SafetyNet fixes

NOTE: Due to recent changes to SafetyNet, many apps will randomly fail the check by giving you a network related error (something like "Can't access Google Play Services" or "NETWORK_ERROR"). This doesn't mean your phone doesn't pass SafetyNet - it means the app you're currently using to check SafetyNet status with has exhausted the daily quota for SafetyNet queries. Simply try a different app, like YASNAC and whatever else you can find in Play Store.

If you're running LineageOS and you want to pass SafetyNet, follow this guide (by @Agito_murakami): https://telegra.ph/Magisk--safetynet-patch--Shamiko-07-15

In order to pass SafetyNet, fix "Device not certified" in Play Store settings, make apps such as Netflix appear in Play Store, make your bank apps work do the following:

Part 1 (Magisk and Zygisk)

• Flash latest Magisk stable (v24+)
• Hide Magisk Manager in Magisk settings
• Enable Zygisk and "Enforce DenyList" in Magisk settings
• Add Google Play Store and Google Play Services in the DenyList
• Clear Google Play Store data and Google Play Services cache
• Reboot and check if SafetyNet passes. If not, proceed to the next step.
• Flash the latest SafetyNet fix Magisk module.
• Reboot
• SafetyNet should now pass. You can skip Part 2 now and read Notes.
• Only if you're sure you followed all above steps and SafetyNet still doesn't pass, proceed to the next parts, otherwise it's not required.

Part 2 (Shamiko)

Shamiko is a replacement for MagiskHide, which promises to be an improved version of that discontinued feature. To install it, simply:

• Download and install Shamiko from here.
• In Magisk settings, untick "Enforce DenyList" and reboot.

Shamiko will use the apps selected in the "Configure DenyList" setting section to hide root from.

Part 3 (LSPosed + XPrivacyLua)

• Install the latest LSPosed for Zygisk modules (choose the most recent file that ends with "zygisk-release.zip").
• Reboot
• Open LSPosed app, search for XPrivacyLua in Repository menu, download apk and install
• Tap on XPrivacyLua in LSPosed Modules menu, enable it with the toggle on the top
• Check the 2 recommended apps (System Framework & Settings Storage)
• Tap on 3-dot menu, uncheck "System apps" from Hide menu and check "Google Play Services" too
• Reboot
• Open XPrivacyLua app and check Google Play Services (all checkboxes)
• Clear Google Play Store data and Google Play Services cache
• Reboot. SafetyNet should now pass.

Notes

• Make sure you check all checkboxes when adding an app (except for Google Play Services) in Magisk Hide.
• If an app (such as Netflix, bank app) has already detected root, make sure that you clear its data/cache after you add it in Magisk Hide.
• Keep in mind that even if you pass SafetyNet, some bank apps also detect SELinux status which needs to be Enforcing.
• In some cases, you might also need to change your device fingerprint to a supported device such as dipper (Xiaomi Mi 8) to pass SafetyNet by using MagiskHide Props Config module.