctsProfile or basicintegrity checks. I'm afraid to update Magisk through the manager, as I'm not sure it will work on my device since I had to use a unique method to root it in the first place. Can someone help me so that my phone can pass SafetyNet again? Thanks!

Related

Safety Net check a problem for rooted guys

Hello!
After moving on S288 and rooting my device, I realised that I no longer pass Safetynet. I, currently rooted with Chainfire's SuperSU + Magisk, with the feature from Magisk, Magisk Hide I cannot bypass the safetynet checker. Also as I seem to realise, it is bypassed by an unlocked bootloader, which I'm wondering if we lock again if it will pass.
This safetynet thing doesn't allow me to log into Snapchat and doesn't allow me to use some apps to pay via NFC, which drives me nuts.
I'll try locking the bootloader again and then seeing if that fixes the issue.
Any suggestions are welcome!

(Solved) Safety Net Fail Samsung S6 Basic integrity and CTS profile

Hi guys
I have a Samsung glalaxy S6 (flat) SM-G920F
Lineage OS is 14.1.20170718-UNOFFICIAL-zerofltex
Android 7.1.2
TWRP 1.14
Lineages OS is a fresh install. I'm failing Safetynet Chacks. initially this was on Basic integrity and CTS profile mismatch. The device isnt rooted (it was some time ago). I ran unSU.zip. No change.
I then installed Magisk v13.3. Now its passing the basic integrity check but it its still failing the ctsProfile check.
Do I need to root it again. I've read that the issue may be because of the method used to root the device but it was a year ago so I don't recall the method used.
Please help guys.
Thanks a lot man. It worked. Quick easy and effective

SafetyNet Fail with Stock Nougat (4.28.401.3)

Hi,
I'm currently running Android Nougat Stock (4.28.401.3), with the Bootloader unlocked, but without TWRP or Magisk. My device is currently failing the SafetyNet Check due to Basic Integrity and CTS profile mismatch (Image attached).
I also get the error "Security checking fail GT_CONNECT_FAIL" when booting into Bootloader Mode (Image attached, Source).
I updated several months ago from Marshmallow to Nougat, via OTA. When I had Marshmallow, I had TWRP and Magisk installed, but didn't reinstall them afterwards.
Now I would like to try and fix this error. Would installing Magisk (using MagiskHide) fix this issue? Does the Bootloader need to be re-locked now in order to pass the SafetyNet Check?
Any help appreciated.
I can only help you with safetynet since I haven't seen that Security checking fail GT_CONNECT_FAIL error before. For making sure everything is fine with the software of your phone I'd flash a RUU, nonetheless, if I were you. If the error gets caused by a hardware failure (e.g. the infamous nand death) then there's not much you can do for fixing it aside from sending it to HTC for a repair.
Safetynet fails as soons as you unlock the bootloader. You have two choices now. Either you re-lock the bootloader or you install magisk and activate magisk hide. If you choose the latter the bootloader can stay unlocked.
Flippy498 said:
I can only help you with safetynet since I haven't seen that Security checking fail GT_CONNECT_FAIL error before. For making sure everything is fine with the software of your phone I'd flash a RUU, nonetheless, if I were you. If the error gets caused by a hardware failure (e.g. the infamous nand death) then there's not much you can do for fixing it aside from sending it to HTC for a repair.
Safetynet fails as soons as you unlock the bootloader. You have two choices now. Either you re-lock the bootloader or you install magisk and activate magisk hide. If you choose the latter the bootloader can stay unlocked.
Click to expand...
Click to collapse
It looks like the Security checking fail GT_CONNECT_FAIL error is unrelated to the phone not passing the SafetyNet Check. Installing Magisk solved that problem (Though the Security checking fail GT_CONNECT_FAIL error still pops up).
Did the SafetyNet Check get updated or changed? My phone used to pass this check when on the Stock ROM.
Google constantly updates safetynet since they try to make magisk hide useless (aka make apps that rely on safetynet more secure). It's a cat and mouse game.
An unlocked bootloader results in a safetynet fail for quite some time, now, even if you use the stock rom.
Sent from my HTC One M9 using XDA Labs

How to cleanly remove root!

How do i cleanly remove the root and flash the latest MIUI?
It should pass saftynet and the cts profile check after this.
Well, you could simply flash stock. Goes without saying, but you need to backup everything you want to keep. If your device isn't compatible with the latest miui, then magisk would actually help you. Search the universal safety net fix. Also, for cts incompatibility, you could spoof your device, sometimes this can fix your problem.
you have any guide for flashing stock ? TO flash throguh the mi flash tool we need authorized account right ?
Also if possible please share for the cts profile spoofing process. Will try it first..
The issue came with magisk 24.1(they stoped magiskhide) . I updated and when i tried to rollback to 23 all things broke. Device bootloped had to flash the rom again(miui12.5). After that I was not able to make magisk work .Have some work related app that needs safetynet approval.
nivednk14 said:
you have any guide for flashing stock ? TO flash throguh the mi flash tool we need authorized account right ?
Also if possible please share for the cts profile spoofing process. Will try it first..
The issue came with magisk 24.1(they stoped magiskhide) . I updated and when i tried to rollback to 23 all things broke. Device bootloped had to flash the rom again(miui12.5). After that I was not able to make magisk work .Have some work related app that needs safetynet approval.
Click to expand...
Click to collapse
Authorized account is only needed if you are flashing the rom using BootROM or EDL mode.
Just boot it up in fastboot mode, load a fastboot rom in miflash then flash it.
nivednk14 said:
you have any guide for flashing stock ? TO flash throguh the mi flash tool we need authorized account right ?
Also if possible please share for the cts profile spoofing process. Will try it first..
The issue came with magisk 24.1(they stoped magiskhide) . I updated and when i tried to rollback to 23 all things broke. Device bootloped had to flash the rom again(miui12.5). After that I was not able to make magisk work .Have some work related app that needs safetynet approval.
Click to expand...
Click to collapse
You can try using Shamiko if you want to pass SafetyNet in 24.1. It's an alternative to MagiskHide.
Install the module then use Configure DenyList to hide the apps you want
Don't forget to turn off the Enforce DenyList switch.
Shamiko 0.4.1.zip
drive.google.com
Thanks Everyone I got it working for now.
Downgraded to magisk 23 and used riru and universal Safetynet fix.
Not going up update till this is working.
If update is must i think will try with zygisk fix.
Will give shamiko atry that time.

SafetyNet Bypass

Hello, I actually rooted a Moto G5s plus(android 8.1.0.0)...... it's the old phone I have, the newer one is Oppo A9 2020, which I couldn't even unlock the bootloader of.(would be great though if I can root this model)
Coming to the moto phone, I've rooted it, installed zygisk in magisk(v.26), and installed the safetynet fix zip file v.2.4 in the modules tab, but it's still not able to bypass safetynet check......
When it failed, I uninstalled it, and switched over to shamiko(latest release) ....... but it failed too......
Plz guide me, I dunno how to bypass safetynet check...

Categories

Resources