Skip to content

wuc656/PlayIntegrityFix

 
 

Repository files navigation

Play Integrity Fix

This module tries to fix Play Integrity and SafetyNet verdicts to get a valid attestation.

NOTE

This module is not made to hide root, nor to avoid detections in other apps. It only serves to pass Device verdict in the Play Integrity tests and certify your device.

Tutorial

You will need root and Zygisk. Enable Magisk's built-in Zygisk or use ZygiskNext / ReZygisk.

Options

  • spoofBuild: spoof fingerprint field, enabled by default.
  • spoofProvider: custom keystore provide, enable when not using TrickyStore.
  • spoofProps: spoof prop when gms read from sytem prop, enable when not using TrickyStore.
  • spoofSignature: spoof rom signature, enable when your rom is signed by testkey. You can check your rom signature by running this command in terminal.
    unzip -l /system/etc/security/otacerts.zip | grep -oE "testkey|releasekey"
  • spoofVendingSdk: spoof sdk version to 32 to Play Store if your device runs Android 13 or higher, this option will not take effect if your device is running Android 12 or lower.
    • Known issue:
      • Back gesture/nav button from within the Play Store exits directly to homescreen for all
      • Blank account sign-in status and broken app updates for ROMs A14+
      • Incorrect app variants may be served for all
      • Full Play Store crashes for some setups
    • pixel_beta fingerprint can no longer get device verdict even on legacy check, so enabling this option won't help you to get device verdict anymore.

Variety

  • inject-vending: Based on the official inject branch, with the added spoofVendingSdk option.
  • inject-manual: Based on inject-vending, with auto config (detect TrickyStore and ROM signature) removed.
  • inject-s: Based on inject-manual, lightweight since it dropped the JSON format (pif.json -> pif.prop).

Warning

Do not use third-party tools to fetch fingerprints to avoid conflicts. The WebUI provides full control for configurable options.

More

  • The spoofVendingSdk option has been patched by Google; device verdict on A12+ with spoofVendingSdk is no longer possible.
  • The inject-vending and inject-manual branches are discontinued, but the branches will not be removed.

About official PIF by chiteroman

Acknowledgments

About

Fix Play Integrity (and SafetyNet) verdicts.

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages

  • C++ 37.5%
  • JavaScript 21.1%
  • Shell 15.3%
  • Java 14.9%
  • CSS 6.0%
  • HTML 4.8%
  • CMake 0.4%