Jump to content

H5GG Full Tutorial [Offset Patching + Hooking] for Non-Jailbroken/Jailbreak Devices !


130 posts in this topic

Recommended Posts

Posted
11 minutes ago, papastweak said:

Haven't tested hooks yet but code patching works! Tested on Iphone 12 Pro Max, 16.1.2

that's cool, could you edit your answer and tell me if hook works ? :)

Posted
40 minutes ago, ꞋꞌꞋꞌꞋꞌꞋꞌ said:

edit :

oh you mean the UnityFramework patched ? well i didn't looked at the data at the offset 0x1B...98, but it's seems normal to me that's it's not 2000...FD6, otherwise it will always be enable. i think that it creates another function on the UnityFramework (at another place) and at 0x1B...98, it calls it.

so if there is no script running, we shouldn't be able to jump always, but when we load our script, it probably jump to our created function in the UnityFramework, and so it return 2000..FD6 at our function (maybe at 0x264ab4c) and if we unload the script, the original bytes in the memory will load again making "normal jumps"

 

(this is my personal analysis, it may not be 100% right but this is how i visual it) 

video https://streamable.com/5g6nvz

So, it could be my concept is wrong from beginning.
First time the script run, we, in fact, expect the alert come and provide a patched version of the UnityFramework inside the static-inline-hook folder.

The patched version of UnityFramework has embedded a new function inside. 
 

From we call the ActiveCodePatch or StaticInlineHookFunction the second time onwards, it starts to take effect.

 

First run is just to prepare the Framework (insert function). The real effect happens when we use the patched framework with the function call to enable/disable.

 

Let me test it our again later tonight.

Thanks for the help.

Posted
2 minutes ago, Happy Secret said:

So, it could be my concept is wrong from beginning.
First time the script run, we, in fact, expect the alert come and provide a patched version of the UnityFramework inside the static-inline-hook folder.

The patched version of UnityFramework has embedded a new function inside. 
 

From we call the ActiveCodePatch or StaticInlineHookFunction the second time onwards, it starts to take effect.

 

First run is just to prepare the Framework (insert function). The real effect happens when we use the patched framework with the function call to enable/disable.

 

Let me test it our again later tonight.

Thanks for the help.

yep you are right ! 

welcome !

Posted
57 minutes ago, namcyeon said:

I had tried hooking, but it's not working 😑, stuck at 

if(!h5frida.loadGadget("frida-gadget-15.1.24.dylib"))

if this get you an error, you didn't have placed the file in the .app folder, or you have renamed it

Posted

Have you tried instance variable hook? Does it work?

37 minutes ago, ꞋꞌꞋꞌꞋꞌꞋꞌ said:

if this get you an error, you didn't have placed the file in the .app folder, or you have renamed it

 

Posted
5 hours ago, ꞋꞌꞋꞌꞋꞌꞋꞌ said:

yep you are right ! 

welcome !

I have just test it again and finally worked.

it is really 

  • First run is just to prepare the Framework (insert function). The real effect happens when we use the patched framework with the function call to enable/disable.

You will probably want to include a hint/note to your tutorial about this.

The error message is not sufficient. It can’t explain what to expect.

 

Anyway, it is not the type of in memory hook/patch that I expect. It requires a repackage and redeployment for non-jailbroken.

Hope there is a way to do pure in memory hook / patch (without modifying the binary).

 

Did Frida allow us to do that? I used to test patches with Xcode (LLDB), but it requires a PC connection.

Posted
16 minutes ago, Happy Secret said:

I have just test it again and finally worked.

it is really 

  • First run is just to prepare the Framework (insert function). The real effect happens when we use the patched framework with the function call to enable/disable.

You will probably want to include a hint/note to your tutorial about this.

The error message is not sufficient. It can’t explain what to expect.

 

Anyway, it is not the type of in memory hook/patch that I expect. It requires a repackage and redeployment for non-jailbroken.

Hope there is a way to do pure in memory hook / patch (without modifying the binary).

 

Did Frida allow us to do that? I used to test patches with Xcode (LLDB), but it requires a PC connection.

Yep, but here are the basics, after that you can make an HTML Mod Menu and create a dylib that contains your HTML + JS. then you can inject it on an iPA and you wont need to inject the script or anything.

Since Non-JB doesn't have the same permission as a JB Device, i don't think Frida let you hook like on JB.

10 minutes ago, namcyeon said:

@Happy Secret You can try second method with hook, but it's not working with me.

can you provide more details ?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Backpack Rush v1.682.213 [ +20 Cheats ] Currency Max
      Modded/Hacked App: Backpack Rush By Noodle Games Limited
      Bundle ID: com.onicore.backpack.rush
      iTunes Store Link: https://apps.apple.com/us/app/backpack-rush/id6736857029?uo=4

      Hack Features:
      - ADS Ticket

      - Gems

      - Gold

      - Energy

      - Silver Coins [ Merge Weapons ]

      - Summon Coins

      - Heroic Water [ Hero Up ]

      - Meteor Essence [ Gear Refining ]

      - Talent Book +2

      - Core Evo Stone [ Pet Evo Up ]

      - Fish Hook [ Obtain Gear During A Voyage ]

      - Pickaxe [ Mine ]

      - Blueprint [ Outfit Equip UP ]

      - Fragment [ Gear Up ]

      - Fragment [ Pet UP ]

      - Dungeon Keys +3

      - Spin

      - Enemy Status [ HP ATK 0 ] Easy Kill

      - DMG [ Outfit Just Equip & Unequip ]

      - HP [ Outfit Just Equip & Unequip ]


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
      • 40 replies
    • Backpack Rush v1.682.213 [ +20 Jailed ] Currency Max
      Modded/Hacked App: Backpack Rush By Noodle Games Limited
      Bundle ID: com.onicore.backpack.rush
      iTunes Store Link: https://apps.apple.com/us/app/backpack-rush/id6736857029?uo=4

      Hack Features:

      - ADS Ticket

      - Gems

      - Gold

      - Energy

      - Silver Coins [ Merge Weapons ]

      - Summon Coins

      - Heroic Water [ Hero Up ]

      - Meteor Essence [ Gear Refining ]

      - Talent Book +2

      - Core Evo Stone [ Pet Evo Up ]

      - Fish Hook [ Obtain Gear During A Voyage ]

      - Pickaxe [ Mine ]

      - Blueprint [ Outfit Equip UP ]

      - Fragment [ Gear Up ]

      - Fragment [ Pet UP ]

      - Dungeon Keys +3

      - Spin

      - Enemy Status [ HP ATK 0 ] Easy Kill

      - DMG [ Outfit Just Equip & Unequip ]

      - HP [ Outfit Just Equip & Unequip ]

       
      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 40 replies
    • Zooba: Zoo Battle Royale Game v5.23.0 Jailed Cheats +2
      Modded/Hacked App: Zooba: Zoo Battle Royale Games By Wildlife Studios Limited
      Bundle ID: com.fungames.battleroyale
      iTunes Store Link: https://apps.apple.com/us/app/zooba-zoo-battle-royale-games/id1459402952?uo=4


      Hack Features:
      - Map Hacks
      - Allow Shoot in Water


      Jailbreak required hack(s): https://iosgods.com/topic/131104-arm64-zooba-zoo-battle-royale-game-cheats-all-versions-2/


      iOS Hack Download Link: https://iosgods.com/topic/131134-arm64-zooba-zoo-battle-royale-game-v320-jailed-cheats-2/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,320 replies
    • [ ReDive TW ] 超異域公主連結!Re:Dive Cheats v5.2.0 +2
      Modded/Hacked App: 超異域公主連結!Re:Dive By So-net Entertainment Taiwan Limited
      Bundle ID: tw.sonet.princessconnect
      iTunes Store Link: https://apps.apple.com/tw/app/%E8%B6%85%E7%95%B0%E5%9F%9F%E5%85%AC%E4%B8%BB%E9%80%A3%E7%B5%90-re-dive/id1390473317?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Multiply Attack
      - Multiply Defense

       

      Non-Jailbroken Hack: https://iosgods.com/topic/186660-redive-tw-%E8%B6%85%E7%95%B0%E5%9F%9F%E5%85%AC%E4%B8%BB%E9%80%A3%E7%B5%90%EF%BC%81redive-hack/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/134431-redive-tw-%E8%B6%85%E7%95%B0%E5%9F%9F%E5%85%AC%E4%B8%BB%E9%80%A3%E7%B5%90%EF%BC%81redive-cheats-v500-3/
        • Agree
        • Like
      • 276 replies
    • My Private Kitchen Dream v1.8.4 [Unlimited Diamonds]
      Modded/Hacked App: My Private Kitchen Dream By IFLYTEK (HONG KONG) COMPANY LIMITED
      Bundle ID: com.xfgames.privatekitchen
      App Store Link: https://apps.apple.com/us/app/my-private-kitchen-dream/id6502279383?uo=4

       

      📌 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🤩 Hack Features

      - Unlimited Diamonds

       

      ⬇️ iOS Hack Download IPA Link: https://iosgods.com/topic/189759-my-private-kitchen-dream-v184-unlimited-diamonds/
      • 12 replies
    • Yukon: Family Adventure v1.64.0 [ +4++ Cheats ] Everything Unlimited
      Modded/Hacked App: Yukon: Family Adventure By Enixan Europe Limited
      Bundle ID: com.enixan.yukon.family.adventure
      iTunes Store Link: https://apps.apple.com/us/app/yukon-family-adventure/id6455041311?uo=4


      🤩 Hack Features

      - Gems

      - Energy

      - Items

      - EXP
      • 20 replies
    • Yukon: Family Adventure v1.64.0 [ +4++ Jailed ] Everything Unlimited
      Modded/Hacked App: Yukon: Family Adventure By Enixan Europe Limited
      Bundle ID: com.enixan.yukon.family.adventure
      iTunes Store Link: https://apps.apple.com/us/app/yukon-family-adventure/id6455041311?uo=4


      🤩 Hack Features

      - Gems

      - Energy

      - Items

      - EXP
      • 23 replies
    • Angry Birds 2 Cheats v4.0.5 +1 [ Infinite Currencies ]
      Modded/Hacked App: Angry Birds 2 By Rovio Entertainment Oyj
      Bundle ID: com.rovio.baba
      iTunes Store Link: https://apps.apple.com/us/app/angry-birds-2/id880047117?uo=4


      Hack Features:
      - Infinite Currencies ( Spend some/ Get some )


      Non-Jailbroken & No Jailbreak required hack(s):  https://iosgods.com/topic/70081-angry-birds-2-v2600-jailed-cheats-2/


      Hack Download Link: https://iosgods.com/topic/72039-angry-birds-2-cheats-v2600-1-infinite-currencies/
        • Informative
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,963 replies
    • Go Go Wolf! Cheats v6.1 +4
      Modded/Hacked App: Go Go Wolf! By MONSTER PLANET Corp.
      Bundle ID: com.MonsterPlanet.WolfGame
      App Store Link: https://apps.apple.com/us/app/go-go-wolf/id6572283560?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - God Mode
      - Multiply Attack
      - Instant Skills
      - Freeze Currencies

       

      Non-Jailbroken Hack: https://iosgods.com/topic/198033-go-go-wolf-v52-jailed-cheats-4/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/198032-go-go-wolf-cheats-v52-4/
      • 18 replies
    • Night Hunt: The Vampire Tower v1.2.3 +3 Jailed Cheats [ God Mode ]
      Modded/Hacked App: Night Hunt: The Vampire Tower By Mirrormagic Games Ltd
      Bundle ID: com.mirrormagic.vampires
      App Store Link: https://apps.apple.com/us/app/night-hunt-the-vampire-tower/id6746669165?uo=4

       
       

      🤩 Hack Features

      - God Mode
      - No Skill Cooldown
      - All Skills Unlocked In-Game
      • 5 replies
    • Night Hunt: The Vampire Tower v1.2.3 +3 Cheats [ God Mode ]
      Modded/Hacked App: Night Hunt: The Vampire Tower By Mirrormagic Games Ltd
      Bundle ID: com.mirrormagic.vampires
      App Store Link: https://apps.apple.com/us/app/night-hunt-the-vampire-tower/id6746669165?uo=4

       


      🤩 Hack Features

      - God Mode
      - No Skill Cooldown
      - All Skills Unlocked In-Game
      • 4 replies
    • Dawn of Ages: Medieval Games v2.1.3 +5 Jailed Cheats [ Damage & Defence ]
      Modded/Hacked App: Dawn of Ages: total war battle By BoomBit, Inc.
      Bundle ID: com.stratospheregames.dawnofages
      App Store Link: https://apps.apple.com/us/app/dawn-of-ages-total-war-battle/id6477473268?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
      - Dumb Enemy
      - Premium Enabled
      • 35 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines