Jump to content

Infamous-Ash

ViP Jailed
  • Posts

    1,248
  • Joined

  • Last visited

Everything posted by Infamous-Ash

  1. Supported Devices (Cydia) iPhone 4s: iOS 9.2, 9.2.1, 9.3, 9.3.1, 9.3.2, 9.3.3, 9.3.4 iPhone 5 (GSM): iOS 9.3.3, 9.3.4 iPhone 5 (Global): iOS 9.1, 9.2, 9.2.1, 9.3.2, 9.3.3, 9.3.4 iPhone 5c (GSM): iOS 9.2.1, 9.3.2, 9.3.3, 9.3.4 iPhone 5c (Global): iOS 9.3.2, 9.3.3 iPad 2 (WiFi, GSM, CDMA, Mid 2012): iOS 9.1, 9.2, 9.2.1, 9.3, 9.3.1, 9.3.2, 9.3.3, 9.3.4 iPad mini (WiFi): iOS 9.2.1, 9.3.2, 9.3.3 iPad 3 (WiFi): iOS 9.3.4 iPad 3 (GSM): iOS 9.3.1 iPad 3 (CDMA): iOS 9.3.2, 9.3.3 iPad 4: iOS 9.2.1 iPod touch 5 (Experimental): iOS 9.1, 9.3.2, 9.3.3, 9.3.4 Requirements: 1. Pangu jailbreak IPA file NvwaStone_1.0.ipa available at HERE. Download the IPA. 2. Cydia impactor available at http://www.cydiaimpactor.com/. (Special Note: This tool, developed by Saurik, it is used to sign the ipa file so that Pangu jailbreak tool can be executed on iOS devices. Cydia impactors does not collect your apple id and password. All the information is only used for applying a personal free certificate from Apple.) 3. A computer (Cydia impactor runs on all major OSes, including Windows, OS X, and Linux) 4. A valid Apple ID. (In case that you do not want to use your current Apple ID to apply the personal certificate for any reason, we suggest you apply a new Apple ID and use it) Limitations: 1. An Apple ID can only apply for a certificate for a limited number of devices. 2. The certificate will expire in 7 days. If your certificate gets expired, you need to follow the guide to install the jailbreak IPA again. To Apple Developers: If you have enrolled the Apple developer membership, signing the IPA file with your own developer certification is a better choice (i.e., Pangu jailbreak app will get expired in 1 year, rather than 7 days). Jailbreak Tutorial: 1. Unzip the Cydia impactor file and run it. 2. Connect your iOS device to your computer and trust the computer on your iOS device. 3. Drag MixtapePlayer6.ipa into Cydia impactor app. 4. Click OK button to continue. 5. Input you email address( it’s your apple id) 6. Input your apple ID password. 7. Cydia impactor will automatically prepare everything based on your inputs and sign the IPA file. If everything is OK, the IPA file should be installed in your iOS device correctly. If you get error notifications, you probably input incorrect Apple ID or password. 8. On your device, Tap Settings > General > Device Management. You then see a profile for the developer under your “apple ID” heading. Tap the profile to establish trust for this developer. (An Internet connection is required to verify the app developer's certificate when establishing trust.) 9. On your device, find Home Depot App and run it. 10. Click on Jailbreak Your Device 11. Then Click accept 12. Then a Popup will appear but click dismiss. 13. Then Click On Proceed To Jailbreak. 14. Then it will come device supported popup and below that there will be Use Provided Offsets. 15. Click on Use Provided Offset and the jailbreak process starts. 16. Now after about 3 mins You will Have Cydia in your device. Credits: @@DiDA @Infamoush-Ash(I just added some lines,edited some stuff and did copy paesta of Didas tut on 9.3.3 jb tut)
  2. The same debug menu man same feature.Lol you did it so fast
  3. Really the same feature lol.
  4. um
  5. https://androidmtk.com/root-samsung-galaxy-s5-mini-sm-g800f
  6. Modded Game Name: Hill Climb Racing 2 Google Play Store Link:https://play.google.com/store/apps/details?id=com.fingersoft.hcr2&hl=en Rooted Device: Not Required. Mod Features: - Increase Gems While spending - Increase Coins While spending Hack Download Link: [Hidden Content] Installation Instructions: Step 1: Download the Modded APK file above using your favorite browser or a download manager of your choice. Step 2: Copy the file over to your Android device via USB or wirelessly. Skip this step if you're using your Android device to download the mod. Step 3: Browse to the location where the hacked APK is stored using a file manager of your choice. Step 4: Tap on the .APK file then tap 'Install' and the installation should begin. Step 5a: If the mod contains an OBB file, extract it if it's archived and copy the folder to /Android/obb. Step 5b: If the mod contains a DATA file/folder, extract it if it's archived and copy the folder to /Android/data. Step 6: Once the installation is complete, everything should be ready. Enjoy! Note: Make sure you have enabled 'Unknown Sources' in settings before installing the Modded APK. If you encounter issues, our Frequently Asked Questions topic may help you. Credits: -@ Mod Video/Screenshots: N/A
  7. nice fells so good to see you hacking again
  8. i havent taken any credit
  9. Intro: There's a bunch of tries to to decrypting lua but none of it isnt clear enough how to do it. I'm aware that this approach isnt good enough, because too much step that you'll not need to do but i'm still write it instead. Code in this tutorial ofcourse just bunch of copy-pasta stackoverflow. Prerequisites 1. Frida (optional) 2. Disassembler (IDA, r2, ..) 3. Python (optional) (I'll use python in this tutorial) 4. A little knowledge about this What will you need to do? 1. Get the KEY for decryption, 2. Write a script for decryption, 3. Edit the lua (Self explanation), 4. Encrypt back the file (Self explaination) (Same as step 2, but you'll encrypt instead of decrypt), 5. PROFIT. ---- Step by step ---- Get the KEY for decryption There's bunch of way to do it, some of them: 1. XREFS for XXTeaLuaLoader::setXXTeaKey(string), and you can see it clearly. Most used methods among many games. 2. Use Frida. I'll explain it on 2nd post. 3. http://forum.xda-developers.com/showthread.php?p=12853986#post12853986 4. etc.. You get the idea. Write a script for decryption This is an example of use for XXTEA encryption, requirements(xxtea-py) Code (Text): #!/usr/bin/env python import xxtea chiper = open("assets/script/fund.lua", "rb").read() out = open("out.lua", "wb") key = b'mrgj' out.write(xxtea.encrypt(chiper, key)) out.close()END Example of use of frida (https://github.com/antojoseph/frida-android-hooks) As described here, Opening the lua files with hex editor reveals that they use XXTEA block cipher. Analyze libjinqu.so and it blatantly shows the following decryption subroutines: xxtea_decrypt cocos2d::extra::CCCrypto::decryptXXTEA Get a pseudocode generator and copy the program in C++. . We need to put a hook either at xxtea_decrypt or cocos2d::extra::CCCrypto::decryptXXTEA. Then prints out the arguments passed. We know that args[2] is the one holding the pointer to key from decompile xxtea_decrypt lib.so Explaination, v9 is the one holding the chiper text, v30 chipertext len(?), v13 pointer to key, v14 is key.length. Its obvious if we want to leak the key we need to print args[3] bytes at args[2]. This is an example of use for it. #!/usr/bin/env python import frida import sys package_name = "com.gamebau.pq" def get_messages_from_js(message, data): print(message) jsc = """ Interceptor.attach (Module.findExportByName( "libgame.so", "xxtea_decrypt"), { onEnter: function (args) { console.log("----------------BEGIN----------------"); console.log(hexdump(Memory.readByteArray(args[2], 12),{ offset: 0, length: 12, header: true, ansi: true })); }, onLeave: function (retval) { console.log("Decrypt:"); console.log(hexdump(Memory.readByteArray(retval, 16),{ offset: 0, length: 16, header: true, ansi: true })); console.log("-----------------END-----------------"); } }); """ process = frida.get_usb_device().attach(package_name) script = process.create_script(jsc) script.on('message',get_messages_from_js) script.load() sys.stdin.read() profit, --Update, forgot to mention about this. Another note, some games tries to pack the assets with common file compressor. While loading it, it tries to unpack the assets on stream. As you can see on the image, its PK file header. With simple google search you can deduce its a zip alike compression. Try to extract the decrypted file with 7zip/Winrar/etc.. and you could see the unpacked file. Image: Credits: Wobm And Stack Overflow
  10. I am so much lazy that i dont want to even load up the binary into ida.Wish i was energetic.Give me power God Lulu.

    1. gone123

      gone123

      Error 404 Power not found

    2. 1Jakey

      1Jakey

      I'm so done. Hahahah

×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines