https://grapheneos.org/usage#sandboxed-google-play
Banking apps detect unsecure environments, and here I document how to bypass them in custom ROM's
https://forum.xda-developers.com/t/info-play-integrity-api-replacement-for-safetynet.4479337/
also install updated firmware.
install some custom rom with pixel like experience
my choice is pixelOS
strong integrety doesn't pass, momo shows init.rc, custom rom and bootloader unlocked
but payzapp and everything works. netflix has L1.
- pixelOS
- KernelSU
- zygiskonKernelSU
- USFM by displax
- unlocked bootloader & orangefox recovery
- Install LineageOS
- Spoof device signature with MagiskHide Props Config
- hide custom rom props with this module, reset them with this
- install shamiko
- safetynet fix
- (optional) edit additional build.prop entries that may have rom name with this
- mindthegapps / microg sateynetAPI
- Add Google play Services, Google play store, google services framework and google play protect to denylist
- hide magisk, freeze the app (android 13 inbuilt), or use appmanager
- can use work profile using shelter
- InitRcHider
- unregular partition mounting
- bootloader / hardware attestation TODO
Can remove checks through RE though not advised.
https://github.com/microg/GmsCore/wiki/Implementation-Status
https://gitlab.com/Nanolx/NanoDroid
liboemcryptodisabler module
https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/
https://grapheneos.org/articles/attestation-compatibility-guide
Payzap runs once can't verify number/(loading) then this toast.
Your device bootloader is unlocked or verified boot state is unverified. You cannot use this application.
Nothing in logs
ruru -> sees xprivacylua somehow
yasnac -> basic integrety pass
play integrety api checker -> everything is red
Momo
1. Installing and activating the app on rom with gapps
2. Backing up app+data using neobackup
3. Wiping the phone, flashing clean rom
4. Restoring the app from the backup there
Hardware Attestation 2023-06-07 UTC
https://developer.android.com/training/articles/security-key-attestation