Solved IDA pro binary/hex hacking Help

0xNoctis · June 9, 2020

hello so im Trying to hack An IPA as i have Only ever does it once and im confused    Just for fun and to get better i cant seem to make this Unlimited Energy Can i get Some Help

IDA offset and function is this 101BA51E8 STP X20, X19, [SP,#-0x10+var_10]! But i think i only need     STP X20, X19

My offset/hex for live offset Patcher is   offsets:{0x101BA51E8}    bytes:{0x0090261EC0035FD6}]; 0090261EC0035FD6 will make me have unlimited energy but how would i get that in hex and change it for IDA so it will be unlimited when i install the IPA for non jailbreak Users

the Hex for STP x20 x19 in IDA hex view is F4 4F BE A9 i Place this into Armconverter well hex to arm and i get a bunch of Stuff

Arm64 stp x20, x19, [sp, #-0x20]!

ARM -> ldmibge lr!, {r2, r4, r5, r6, r7, r8, sb, sl, fp, lr}

ARM big endian -> .BYTE 0xf4, 0x4f, 0xbe, 0xa9

THUMB -> ldr r7, [pc, #0x3d0] and add r1, sp, #0x2f8

THumb big endian -> b.w #0xffc4fd56

Could some please take the time to Explain to me what exactly i need do in IDA or hex workshop to get unlimited Energy much appreciated

Updated June 9, 2020 by Noctisx

Zahir · June 9, 2020

I am not entirely sure about your questions but I assume this: offsets:{0x101BA51E8} bytes:{0x0090261EC0035FD6}];

already works. So you want to modify the IPA so it works for Non-Jailbroken users.

If you want to modify the IPA, you need to get the binary and open it in some hex editor like HxD, etc.

Then go to that offset (101BA51E8) in HxD, it may have different file address so better check in IDA at the bottom left address.

Then if you compare the Hex-View in IDA and HxD, you will notice they should both be same. Put the hack hex in that address and save it. Then copy your new binary into IPA and it should work fine.

0xNoctis · June 9, 2020

On 6/9/2020 at 3:42 PM, Zahir said:

I am not entirely sure about your questions but I assume this: offsets:{0x101BA51E8} bytes:{0x0090261EC0035FD6}];

already works. So you want to modify the IPA so it works for Non-Jailbroken users.

If you want to modify the IPA, you need to get the binary and open it in some hex editor like HxD, etc.

Then go to that offset (101BA51E8) in HxD, it may have different file address so better check in IDA at the bottom left address.

Then if you compare the Hex-View in IDA and HxD, you will notice they should both be same. Put the hack hex in that address and save it. Then copy your new binary into IPA and it should work fine.

Expand

How would I get The hack hex tho that’s what I’m confused about

On 6/9/2020 at 3:43 PM, Noctisx said:

How would I get The hack hex tho that’s what I’m confused about

Expand

Or is it legit just 0090261EC0035FD6

Zahir · June 9, 2020

On 6/9/2020 at 3:43 PM, Noctisx said:

Or is it legit just 0090261EC0035FD6

Expand

Yes, it's exactly same as the hex you put for live patcher.

0xNoctis · June 9, 2020

On 6/9/2020 at 3:46 PM, Zahir said:

Yes, it's exactly same as the hex you put for live patcher.

Expand

Weird cause I’m pre sure I did that and when I compiled it all back to ipa and installed it would open load them crash

Zahir · June 9, 2020

On 6/9/2020 at 3:47 PM, Noctisx said:

Weird cause I’m pre sure I did that and when I compiled it all back to ipa and installed it would open load them crash

Expand

Did you sign the IPA?

0xNoctis · June 9, 2020

On 6/9/2020 at 3:48 PM, Zahir said:

Did you sign the IPA?

Expand

Idk I just installed it with FILZA

Zahir · June 9, 2020

On 6/9/2020 at 3:51 PM, Noctisx said:

Idk I just installed it with FILZA

Expand

I don't think you can do that anymore. Use iOSGods+ if you have it.

I would try using AppSync if you don't have it installed,

0xNoctis · June 9, 2020

On 6/9/2020 at 3:54 PM, Zahir said:

I don't think you can do that anymore. Use iOSGods+ if you have it.

I would try using AppSync if you don't have it installed,

Expand