Jump to content

monkeyhunter

Senior Member
  • Posts

    152
  • Joined

  • Last visited

Everything posted by monkeyhunter

  1. Try again .... in think it was not approved
  2. Ida Pro 7.0 + All Decompilers Full Leak-Pass Download link: [Hidden Content] How to hack games using ida pro / ida pro tutorial Here is a good tutorial for anyone who is willing to learn what the arm assembly language is and how do you understand it.Steps of doing: 1. Check the Game --> What could be hacked? What names the functions could have?2. Load the Binary(lib file in lib folder) in IDA -->Check if load resources is checked3. Let the IDA time to load4. After that open up a Hexeditor and put the Binary in it______________________________________________Useful searches:(the big ones are the key words)Player's Life: life,health,damage,hp,live,powere.g: CSoldierHero::takeDamagee.g: CPlayer::removeHealthPoints: points,score,mpe.g: Game::UpdatePointse.g: Game::AddPointse.g: Game::loadScoreAmmo: ammo,shoot,shot,fire,weapone.g CPlayer:: ProcessShootinge.g CPlayer::firee.g xxx::subAmmoIf you have other things like 'speed' or 'suns' or something just try different optionsExtras:-level -->level up cheats-powerups -->megajump,doodlejump-some keywords depend on the game.. rpg,action,fun,...-kill -->splinter cell-Unlock --> Unlock is an important keyword *______________________________________________WHAT TO DO...?ADD(e.g score): set to MOV R0,#480000000*set the registers or the value after #xx to very highSUB(e.g ammo): change to ADD,NOP it. Or set the SUB to #0RSB(reverse subtract --take damage): NOP it or set the registers to low or try to change to an ADDLDR(e.g score,...): change the Register to Register 7(R7) or to an MOV R0,#480000000*STR(e.g setLife): Change the register to R7 or MOV R0,#480000000*SUBS/ADDS (same like SUB and ADD)______________________________________________CODES:ADD R3,R3 #1 -->01 30 83 E2SUB R3,R3 #1 --> 01 30 43 E2ADD R1,R3,R3 --> 01 30 83 E0SUB R1,R3,R3 --> 01 30 43 E0MOV R0,#48000000 = 12 03 A0 E3 -->very high value (you know the PvZ Hack where the sun turns into 9999? thats a MOV R0, #48000000)MOV R0,#1 = 01 00 A0 E3 (often used for functions like : isXXX or hasXXX (e.g: player::hasAllWeapons if you use an MOV R0,#1 it always returns the value 1 so you have all Weapons))MOV R0,#0 = 00 00 A0 E3 (often used for isXXX and hasXXX functions(e.g: player::needFood if you use MOV R0,#0 it always returns 0 , so you do not need food))2Byte BX LR : 7047 -->deletes a function2Byte Nop : C046 -->NOP = No operation4Byte BX LR : 1EFF2FE1 -->deletes a function4Byte Nop : 0000A0E1 -->NOP = No operation_____________________________________________________Branches:Above mostly all Branch commands there have to be a CMP(compare) and because of this CMP it branchese.g: BEQ(branch if equal) above: CMP R3,R2so it doesnt branch because R3 not equal to R2if CMP R2,R2 and then BEQ then it branchesBEQ = Branch if equal (cmp r2,r2)BNE = Branch if not equal (cmp r3,r11)BLT = Branch if lower than(cmp r2,r3)BGT = Branch if greater than(cmp r3,r1)_______________________________________________________ONE SENTENCE IS IMPORTANT: "try it!"Without trying you can't succeed.So go ahead and try!Plist editing - Hex editing - IDA HackingPlist: Just download some Games and rehack plistsHex: Download savefile and Compare and learn with it some hex.IDA: 1. Use the Offset DB and go with IDA to the Location. Check the function and what was changed. 2. Download some Binarys and Compare them. 3. Read TutorialsMy knowledge:BX LR - NOP - SUB - ADD - LDR - STR - MOV - RSBJust one last Thing: GDB isnt the horror. I dont like GDB. I can't work with it.I just sometimes use it for checking a functions and their registers(e.g when I don't know what registers are low in there and what high).Unlock:In Brothers in Arm: Hour of HeroesCSoldierHero UnlockAllWeaponsDouble click on it..Make an XRef from the Ttle of the function (highlight the function and press X)Then there should be an BNE(branch not equal) it branches if not equalIf you change it to and B(branch no conditions) it always branches and you have your weapons unlocked..This means yo can't change the function directly.. you have to check from where it comesBNE,BLT,BGT,BEQ --> B = Change the last byte to an EA if it is 4 Byte XX XX XX EABNE,BLT,BGT,BEQ --> B = Change the last byte to an E0 if it is 2 Byte XX E0CMPIf you hack ammo and you know there is a SUB Rx, Rx #1 which sumtracts your ammo the look above there should be a CMP.If there is a CMP which compares thesame register as the SUB subtracts then you are right and it could be the CMP that compares if Rx = 0IF Rx = 0 it reloads your gunso if you NOP (0100A0E1) the CMP it doesnt reload as it doesnt compare if Rx is equal 0You often find CMPs above Branches. This means you have two options: Either you make the BXX to only aB so it branches all the time(look at branches). Or you set the CMP as neede: e.g:BNE(BranchNotEqual) so it branches when the comparison result isnt equal --> CMP R2,R3 if R2 and R3 have different values it branches as they aren't equal. CREDITS- ME
  3. Download the latest Clash of Clans server files- [Hidden Content] Follow these steps to join the CoC Private Server: For Android Users: [Hidden Content] iOS Users: [Hidden Content] deryption key ? byaIhHmaTgfVJeoWDNf-vs2jHeuTMYSG_vs7hTBh4GY
  4. Thank you guys for helping me..... any idea how much time will it take .... and does semi restore needs shsh blobs because i deleted them by mistake
  5. Hello there just wanted to ask my iphone 7 plus 64 gb has 38 GB occupied by data and the storage does not even decrease after deleting all apps and photos ..... so can i reset my phone using the option in settings to erase all content and settings ...... and would it help I am jailbroken with electra v1.0.2
  6. iOS - permanent -Assasin’s creed identity, assasin’s creed pirates temporary -clash of clans , clashroyale , contest of champions, guns of boom
  7. Can you please send me a dropbox or drive or mega or any other upload site .... this shows invalid url thank you
  8. Please give me the link to the v2.6 ipa ... i will help you with the rest ... thank you
  9. Let me also see
  10. Is it server sided ...never played
  11. Let me try ....
  12. HOW TO INSTALL APPSYNC UNIFIED 6.1 ON IPHONE X AND BELOW Step 1 Download and install Electra 1.0.x on your iPhone, iPad, or iPod touch. Wait for it to install Cydia. Step 2 Once Cydia appears on your home screen, launch it. Step 3 Navigate to the Sources tab and tap Edit. Step 4 Tap Add and enter the following URL in the popup. Step 5 Tap Add Source to add Karen’s source to your device. It will now appear in the Sources section. Step 6 Go to the Search tab and search for “AppSync Unified”. Install the following AppSync Unified package from the results. Step 7 Wait for Cydia to finish the installation. Once the installation is complete, tap the Restart Springboard option to respring. If, for some reason, you can’t install the AppSync Unified package, remove all piracy repositories such as Sinful iPhone from Cydia
  13. FIXING RESPRING LOOP ON IOS 11-11.1.2 METHOD 1 press and hold power button and volume down button while in the respring loop Step 1 Reboot your device into no-jailbreak mode. Step 2 Launch Electra application from your home screen. Now before you press jailbreak, disable the Tweaks option Step 3 Press the Jailbreak button to put your device in jailbreak mode. This mode is the iOS 11 equivalent of the “No Substrate” mode that is a part of other tools. Your device will still run jailbreak while all installed tweaks will remain non-functional. Step 4 Once your Apple device is in jailbreak state, you can open Cydia from your home screen. Step 5 Go to the Installed tab and uninstall the problematic tweak manually. If you are unsure which tweak is causing issues, try removing tweaks (except core packages) one by one beginning from the latest installed tweak. Step 6 With the bogus tweak gone, reboot your device again. Step 7 Re-jailbreak using Electra after enabling the Tweaks option. METHOD 2 There are some cases when users are not even able to force restart their devices. If that’s the case, you are in a spot, because you can’t remove the bogus tweak without restarting. To fix this issue, let the battery drain and then try turning it on again. Alternatively, you can try a computer-based program like Reiboot or Recboot. Simply put your device in recovery mode and then kick out of this mode using any of these utilities.
  14. Tried ... not worked
  15. Is Open ssh stable on ios 11
  16. Hello guys on electra beta 11 i used an appstore app named i terminal to ssh into my phone and get the root acess without any pc ... the details i used were 127.0.0.1 22 root alpine And now they are now working ... any suggestions.....
  17. Can’t.... i don’t have vip...
  18. Didn’t the above method worked ..?
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines