Happy Secret

Very Nice Tutorial!

Very nice! Works on non-jailbroken as well!!!! Thank you iOSGods!

29 minutes ago, Melonhijaumanis said:

Sorry i say become crash not crazy lmao 

typo

 

Do you have to debug the application so it doesn't freeze?

ARM instruction update features require either jailbroken device or the game is having debug state.  

5 hours ago, Melonhijaumanis said:

I try with h5gg 

When unityframework is made the application becomes crasy

Hello, what do you mean by become crazy. 
This menu is an enhancement on top of standard H5GG menu with Frida.

It can be used with Unity or non-Unity game. 

21 hours ago, FSTRYurii said:

How do I download ?? Doesn’t let me 

It should be just click download. What message do you see?

On 4/9/2023 at 1:05 AM, julesvandor said:

Fantastic post! 👍

I just had to say that this tutorial is simply outstanding and deserves to be pinned.

I want to extend my gratitude to you, @Happy Secret for taking the time and effort to document this tutorial. You've done the community a tremendous service, and we're all better off because of it. Thank you!

I can confidently say that this is hands down the best 101 tutorial on iOS game debugging, sdk extraction, static and dynamic analysis, mod menu design, implementation, and beginner coding and hacking that I have ever come across on any forum!

What's even more impressive is that you're utilizing cutting-edge tools like H5GG to create a custom mod menu game hack that doesn't require a jailbreak. The fact that H5GG leverages the coding language of the web (JavaScript and HTML) is a testament to the evolution of iOS game hacking in 2023.

Thanks, May be you want to let more of your friend know about this tutorial. 
 

You may also want to check out my other cheat posts. Every cheat I made, I would document some hacking note for people reference. Those would be good case studies for cheat learner as well.

Number 1….Support @tuancc and H5GG

Modded/Hacked App: 20 Minutes Till Dawn:Premium
Bundle ID: com.flanne.erabit.20minutes.tilldawn.shooting.roguelike.ios
iTunes Store Link: https://apps.apple.com/us/app/20-minutes-till-dawn-premium/id1630887189

Mod Requirements:
- Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
- Sideloadly / Cydia Impactor or alternatives.
- A Computer Running Windows/macOS/Linux with iTunes installed.

Hack Features:
- Free to play
- Unlimited Points / Money (Slider to adjust value, high value best)
- Exp Multiplier (Slider to adjust value, high value best)

Tips  

Turn On/Off features with the Mod Menu. Look for the floating lovely Eevee on top left hand corner. 
YES!! Mod Menu Hack on Jailed Device!!
*Exp Multiplier must apply inside play mode (not in lobby). Pause the game and apply Exp Multiplier cheat.

Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
Modded Android APK(s): https://iosgods.com/forum/68-android-section/
For more fun, check out the Club(s): https://iosgods.com/clubs/

iOS Hack Download IPA Link:

PC Installation Instructions:
STEP 1: If necessary, uninstall the app if you have it installed on your iDevice. Some hacked IPAs will install as a duplicate app. Make sure to back it up so you don't lose your progress.
STEP 2: Download the pre-hacked .IPA file from the link above to your computer. To download from the iOSGods App, see this tutorial topic.
STEP 3: Download Sideloadly and install it on your PC.
STEP 4: Open/Run Sideloadly on your computer, connect your iOS Device, and wait until your device name shows up.
STEP 5: Once your iDevice appears, drag the modded .IPA file you downloaded and drop it inside the Sideloadly application.
STEP 6: You will now have to enter your iTunes/Apple ID email login, press "Start" & then you will be asked to enter your password. Go ahead and enter the required information.
STEP 7: Wait for Sideloadly to finish sideloading/installing the hacked IPA. If there are issues during installation, please read the note below.
STEP 8: Once the installation is complete and you see the app on your Home Screen, you will need to go to Settings -> General -> Profiles/VPN & Device Management. Once there, tap on the email you entered from step 6, and then tap on 'Trust [email protected]'.
STEP 9: Now go to your Home Screen and open the newly installed app and everything should work fine. You may need to follow further per app instructions inside the hack's popup in-game.

NOTE: iOS/iPadOS 16 and later, you must enable Developer Mode. For free Apple Developer accounts, you will need to repeat this process every 7 days. Jailbroken iDevices can also use Sideloadly/Filza/IPA Installer to normally install the IPA with AppSync. If you have any questions or problems, read our Sideloadly FAQ section of the topic and if you don't find a solution, please post your issue down below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.

Credits:
- Happy Secret

Cheat Video/Screenshots:

N/A

Sad to know

Are there way to sideload or include a file in App's document folder after sideloading it. 

I do not see Document Folder inside Payload. It must be programatically created. 

On 4/5/2023 at 12:08 AM, Rook said:

Does it help if you change the filename to something like "executable" and trying again?

Looking into it further, seems like a different issue...

Changed to executable.dat and try again....
Similar result...

 

Task status for ID: ca2d1858-7e09-4611-8c15-1ad0762af92f
Current status:  error-il2cppdumper-35

Starting il2cppdumper on 2023-04-06 02:32:49.988211

Initializing metadata...
Metadata Version: 27
Initializing il2cpp file...
Il2Cpp Version: 27
Searching...
Change il2cpp version to: 27.1
CodeRegistration : 6542890
MetadataRegistration : 6714fa0
Dumping...
�䵀۸�)�7��В���Lq�,�a6�!q�2�8t�RO����ѱ��DC�����$��6���]u�f��Y��iW��x�$�rz�y�����' was not present in the dictionary.
  at System.Collections.Generic.Dictionary`2[TKey,TValue].get_Item (TKey key) [0x00021] in <12b418a7818c4ca0893feeaaf67f1e7f>:0 
  at Il2CppDumper.Il2CppExecutor..ctor (Il2CppDumper.Metadata metadata, Il2CppDumper.Il2Cpp il2Cpp) [0x0008f] in <f7e6b0919917422ea558f2909d3584d7>:0 
  at Il2CppDumper.Program.Dump (Il2CppDumper.Metadata metadata, Il2CppDumper.Il2Cpp il2Cpp, System.String outputDir) [0x0000a] in <f7e6b0919917422ea558f2909d3584d7>:0 
  at Il2CppDumper.Program.Main (System.String[] args) [0x001bc] in <f7e6b0919917422ea558f2909d3584d7>:0 

Total time for il2cppdumper: 0:00:10.197426

========

Il2cppdumper did not produce any files. Probably something is wrong with the executable or metadata?

Hello, 

I am dumping the Earth - Revival. I face below any idea how to resolve?

Task status for ID: 7d968b49-41e7-4239-8caf-96dcec511ed2
Current status:  error-il2cppdumper-35

Starting il2cppdumper on 2023-04-04 13:09:09.282188

Initializing metadata...
Metadata Version: 27
Initializing il2cpp file...
Il2Cpp Version: 27
Searching...
Change il2cpp version to: 27.1
CodeRegistration : 6542890
MetadataRegistration : 6714fa0
Dumping...
�䵀۸�)�7��В���Lq�,�a6�!q�2�8t�RO����ѱ��DC�����$��6���]u�f��Y��iW��x�$�rz�y�����' was not present in the dictionary.
  at System.Collections.Generic.Dictionary`2[TKey,TValue].get_Item (TKey key) [0x00021] in <12b418a7818c4ca0893feeaaf67f1e7f>:0 
  at Il2CppDumper.Il2CppExecutor..ctor (Il2CppDumper.Metadata metadata, Il2CppDumper.Il2Cpp il2Cpp) [0x0008f] in <f7e6b0919917422ea558f2909d3584d7>:0 
  at Il2CppDumper.Program.Dump (Il2CppDumper.Metadata metadata, Il2CppDumper.Il2Cpp il2Cpp, System.String outputDir) [0x0000a] in <f7e6b0919917422ea558f2909d3584d7>:0 
  at Il2CppDumper.Program.Main (System.String[] args) [0x001bc] in <f7e6b0919917422ea558f2909d3584d7>:0 

Total time for il2cppdumper: 0:00:10.298265

========

Il2cppdumper did not produce any files. Probably something is wrong with the executable or metadata?

Looks like some encoding issue. How can I resolve it?

2 hours ago, Rook said:

Sorry, I had to fix something and likely had an old copy of the topic at hand. Let me know if you need me to restore or fix anything.

No need, I have manually updated. 
thx for the prompt.

good that you are aware of the issue and action in place 

@Rook This morning, I realised that this post got reverted to one week before version. I should have updated to v1.5 last friday. But I only see v1.4 this morning. 

Any idea why this happens? It seems those comments are not affected. Only the main post got reverted. 

On 4/1/2023 at 2:03 AM, Shrino said:

depending on the game. what are you making it for?

I want to learn the general technique. No specific game in mind, any game you would recommend me to start with? 

MMORPG, a lot of things are actually server sided. 
even you can hack, it could be too visible and make you got banned very soon.

ESP type of hack that only you can see would be better option than damage multiplier 

6 hours ago, Rook said:

You sure you used the same Apple ID?

Never changed, and I didn’t login again. 
so, pretty sure. It uses the locally stored login information. 

@Rook What is the real latest version of Sideloadly? I recently got issue with it. After reinstall, it automatically update to 0.40.4....but in Sideloadly official site, i only see change log for 0.40.3

and My sideloadly now has two issues?

1. the auto bundle Id seems behaves differently. I suddenly got to copy of the game in my iPad.

2. after sideload, the game lost the File Sharing features.  (This issue resolved after restart iPAD, the sharing folder suddenly there. odd)

Any hint for me?

Version 1.5:
1. Isolate H5GG core feature Frida script with other script, to avoid override or affecting each other. Now you can use this new menu with other Frida scripts with less constraints and without issue. 
2. Introducing Hex Search with nibble-level wildcards, like "?3 37 13 ?7". Hex search can also be used to achieve Text (UTF-8) search. Currently only script available, will incorporate into H5GG menu with UI in next version. 
3. Minor bug fix on a number of bugs.

note: Note Hex Search script result can be find in Debug Info UI. (press Debug from front UI) 

On 1/18/2023 at 4:20 PM, Leminare said:

I’m looking to make a script that lets me search for a string and edit all results to 1. On game guardian to search a string is ;snow for example. Could someone help me make a script and tell me if it lets me search in the same way? I have 0 scripting experience 

Just added a script example that do UTF-8 String Seach. You may find it here.

11 hours ago, Jonny77 said:

text search? hold on haha why have i never seen that, let me find that

Just choose TEXT, when choosing data size or data type.

remember the last occurrence of the search is fake. I think iGG allocate memory to store that search string and it return that search string as well

just ignore the very last one

8 hours ago, YeetDisDude said:

nice work, do you know any debuggers that will work on windows? would llvm work?

You mean debugger to debug iOS application? GDB with IDA Pro, I believe it is the best combination, right?

Anyway, I remember in my old days when using PC to hack iOS app, I use GDB. But it is ages ago. Ask the pro here or search tutorial 

Version 1.4:
1. You can use script to search for object interested and add to Debug Info. Debug Info acts like a console.log but it will accumulate count on same message and update itself to latest version of data. You will LOVE it. 
2. Under debug info, you can easily explore data at certain memory location (object location). As usual, you can update the data on that screen as well. 
3. Minor bug fix on a number of bugs.

First! support

Come to learn