Happy Secret

Version 1.8.0: As mentioned last week, we have something new, something crazy, that would blow your mind. Today, here announced the In-Memory Unity Class Static Analyser. It is essentially an in-memory Il2cpp dumper (but a bunch of usability features). YES, you do not necessary to do il2cpp dump now. Even though it cannot completely replace il2cpp dumper, it is not its intention, it significantly reduce the need of doing offline dump. Additionally, we have implemented it as a JS plugin. YES, heard it right. The most powerful thing of H5GG is SCRIPTING capability. Here I want to demonstrate how far we can go with scripting. 1. In memory, Il2cpp dumper which dump Class, Field, Method dump and allow searching. (Properties is not implemented, as it mostly covered by Method.) YES, everything in memory. You do not need PC to do dump for simple Unity Game. Those highlighted with colour code are accessible directly to the object / field. Yellow is direct, Pink is one hop indirect. It opens first object met the criteria here. More object can be found in DebugInfo 2. Network Graph show Inter-class relation. YES, trust me. This is the blow your mind part. You can visually see all the Class relation on screen in a network form. With this tool, it will be even more easy for you to understand how the game works and find things to hack. Together with previous Unity Support. The game is pretty much naked in front of you. 3. Detail view on Class with available on Scene Object List to allow easy access. Yes, this is actually the real detail il2cpp dump view PLUS live object list (on Scene). It is helpful if you find a class interesting and would like to understand more. 4. Enhanced core engine to allow User load additional library (apart from Assembly-CSharp) through Debug Info windows. Yes, just click to load additional modules and it will keep track what has loaded too. With this in place, we can extend our menu to cover even more games. 5. Enhanced Unity User Object Explorer and Memory Info view to allow even smoother navigation. You can now indirectly access List and Dictionary (or other generic type) content. YES, we now start to cover Generic Type. You can now basically keep clicking to navigate across the Unity Game Memory/User Objects. 6. Removed one major limitation on Unity Method coverage on certain Unity Game. YES, we have more games supported by this feature now. 7. Removed limitation menu size. If you are on iPAD, you will start seeing bigger Menu UI. YES, we need a lot more space for you to Analyse Unity Game. 8. Minor bug fix on a number of bugs. note: 1. This is really an Alpha release and for Unity Game only. It is good for Hack developer who want to test their limits only. Not for general user who do not familiar with Unity. For general user who do not familiar with Unity, it is still a good tool to use, but you cannot maximise its value. 2. Performance could be bad, if the game has a lot class definition. It is tradeoff for features and performance for now. If you don't like it, you may skip the JS plugin. It is completely standalone plugin, base menu has no dependency on it.

There are different ways to get object offset for your mod menu. 1. Hook on object method and get the x0 register value as object pointer 2. Use pointer search features to look for other pointer that has field pointing to this. Recursively look for static class, which can reference by static pointer. 3. Use the AutoPointerSearch script from @tuancc, see his recent tutorial here. 4. Make your mod menu hack using JS plug-in of H5GG enhanced menu. You don’t need offset for it. I have two cheat release earlier using this approach. In summary, we use script to call function to get object of certain type, programmatically select the correct object we want, jump through pointers in field to reach the destination field to apply cheat on.

There is download link included - Here is a copy for your quick reference Download New H5GG Dylib with H5Frida 16.0.10 (all in one pack)

Yes and no, it is game objects in scene defined by developer based on Unity Framework. (Not “GameObject” type in Unity) However, there is one more limitation, the code is defined under Assembly-CSharp.dll. (But we have way for you to manually extend to other library now.) The key reason, I don’t cover everything from different library is that, I can’t tell what are system library, which could have different object/type pattern. Second, it is performance comcern. I am actually quite a lot pointer by default. If the number class coverage becoming too large, my current access algorithm would have bottlenet. so, in summary, yes, it is a user ( game developer ) defined object, which is current in scene. It doesn’t necessarily be a character, monster, grass/tree/rock, it could be skill, buff, or something intangible supporting the seeable object in action. Hope this explains. You should try it out, before you actually trying it out, it is pretty hard to fully feel what I mean.

Quick Video Tutorial to demo the features of H5GG Enhanced Menu with ARM64 Instruction and Unity Support People asks what exactly is Unity Support? AM64 Instruction support is easy to understand. But Unity? First of all, for those do not know, most of the nowadays games are made using Unity Engine. It makes game creation easy, that is why people love it. Unity Support, essentially mean, it has features especially made for Unity Game (and Unity Game ONLY) Here quickly demonstrate some of them. Later, we would have some DIY tutorial make using H5GG to help you understand more. Let's take a look at the first video (5mins). https://streamable.com/dqqwtj Demo flow 1. General Cheat Engine search -> Trigger Unity User Object Explorer -> Browser around various object to determine which are the junk result (Traditionally you need to blind test one by one, and guess what are they) 2. From Object view, realise Money has two copy (data protection). Update both and see the cheat in action for simple Unity Game (non-server sided, without too much protection.) 3. Browse around Player object and look for other things to cheat, yes we do not need to do traditional Cheat Engine Search again. Happy finding more cheat by just browsing around object 4. Click to Travel to other object. YES, again we do not need any search. Just Click - Click - Click. Feel free to do all kind of educated / informed try and error. Explore all possibility to cheat 5. Ease of navigation back to previous object and explore others. 6. Happy easy cheating on Simple Unity Game. What else we can do with this H5GG Enhanced Menu? With this Unity Support Menu, there are actually another crazy way to locate Unity Object. YOU DO NOT EVEN NEED TO DO TRADITIONAL SEARCH. Let's take a look at another video (1mins) https://streamable.com/srjjgp Demo flow 1. Click on Unity and open up Unity User Object Explorer -> Click Search -> Input a Object Type of interest 2. If there exists Unity User Object in Scene, it will open up the first one found with Object Explorer. YUP, THAT SIMPLE. 3. From there, you can start your Click - Click - Click, Explore - TEST - Explore more journey. 4. Where is the other objects? You may found those in Debug Info windows. Everything in a glance!!! Just scroll to the right, click on the address. 5. So, HAPPY EXPLORING AGAIN. In fact, you see Unity User Object Explorer give you options to input Object Address. Ya, another way for you to start your exploration journey. Here you can combine iGameGods fuzzy search, range search, watchpoint (register). In next Video Tutorial, I will demo a bit more on how to combine iGameGod and H5GG to make cheating even more easy.

Version 1.7.6: Today is another great day for iOSGods. We have the JIT and iOSGods Jailbreak Mod Menu DEBs for Non-Jailbroken iOS Devices announced. It is so crazy that we can use jailbroken mod on non-jailbroken. Although there are some limitation that requires PC to turn on JIT, it is still a crazy good news for Non-jailbreaker. Thanks to iOSGods! To make today even more memorable (as usual), I am presenting formal release version of H5GG Custom Menu that provide Unity support. All Features that are previously in Alpha/Beta testing (v1.7.0-v1.7.5) are now in release mode! Additionally, 1. Removed one major limitation on Unity Method coverage on certain Unity Game. YES, we have more games supported by this feature now. Even it is release mode, no guarantee. Some Unity games are really hard to crack through. 2. Enhanced core engine to allow User load additional library (Apart from Assembly-CSharp). Yes, some games store core library outside Assembly-CSharp, we can cover them manually through JS Plugin NOW. With this in place, we can extend our menu to cover even more games. 3. Surprise update in core engineer, it is used to support something REALLY BIG coming. You can't use it directly for now. Stay tuned, for our next release. It will blow your mind. So Crazy... 4. Minor bug fix on a number of bugs. note: This is a formal release for Unity Game only. But still it is pretty much for Hack developer who want to test their limits only. For general user who do not familiar with Unity, it is still a good tool to use, but you cannot maximise its value. Unity Object Explore Coverage Very KEY to note before you start using this new release. Unity Object Explore cover only Live on Scene object. So, it is basically things are mostly directly seeable on your game screen/scene. Sometime its component can also be reach directly, it depends how the game developer write their game. ALSO, it doesn't support List and Dictionary yet. (or anything similar) If you can't explore your object, don't panic, it is 99% chance the object is either not on scene or they are of List / Dictionary type.

@Rook I got following message when enable JIT on an app. Any hint for me? Could not enable JIT: Lockdown error while starting debug server: Invalid service (-27). Do you want to retry?

@RookSo, the JIT is actually the Debug State (or included Debug State) on non-jailbroken iOS app? Haha, interesting

Wow!!!! Crazy idea and become true !!!! I love iOSGods !

Updated to v2.0.0 Included DIY procedure for you to DIY next time. Feel free to ask any question around how to do that DIY. @Rook@LaxusNeed your help to update iOSGods version. @RookRequest iOSGods Repository access sent (PM), pending your review and support.

All recent version need Frida support. You need to touch the ipa anyway. More importantly, I don’t have jailbroken device. I never test on jailbroken

Feel free to explore, what you can play around. As you said, it is a cheat engine. But normally resource cannot be cheated, likely either server sided or heavily protected for WOB, I have no idea what is it…haha

Ya, I joined Discord. Seems some people need to keep sideload and multiple times before it works . I havent continue to try

Version 1.7.5: 1. Further improved Unity User Object Explorer, to include ancestor class info (Field and Method) . YES, everything about the Object all at a glance now!!! (Features enter BETA testing, no guarantee) The related info as usual available to JS Plugin to use. 2. Enhanced Memory Info, it can now parse 64bit pointer. As usual, you can navigate through object pointer, from memory travel to another object memory. Of course, if the new object is a Unity User Object. You can Click on Unity to start exploring the new object. 3. New H5Frida/Frida package script for macOS and Windows. YES, you no longer need to do this tedious work by yourself. The script automate the process of packaging 3 H5Frida/Frida files into ipa and make the ipa H5Frida/Frida ready. (prerequisite for using this enhanced menu) 4. Enhanced scripting Unity support, thought script you can load additional Unity module to extend Unity User Object Explore coverage. Experimental features. Contact me, if you want to help out. Only for selected experience developer. 5. Minor bug fix on a number of bugs. note: This is really a BETA release and for Unity Game only. It is good for Hack developer who want to test their limits only. Not for general user who do not familiar with Unity.

Request sent, let’s see how it works out this time

Oh, must use scarlet? Interesting

What Sideload option need to choose? I cannot sideload with the scriptware file. It crashes immediately.

WoW....No.1 Thanks

@Laxus Please consider to upload to iOSGods, upgrade to the existing version.

Sideload this 1.7.4 as the same way you load that standard H5GG 7.9 dylib from GitHub. Bear in mind, you need 3 Frida file in app bundle. see read me file inside the zip you download

No idea.. I am not using jailbroken……may need @tuancc to respond to this

Feel free change the script to modify the modifier

Can you sideload successfully? When does it crash?