Jump to content

Galmin

Senior Member
  • Posts

    341
  • Joined

  • Last visited

Everything posted by Galmin

  1. I came to a conclusion... GDB and LLDB won't work in BulletForce because memory reading isn't working just makes the game go back to main menu, and gdb and lldb requires an offset from iGG to set a watchpoint. Furthermore, there's no strings that I've found so far... So strings won't work. Any ideas? @Shmoo ?
  2. Not sure how this guys helped me. How am I supposed to find strings in BulletForce if they are under sub_x
  3. Can someone assist me with GDB? Are there any good tutorials for GDB I couldn't find one... Also, whenever I try to find ammo in iGG the app BulletForce reloads again... there's some sort of protection against GameGem and iGG so this won't work... because I can't find the ammo offset I can't do GDB watchpoints. I heard there's an option called " breakpointing " but I can't find anything in IDA in order to do " breakpointing " I can't find any offsets need help asap!
  4. I searched for _syscall and there's none in BulletForce. How do you find so many offsets in BulletForce... I'm trying to learn. PM me some useful information if you have time Br, Galmin
  5. What if the whole game is sub_x? How to find ammo in BulletForce? Debugging? Can you make a tutorial on debugging ?
  6. Thanks!
  7. CHAPTER 1 - Preparing to hack in IDA PRO Requirement (Instructions of getting them will be in the steps *ordered*): -Cydia -iFile -Rasticrac -MTerminal (iOS 9.3.3) -iFunBox -iTunes -PC -Brain Hi, This topic is mostly for those who want it detailed and specific Have you ever wanted to hack a game on your own? You're in the right place for the first step! We will be using [bulletForce] for this tutorial. Method 1: Step 1- Find a game that you'd like to hack... In this case [BulletForce] Step 2- Open up iTunes on Windows Step 3- Now download BulletForce from iTunes (DO NOT DOWNLOAD FROM APPSTORE DIRECTLY) Step 4- Connect your iDevice to iTunes and find your device there (Backup screen) Step 5- Click on "Apps" & Select the app you downloaded before connecting your device and press "Install" the app should say "Will Install" Step 6- Press "Sync" or "Apply" -- Now please wait until it finishes syncing and installing -- - Error? Failed to authorize... ? No worries I got you covered Method 2 ( If failed to authorize your PC because you have pirated apps from different apple ID's ): Step 1- Download iFunBox: http://www.i-funbox.com/ Step 2- Install iFunBox on your PC Step 3- Connect your device Step 4- In iFunBox Press "Managing App Data" Step 5- Click "Install App (*.ipa)" Step 6- Go to \Music\iTunes\iTunes Media\Mobile Applications\ Step 7- Click on the .IPA that we downloaded earlier from iTunes when it failed. Please Wait & Be patient Step 8- You now have the crackable app on your phone! (Do not open it & follow instructions) Cracking the app once you got the game app using iTunes (The methods above): Step 1- Go to Cydia and add this source: http://cydia.iphonecake.com/ Step 2- Go to search in Cydia and write "Rasticrac" Step 3- Select the one with yellow logo from Appcake (version: 3.3.4b) Step 4- Install it! Important - Make sure you have iFile. Get it from this source: http://sinfuliphonerepo.com/ Step 5- Install iFile from the source I gave you ( I use iFile Cracked/ Version: 2.2.0-1 ) Step 6- Open iFile Step 7- Navigate to /usr/bin/ Step 8- Find "rc.sh" and rename it to something you will remember ( I named it "cra" ) Step 9- Open up MTerminal Important - If you don't have MTerminal then get it from this source: http://apt.thebigbos...pofiles/cydia/ - I used version 1.4-5 because it works great on iOS 9.3.3 Step 10- In MTerminal write "su" then "alpine" Step 11- Write the name you gave to the rc.sh file, and I had named it "cra" so I will write "cra -m" in MTerminal Step 12- You should now see a bunch of apps after you wrote "cra -m" Step 13- Find the game and some game names don't match! --BulletForce is "iosfps"-- Step 14- Write the letter that is before the game name! Mine was "bs" Step 15- Goto iFile again Step 16- Navigate to /var/root/Documents/Cracked/ Step 17- Click on the .ipa and rename it to .zip at the end Step 18- Click on it and press "Unarchiver" --Please wait and be patient!-- Step 19- Now you should see a bunch of files should be extracted and click on Payload Step 20- Now click on "appname.app" in this case mine is "iosfps.app" Step 21- You should see a bunch of files & now scroll until you find the appname (mine is "iosfps" ) Step 22- Copy it Step 23- Paste it in /var/mobile & rename it to "2" Step 24- Go back to MTerminal & type this in order: "su" then "alpine" then "lipo 2 -thin armv7 -o iosfps3" Step 25- Go back to iFile and you should see in /var/mobile/ a new file named "iosfps3" or whatever app you were cracking Step 26- Click on (info) and change it's both Ownerships to "mobile" and the Access Permissions to 777 (Read,Write,Execute) Step 27- Now copy "appname3" the one you just edited, and I had named it "iosfps3" when we were writing lipo 2 -thin armv7 -o iosfps3 Step 28- Paste it in the game original directory mine is /var/mobile/containers/bundle/application/BulletForce/iosfps.app/ Step 29- rename original from "appname" to "appname1" just add something at the end Step 30- The one you just pasted rename it to the original name "appname" mine is "iosfps" Congratulations! You're done cracking and thining the binary and it's now ready to be placed in IDA PRO for hacking FAQ: Why I can't use Appstore from my device to download the app? - Your app will be sliced and only valid on your device or even won't crack at all! Why I can't find the original game directory there's a lot of numbers? - Download Filza from Cydia and compare the numbers (we call them bundle ID's) with iFile and you will find it eventually Please Hit that like button
  8. Thanks for the great tips
  9. Welcome to Looking forward seeing you!
  10. Just found something interesting... When cracking BulletForce (Clutch & Rasticrac) Says the app is called "iosfps". Also, you can't crack the app if it's downloaded from the Appstore... it will only work on your specific device. iTunes downloaded is Universal :D

    1. Show previous comments  5 more
    2. Archangel04

      Archangel04

      lol......... really? It cant be cracked BECAUSE ITS SLICED. Which is why it doesnt work on other devices.... Why does this need a tutorial

    3. Cycas

      Cycas

      Hmm then how Shmoo did..

    4. Archangel04
    5. Cycas
    6. Archangel04

      Archangel04

      mod menu isnt even related to this lol

  11. Hello, everyone! I have been trying to hack a few games but with no luck. Furthermore, when I open up a binary in IDA PRO everything is in sub_x. Also, how do you guys find the correct offsets? Could anyone help me live or send me some tutorials... I have no idea from where to start. Also, any good tutorials on quick patcher making and mod menu's? P.s can I watch someone in action hacking a game ? ammo,recoil... Looking forward to your reply's Br, Galmin
  12. Interesting...
  13. Cracking won't work if you don't download the app from iTunes on PC.
  14. i6:/var/mobile root# chmod 755 /usr/bin/Clutch i6:/var/mobile root# Clutch Usage: Clutch [OPTIONS] -b --binary-dump <value> Only dump binary files from specified bundleID -d --dump <value> Dump specified bundleID into .ipa file -i --print-installed Print installed applications --clean Clean /var/tmp/clutch directory --version Display version and exit -? --help Display this help and exit -n --no-color Print with colors disabled I don't see any game list after typing: "Clutch" This is the main reason I hate tutorials since they get outdated...
  15. Does this work? How did you manage to modify the data? P.S I tried it and didn't work... Very suspicious.... I checked the traffic and this doesn't go anywhere just saves in your website How did you make your website modify this stuff??... Please pm me... because now the developers are banning everyone.
  16. Who can help me to get back into hacking? Pm me. Haven't hacked since iOS 7 and forgot what tools are needed on iPhone.

    1. Joka

      Joka

      MS, MSHook or IDA?

    2. Galmin

      Galmin

      IDA & Making patchers.

    3. Amuyea

      Amuyea

      Check tutorial section

    4. Galmin

      Galmin

      Doesn't help...

       

  17. Will always miss Caoyin. He was the best cheater I've met and he was the only one to teach me how to hack with IDA Pro. He helped me to make Modern Combat 4 NoRecoil

    1. Show previous comments  2 more
    2. cu_rry

      cu_rry

      yo caoyin how r u

    3. Prophet91

      Prophet91

      Gal, I remember you I was one of teh admins there :) how have you been

    4. TheArmKing

      TheArmKing

      Sounded Like a farewell until I read the comments

    5. Galmin

      Galmin

      I've been great @Prophet91

      How about you? What was your nickname? :p

    6. Prophet91

      Prophet91

      It was Tombro I think, and I'm good

  18. Okay. I'll keep this private. Thanks! - Please lock this topic.
  19. Does anyone know how to modify an SQL value? Breakpoints? Also, can anyone recommend a better software to do SQL Injection because this trial is annoying I can't get anything to work...
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines