-
Posts
769 -
Joined
-
Last visited
Everything posted by NotEriic
-
Help/Support How to find the right Function in IDA
NotEriic replied to NotEriic's topic in Help & Support
@, @ maybe you can, please? -
Hey Guys, i try since weeks to make everything free in "Kill Shot" I read and show so many Tutorials/ Videos. But nothing happens! So i ask me, edit i the right Function? What is the reason for it, how do i find the right function? Can anyone help me, immaterial youre Guy, Girl, Noob, Hack, Admin, Moderator, Tree... little Joke I really need your Help. BIG BIG Thanks in Advanced!
-
Thanks
-
Help/Support How to make everything free (free store) in IDA for Kill Shot?
NotEriic replied to NotEriic's topic in Help & Support
Hey @shmoo @iosv64 @ I can give you a List what i've done Step by Step 1. Crack the App with Rasticrac 2. Thin the Binary with Darwin CC Tools 3. Open the tiny File in IDA and serach for the Function that we found. 4. Edit and Save the Offset in Hex Editor to 0020 7047 5. Override the edited Binary with the Original and set Permissions to 0777/ mobile/ mobile 6. remove ASRL with the Tutorial from mikeby <- or so 6.1. Permissions changed to 0777/ root/ mobile 7. run GDB and set Breakpoints. 8. Going back to Game but nothing Happens! All Weapons are Cost! Same as before, but whats my Problem? I've do anything!! Can you please Help me? -
@Dida ... @DiDA!
-
http://prntscr.com/7uf45d<<---- Doenst work despite result Code 0 from iFile! And SendSpace is down @@DiDA
-
@mikeyb Thank you very very very much! My Game run now!!!! 100 Likes!!!
-
Help/Support How to make everything free (free store) in IDA for Kill Shot?
NotEriic replied to NotEriic's topic in Help & Support
ASLR is Removed with this Topic Tool. But now the App crashes. Edit: It works now after Reading Mikeby's Topic -
Help/Support How to make everything free (free store) in IDA for Kill Shot?
NotEriic replied to NotEriic's topic in Help & Support
I got it, Breakpoint 1 Set b *0x001F6CFC Breakpoint 2 Set b *0x001F6CFE c Game runs but nothing happens >.< The same problem as before, all Weapons are cost Gold/ Money. i thought the game is hacked after this -
General iOSGods Hacks Compilation [All the working hacks here]
NotEriic replied to Raggnar's topic in General Talk
Thanks -
Help/Support How to make everything free (free store) in IDA for Kill Shot?
NotEriic replied to NotEriic's topic in Help & Support
@z0ne @iOSv64 @@shmoo I got the Break Point in GDB for: MOV R0, #0 and BX LR and now?... When i switch to Kil SHot my Phone Freeze -
It does Bro, i cracked with it in 8.4 too
-
Try Rasticrac?!?
-
Help/Support Set a Breakpoint via GDB Failed!
NotEriic replied to NotEriic's topic in Help & Support
BIG Thanks for the time being! @@shmoo Clutch doesnt Work for me but i think ist works with Rasticrac just as Clutch. I install the App New from AppStore Mobile Terminal su Root Pass Rasticrac -m n Cracked succsessfully Called the ipa to zip unzip that Payload Binrawsniper Move Bin. to var/ mobile Going back to Mobile Terminal lipo Binrawsniper -t armv7 -o Binrawsniper....... BUT WITHOUT "7" is it wrong? Got the new Binary an Put it in /var/mobile/Container/Bundle/Binrawsniper Overwrite the Old Bin (38MB) with the New Bin (17MB) and set Permissions to 0777 -
BIG Thanks for the time being!!! Su Root PASSWORD for rum Clutch read the Tutorials in Forum!
-
Help/Support Set a Breakpoint via GDB Failed!
NotEriic replied to NotEriic's topic in Help & Support
Got this Error @@shmoo http://prntscr.com/7td07h You mean i've to install the App Brand New, than thin the Binary. aaaaand then Edit it with IDA after that with GDB to set Breakpoint? -
Help/Support Set a Breakpoint via GDB Failed!
NotEriic replied to NotEriic's topic in Help & Support
should i try this before?? okay, i'll try it later only new Apps or Updates too? -
Hey Guys i want so set a Breakpoint via GDB but i got a Error: Before, i edit the Binary in IDA succsessfully: http://iosgods.com/topic/11260-how-to-make-everything-free-free-store-in-ida-for-kill-shot/ Now i want to set a Breakpoint with GDB: Open Kill Shot Open Mobile Terminal su root password gdb att Binrawsniper b *0x001F6CFC Error: warning: Unrecognized osabi 0 in arm_set_osabi_from_host_info http://prntscr.com/7t562r can anybody help me please?
-
Why is "0xbf5bc" -> "0xE0811003" is this Arm to Hex?? @@shmoo & @DiDA
-
Help/Support How to make everything free (free store) in IDA for Kill Shot?
NotEriic replied to NotEriic's topic in Help & Support
And how to mke a Break Point in IDA? Sorry its my first Time -
Help/Support How to make everything free (free store) in IDA for Kill Shot?
NotEriic replied to NotEriic's topic in Help & Support
@shmoo Big Thanks, but it doenst work Only all my Weapons are now unlocked but they costs money/ gold. That is not my target -
This is the GetPrice function: __text:001F6CFC __text:001F6CFC PUSH {R4-R7,LR} __text:001F6CFE ADD R7, SP, #0xC __text:001F6D00 PUSH.W {R8,R10,R11} __text:001F6D04 SUB.W SP, SP, #0x390 __text:001F6D08 MOV R11, R2 __text:001F6D0A MOV R4, R1 __text:001F6D0C MOV R6, R0 __text:001F6D0E BL __ZL27SalesAgentStringsInitializev ; SalesAgentStringsInitialize(void) __text:001F6D12 MOVW R0, #(:lower16:(aTuningdata - 0x1F6D28)) ; "TuningData" __text:001F6D16 MOVS R2, #0 ; char * __text:001F6D18 MOVT.W R0, #(:upper16:(aTuningdata - 0x1F6D28)) ; "TuningData" __text:001F6D1C MOV R1, #(aSniperTuningPr - 0x1F6D2A) ; "sniper/tuning/prices" __text:001F6D24 ADD R0, PC ; "TuningData" __text:001F6D26 ADD R1, PC ; "sniper/tuning/prices" __text:001F6D28 MOVS R5, #0 __text:001F6D2A BL __ZN9CachedDoc17RetrieveCachedDocEPKcS1_S1_ ; CachedDoc::RetrieveCachedDoc(char const*,char const*,char const*) __text:001F6D2E CBZ R0, loc_1F6D50 __text:001F6D30 MOVW R1, #(:lower16:(__ZTI9CachedDoc_ptr - 0x1F6D46)) __text:001F6D34 MOVS R3, #0 __text:001F6D36 MOVT.W R1, #(:upper16:(__ZTI9CachedDoc_ptr - 0x1F6D46)) __text:001F6D3A MOV R2, #(__ZTI9PricesDoc_ptr - 0x1F6D48) __text:001F6D42 ADD R1, PC ; __ZTI9CachedDoc_ptr __text:001F6D44 ADD R2, PC ; __ZTI9PricesDoc_ptr __text:001F6D46 LDR R1, [R1] ; `typeinfo for'CachedDoc __text:001F6D48 LDR R2, [R2] ; `typeinfo for'PricesDoc __text:001F6D4A BLX.W ___dynamic_cast __text:001F6D4E MOV R5, R0 __text:001F6D50 __text:001F6D50 loc_1F6D50 ; CODE XREF: SalesAgent::GetPrice(char const*,char const*,char const*,double)+32j __text:001F6D50 MOV R0, R5 ; this __text:001F6D52 BL __ZN12CachedObject10GetJSONMapEv ; CachedObject::GetJSONMap(void) __text:001F6D56 MOVW R2, #(:lower16:(aData - 0x1F6D66)) ; "Data" __text:001F6D5A MOV R1, R0 __text:001F6D5C MOVT.W R2, #(:upper16:(aData - 0x1F6D66)) ; "Data" __text:001F6D60 ADD R0, SP, #0x3A8+var_54 __text:001F6D62 ADD R2, PC ; "Data" __text:001F6D64 BL __ZN7JSONMapixEPKc ; JSONMap::operator[](char const*) __text:001F6D68 MOVW R0, #(:lower16:(_StringTable_ptr - 0x1F6D78)) __text:001F6D6C MOV R1, R6 ; char * __text:001F6D6E MOVT.W R0, #(:upper16:(_StringTable_ptr - 0x1F6D78)) __text:001F6D72 MOVS R2, #1 ; bool __text:001F6D74 ADD R0, PC ; _StringTable_ptr __text:001F6D76 LDR R5, [R0] ; _StringTable __text:001F6D78 LDR R0, [R5] ; this __text:001F6D7A BL __ZN12_StringTable6insertEPKcb ; _StringTable::insert(char const*,bool) __text:001F6D7E MOV R1, #(dword_D01260 - 0x1F6D8A) __text:001F6D86 ADD R1, PC ; dword_D01260 __text:001F6D88 LDR R2, [R1] __text:001F6D8A CMP R0, R2 __text:001F6D8C BEQ loc_1F6D9E __text:001F6D8E LDR R1, [R1,#(dword_D01274 - 0xD01260)] __text:001F6D90 CMP R0, R1 __text:001F6D92 BEQ loc_1F6E0C __text:001F6D94 STR R6, [sP,#0x3A8+var_3A0] __text:001F6D96 MOVS R6, #0 __text:001F6D98 STMEA.W SP, {R5,R11} __text:001F6D9C B loc_1F6E7A __text:001F6D9E ; ---------------------------------------------------------------------------
-
Tweak Fruit Ninja [Universal] Cheats +3
NotEriic replied to Chrizk0's topic in Free Jailbreak Cheats
Thanks -
Thx
-
Hack Minions Paradise™ v2.0.1273 (Doubloons Cheat!)
NotEriic replied to ipaarchive.com's topic in ViP Cheats
Ty