Drivium

Long story short, I have a jailed iPhone with Trollstore. I want to mod an app to sideload. It must be possible to mod ipa's via hex, I just don't know what to look for. See the attached screen shots. Hoping someone can help me understand what FLEX reads behind the scenes so I can do it manually in hex. Such as what pass-through, True, and False look like in the code. Thanks in advance! FLEX tweak: https://imgur.com/QinDxWD Example of 1 of 3 entries found in hex: https://imgur.com/YTZlECL The exe I opened in HxD: https://imgur.com/xFOMSaD

Surprised there are no takers. I use this app almost daily on my jb device.

Forgot to include a link for the streamer client: https://www.splashtop.com/streamer (Splashtop Personal)

Name of the app you want hacked: Splashtop Personal Version of the app: 3.5.2.3 (or whatever is latest) iTunes Link for the app: https://apps.apple.com/us/app/splashtop-personal/id382509315 or https://apps.apple.com/us/app/splashtop-personal-for-iphone/id561386772 Jailbroken or Non-Jailbroken: non-jailbroken Requested Features: I made this flex hack a few years ago: FLEX Hack: Add bool AAEnable and set to true. This gives the user free remote desktop access (normally a premium feature). From what I've read you'd need to know how to: 1) Convert the flex hack into a deb 2) decrypt the ipa 3) inject the deb into the ipa Moving from a jb device (iPhone 7 on iOS 10.3.2) to a jailed device (iPhone 12 / iOS14.8). Hopefully, works on latest version. Latest version I can confirm working is 3.3.401 (max version compatible with my jb device). You’d need the Splashtop streamer on your pc to test. It’s free. Then to test app, disconnect from wifi and try to connect to your PC. If it works, works. Would be grateful for the hack!

yaY

thx

Same issue with iPhone 5 and H3lix: ERROR: HTTPSConnectionPool(host='idmsa.apple.com', port=443): Max retries exceeded with url: /IDMSWebAuth/clientDAW.cgi (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available."))

I'm having the same issue. Attempting to jb iPhone 5 with H3lix. Also tried "Don't use Anisette authentication" in advanced options and got this error: ERROR: HTTPSConnectionPool(host='idmsa.apple.com', port=443): Max retries exceeded with url: /IDMSWebAuth/clientDAW.cgi (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available.")) Edit: Solved this particular issue by disabling windows antivirus first and checking "Jailbreak-only mode". Now getting this error: Installation failed: 3892346908 ApplicationVerificationFailed (Failed to verify code signature of /private/var/installd/Library/Caches/com.apple.mobile.installd.staging/temp.esZdRg/extracted/Payload/h3lix.app : 0xe800801c (No code signature found.)) ERROR: 3892346908: ApplicationVerificationFailed (Failed to verify code signature of /private/var/installd/Library/Caches/com.apple.mobile.installd.staging/temp.esZdRg/extracted/Payload/h3lix.app : 0xe800801c (No code signature found.)) I'll research it.

Crashing on iOS 10.3.x. Are there any working cheat tools for iOS 10.3.x?

thx

Thx

Newly JB'd iPhone 7 on 10.3.2 w/Meridian. After I install Street Fighter II Collection and Fragger 2 via AppCake, they both crash on open. Any idea why they might be failing? Is there an issue cracking apps on iOS 10? Maybe a 64bit vs 32bit thing? iOS 10 is supposed to support both. Also, AppSync Unified v24 installed. Anything newer and AppCake fails to install IPA's at all. Any help would be awesome. Gotta have my SFII Collection!!! thx!

thx

I never got it to work. Same error. Also, stashing does not seem to be an option for my device.

Latest version tested with is 2.6.1. Added to OP. I can NOW confirm, that if you're using version 2.6.1 and make the mods THEN update, your mods will carry over. **EDIT1: Looks like the character/level modding still stands. Looks like the method for modding values may have changed, but may still be possible. Investigating. **EDIT2: Latest version I'm seeing is 2.6.5 and the same mods are still applicable. You sure you didn't overlook them? I don't know if it matters, but I am on a 32bit device, so perhaps the latest 32bit version of the app is different than the latest 64bit version?

thx

I are good. BTW, you rule.

Name of the game you want hacked: Doodle Bowling Version of the game: 2.0 iTunes Link for the app: https://itunes.apple.com/us/app/doodle-bowling/id354065959?mt=8 Jailbroken or Non-Jailbroken: Jailbroken Requested Features: All levels unlocked OR 9999 Stars

First I've heard of this effect. Double check you've got the correct settings.

Ok, I'll clarify that in the OP. Thx.

Tested w/Talking Tom Gold Run v1.6.0.14 (applies through version 2.6.5) The file we'll be modding is: com.outfit7.talkingtomgoldrun.plist The actual path may vary for your specific device, but for me it's located here: /private/var/mobile/Containers/Data/Application/ABA28679-D4B4-4E57-8E4C-3BAFB12911EA/Library/Preferences Use your preferred file explorer to view. I used Filza. You may need to disable internet access before modding. I didn't and it still worked, but if the mods fail to stick, it's something you could try. Also, be sure to fully close the game before modding. =================================== Modding Values Scroll down until you find UserState.CurrencyState and open. Inside, you'll see something that resembles this: {"accounts":[ {"id":"bar-gold", "balance":"12420582"}, {"id":"dynamite", "balance":"184603"}, {"id":"magnet", "balance":"996189"}, {"id":"helmet", "balance":"996419"}, {"id":"plane", "balance":"995689"}, {"id":"vault", "balance":"999999"}, {"id":"diamond", "balance":"994679"}, {"id":"doubler", "balance":"995839"} ], "paidUser":"false", "facebookLikeRewarded":"false", "facebookLoginRewarded":"false", "vKontakteSubscribeRewarded":"false", "vKontakteLoginRewarded":"false", "twitterFollowRewarded":"false", "newsletterRewarded":"false", "pushRewarded":"false", "youtubeRewarded":"false"} Simply mod the corresponding "balance" and save. -------------------- Modding Characters Scroll down until you find LocalState.cS and open. Inside, you'll see something that resembles this: {"cs":{"s":[ "cyber_angela" ], "u":[ "angela", "hank", "ginger", "ben", "tom2", "angela2", "police_tom", "police_angela", "police_hank", "agent_tom", "super_tom", "super_angela", "hyper_tom", "cyber_angela", "king_tom", "hawaiian_hank", "cowboy_tom", "valkyrie_angela", "pirate_ginger", "cowboy_angela", "fireman_tom", "zombie_ben", "splashy_tom", "elf_angela", "kungfu_hank", "princess_angela", "astronaut_tom" ], "uLs":[ [ "14", "4", "3", "4" ], [ "4", "4", "4", "14" ], [ "5", "5", "14", "6" ], [ "6", "14", "6", "6" ], [ "9", "9", "8", "8" ], [ "14", "7", "7", "12" ], [ "8", "8", "14", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "9", "14", "15", "9" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ], [ "15", "15", "15", "15" ] ]}, "ys":{"s":[ "yard_tom2" ], "u":[ "yard_angela", "yard_hank", "yard_ginger", "yard_ben", "yard_angela2", "yard_tom2", "yard_hank2" ], "nU":[ "yard_angela", "yard_hank", "yard_ginger", "yard_ben", "yard_angela2", "yard_tom2", "yard_hank2" ], "uLs":[ [ "5", "2", "0", "0" ], [ "1", "0", "0", "0" ], [ "0", "0", "0", "0" ], [ "0", "0", "0", "0" ], [ "0", "0", "0", "0" ], [ "0", "0", "0", "0" ], [ "0", "0", "0", "0" ], [ "0", "0", "0", "0" ], [ "0", "0", "0", "0" ], [ "0", "0", "0", "0" ] ]}} The area bolded is the area you'll add the character names. For the version I'm running (v1.6.0.14), the string above unlocks all characters. Newer versions will likely have more characters to add. To know what their actual names are, scroll down in the main plist until you see headers that begin with "iap.com.outfit7.talkingtomgoldrun..." Example Screen Shot 1. Each one of these contains the string name for the unlockables/earnables. For example, here is the string for Officer Tom. "police.tom" becomes "police_tom". Basically, just replace the period with an underscore in LocalState.cS. ======================= The version I tested with is pretty old. Someone let me know if this works with newer versions. If this helped you, show me some love with a like!

I searched around and found multiple conflicting answers, some of which caused more problems for the user. One involved stashing and another involved updating Cydia. From what I've read, both are risky. I think I'll try to update Cydia.

Flex 3 Beta (46) from getdelta.co installs, but has this error while installing and crashes on open. iPhone 5 iOS 10.3.3 jb/w H3lix. Screenshot

After a TON of experimenting, I think I've found a way to bypass the forced UFC update. 1. Create a new UFC patch 2. Add Units: Under Libraries, select UIKit << Its the last option 3. Search for UIAlertView and scroll down until you find: Class: UIAlertView method: -(id) initWithFrame: (CGRect) 4. Add it 5. Set to Null 6. Switch on patch. Tested with UFC 2.8

thx