Jump to content

0xSolana

Contributor
  • Posts

    762
  • Joined

  • Last visited

Everything posted by 0xSolana

  1. mhhh then they encrypted the strings... well i have no idear about what you try atm... maybe in this case just navigate to all namespaces and classes trough the .dll using DnSpy, but this takes a lot of time
  2. have you tried to search for the strings that the pop up shows inside iDA string view ?
  3. Mhh it seems to be acting like this : bool _fb_is_jailbroken(ID param_1,SEL param_2) { if (the check has determine that your device is JB) { alert("your device is JB"); return true; } return false; } (my analysis only) I would return false. As i said, i think the class CheatDetection is useless, i think it uses other thing to determine if jailbreak or not. Have you checked method names containing Jaibreak/root keywords ?
  4. these raining days are boring... do you have nice Netlix movies or series to watch ? :popcorn:

    1. Show previous comments  8 more
    2. Rook
    3. Laxus
    4. TimidNova

      TimidNova

      @Laxus The show "You". It's really good

    5. quatorze

      quatorze

      Money Heist, Platform, Wednesday 

    6. Zamen7

      Zamen7

      Do what I do enter the search bar close your eyes and spam letters then pick what ye see

  5. Mhhh i am not sure that this class is usefull for JB détection... It seems dealing with "real cheat" but, if it's whatever dealing with JB, i would NOP / RET all of theses meth/functions. All of them have obfuscated parameters, it's hard to know with what it's dealing. and also, ive search for this class online and it seems to be private, there is no documentation from Unity3D about it...
  6. Have you first tried FlyJb X ? If you open the game, and enable FlyJb after its useless since the game will store that you are Jailbreak. Steps : 1) Delete the game. 2) Re install it BUT DON'T OPEN IT 3) Open FlyJb and from there, enable ur app. you can use A-bypass if you want, i use FlyJB but use any good alternatives. 4) Open your game If that didn't work, you probably need to work with DnSpy... Afaik you can't NOP a class, try to look functions / methods, maybe bool functions store if you are jailbreak or no. You can also search for function names containing "jailbreak", "root". I think the first method should work tbh, but if not good luck for the second one, it's gonna be a lot of work to test them
  7. use Laxus link to test if you have the right offset, than you can use theos to compile them and make a nicely mod menu, you can use Ted2 template, it's great documented and not complicated to use. There is also theos installation tutorial. in the tutorial section
  8. disable your orientation lock before open the game
  9. https://iosgods.com/topic/130167-windowsmacosm1wi-fi-introducing-sideloadly-working-cydia-impactor-alternative/
  10. tu as telecharger avec l'appli iosgods ou sideloadly ? dans tout les cas je pense que le certificat est perimé, tu peux resigner avec sideloadly, il y a des tutos a propos de ça sur iosgods
  11. Well, now it's part 3 of the tutorial series . Part 2 here if you haven't seen it yet. In this tutorial, we gonna see hooking, it's usefull when you need to return a specific value, without having to check de hex value of it. Since critical Strike has again been updated, v11.452 is outdated. I'm gonna use v11.604 I let you load your DLLs in DnSpy and we meet right after. Lets Start ! Requirements: - Jailbroken iPhone/iPad/iPod Touch. - Filza - DnSpy - Theos - Ted2 Theos template - Critical Strike v11.604 - ARM notions. [Hidden Content]
  12. Suggestion : - Ability to connect an Apple ID account to decrypt apps from there (for example paid apps) There are a lot of public Apple ID account shared in Telegram (working only for App Store), where you can connect and install apps (for example one of them has all GTA purchased) - And why not, if the first option is possible, sharing the iPA in the Decrypted AppStore website, so that anyone typing "GTA" get the iPA ? I don't know if this can compromise the privacy data that iosgods puts in place
  13. removing ASLR is not possible since a few years, but you can use getRealOffset, and it should work topic about ASLR in recent iOS version
  14. iOS 15.0 - 15.1.1 will have a Jailbreak with tweaks workingggg ! not only just sileo installed and a term 

  15. hum not really, im not an iDA fan atm, better ask puddin
  16. i have updated the topic, and published another version without crash new version has been published for fix that
  17. basically a game server sides only important things, otherwise it would use to much 4G and if bad wifi, some lags. for an FPS game for example, they will never server side the recoil value, for the reason ⬆️. but currency is just a simple value in a server, so it can be done. so as Puddin said, you can cheat other methods that may or may not work for a SS game
  18. mhhh mhhhhhh
  19. if im right : H5GG/iGG offset - iOS ASLR offset = "réal offset". tho it might not be the real offset function, it will be the offset of the instruction that will load the value to mem, but function might be near it
  20. @tuancc H5GG is really good regarding fast UI, and offset patching. For hooking too but i could only hook func types with bool, double,... but not methods (private void Update(): for example). Could you give examples of doing that or correct me ? i tried this : //private void infiniteLife(float Amount); == 0x2214DA0 function frida_script() { if(arguments.length) return new Error().line; var getLife = h5frida.StaticInlineHookFunction("Frameworks/UnityFramework.framework/UnityFramework", 0x2214DA0, "void", ["pointer", "float"], function(thiz, life) { //TODO send("void has been hooked"); return getLife(thiz, life); } ); } Thanks
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines