Jump to content

H5GG Full Tutorial [Offset Patching + Hooking] for Non-Jailbroken/Jailbreak Devices !


129 posts in this topic

Recommended Posts

Posted
11 minutes ago, papastweak said:

Haven't tested hooks yet but code patching works! Tested on Iphone 12 Pro Max, 16.1.2

that's cool, could you edit your answer and tell me if hook works ? :)

Posted
40 minutes ago, ꞋꞌꞋꞌꞋꞌꞋꞌ said:

edit :

oh you mean the UnityFramework patched ? well i didn't looked at the data at the offset 0x1B...98, but it's seems normal to me that's it's not 2000...FD6, otherwise it will always be enable. i think that it creates another function on the UnityFramework (at another place) and at 0x1B...98, it calls it.

so if there is no script running, we shouldn't be able to jump always, but when we load our script, it probably jump to our created function in the UnityFramework, and so it return 2000..FD6 at our function (maybe at 0x264ab4c) and if we unload the script, the original bytes in the memory will load again making "normal jumps"

 

(this is my personal analysis, it may not be 100% right but this is how i visual it) 

video https://streamable.com/5g6nvz

So, it could be my concept is wrong from beginning.
First time the script run, we, in fact, expect the alert come and provide a patched version of the UnityFramework inside the static-inline-hook folder.

The patched version of UnityFramework has embedded a new function inside. 
 

From we call the ActiveCodePatch or StaticInlineHookFunction the second time onwards, it starts to take effect.

 

First run is just to prepare the Framework (insert function). The real effect happens when we use the patched framework with the function call to enable/disable.

 

Let me test it our again later tonight.

Thanks for the help.

Posted
2 minutes ago, Happy Secret said:

So, it could be my concept is wrong from beginning.
First time the script run, we, in fact, expect the alert come and provide a patched version of the UnityFramework inside the static-inline-hook folder.

The patched version of UnityFramework has embedded a new function inside. 
 

From we call the ActiveCodePatch or StaticInlineHookFunction the second time onwards, it starts to take effect.

 

First run is just to prepare the Framework (insert function). The real effect happens when we use the patched framework with the function call to enable/disable.

 

Let me test it our again later tonight.

Thanks for the help.

yep you are right ! 

welcome !

Posted
57 minutes ago, namcyeon said:

I had tried hooking, but it's not working 😑, stuck at 

if(!h5frida.loadGadget("frida-gadget-15.1.24.dylib"))

if this get you an error, you didn't have placed the file in the .app folder, or you have renamed it

Posted

Have you tried instance variable hook? Does it work?

37 minutes ago, ꞋꞌꞋꞌꞋꞌꞋꞌ said:

if this get you an error, you didn't have placed the file in the .app folder, or you have renamed it

 

Posted
5 hours ago, ꞋꞌꞋꞌꞋꞌꞋꞌ said:

yep you are right ! 

welcome !

I have just test it again and finally worked.

it is really 

  • First run is just to prepare the Framework (insert function). The real effect happens when we use the patched framework with the function call to enable/disable.

You will probably want to include a hint/note to your tutorial about this.

The error message is not sufficient. It can’t explain what to expect.

 

Anyway, it is not the type of in memory hook/patch that I expect. It requires a repackage and redeployment for non-jailbroken.

Hope there is a way to do pure in memory hook / patch (without modifying the binary).

 

Did Frida allow us to do that? I used to test patches with Xcode (LLDB), but it requires a PC connection.

Posted
16 minutes ago, Happy Secret said:

I have just test it again and finally worked.

it is really 

  • First run is just to prepare the Framework (insert function). The real effect happens when we use the patched framework with the function call to enable/disable.

You will probably want to include a hint/note to your tutorial about this.

The error message is not sufficient. It can’t explain what to expect.

 

Anyway, it is not the type of in memory hook/patch that I expect. It requires a repackage and redeployment for non-jailbroken.

Hope there is a way to do pure in memory hook / patch (without modifying the binary).

 

Did Frida allow us to do that? I used to test patches with Xcode (LLDB), but it requires a PC connection.

Yep, but here are the basics, after that you can make an HTML Mod Menu and create a dylib that contains your HTML + JS. then you can inject it on an iPA and you wont need to inject the script or anything.

Since Non-JB doesn't have the same permission as a JB Device, i don't think Frida let you hook like on JB.

10 minutes ago, namcyeon said:

@Happy Secret You can try second method with hook, but it's not working with me.

can you provide more details ?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Jolly Match 3 - Puzzle Game v1.0.1895 [ +5 Cheats ] Auto Win
      Modded/Hacked App: Jolly Match 3 - Puzzle Game By Jollyco LLC
      Bundle ID: com.jollyco.jollybattlematch3
      App Store Link: https://apps.apple.com/us/app/jolly-match-3-puzzle-game/id1554274735?uo=4


      🤩 Hack Features

      - Auto Win

      - Coins

      - Stars

      - Lives

      - Booster
      • 2 replies
    • Jolly Match 3 - Puzzle Game v1.0.1895 [ +5 Jailed ] Auto Win
      Modded/Hacked App: Jolly Match 3 - Puzzle Game By Jollyco LLC
      Bundle ID: com.jollyco.jollybattlematch3
      App Store Link: https://apps.apple.com/us/app/jolly-match-3-puzzle-game/id1554274735?uo=4


      🤩 Hack Features

      - Auto Win

      - Coins

      - Stars

      - Lives

      - Booster
      • 2 replies
    • Mortal Kombat v6.3.0 +9 FREE Cheats
      Modded/Hacked App: Mortal Kombat by Warner Bros. Entertainment
      Bundle ID: com.wb.MK.Brawler2015
      iTunes Store Link: https://apps.apple.com/us/app/mortal-kombat/id949701151


      Hack Features:
      - Auto-Win (Press the pause button)
      - Instantly Kill individual Enemy Characters (Press the pause button)
      - Force Swap Enemy Characters (Press the pause button)
      - Easy Enemy (1 hit KO) (Press the pause button)
      - Cheat Menu (only few few features work for now, i'll see what i can do) (Press the pause button)


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 4,993 replies
    • Family Island — Farm game v2025146.1.75628 Jailed Cheats +1
      Modded/Hacked App: Family Island™ — Farm game by Melsoft
      Bundle ID: com.MelsoftGames.FamilyIsland
      iTunes Store Link: https://apps.apple.com/us/app/family-island-farm-game/id1464689103?uo=4&at=1010lce4


      Hack Features:
      - Cheat Engine Enabled


      iOS Hack Download Link: https://iosgods.com/topic/115337-arm64-family-island-%E2%80%94-farm-game-v20190824862-jailed-cheats-1/
      • 2,307 replies
    • Train of Hope: Survival Game v1.8.2 +5 Jailed Cheats [ Damage & Defence ]
      Modded/Hacked App: Train of Hope: Survival Game By Samfinaco LLC
      Bundle ID: com.samfinaco.tos
      iTunes Store Link: https://apps.apple.com/us/app/train-of-hope-survival-game/id6636482655?uo=4

       
       

      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
      - Unlimited Resources -> Will increase instead of decrease.
      - Unlimited Hero Experience -> Will increase instead of decrease.
      • 43 replies
    • Train of Hope: Survival Game v1.8.2 +5 Cheats [ Damage & Defence ]
      Modded/Hacked App: Train of Hope: Survival Game By Samfinaco LLC
      Bundle ID: com.samfinaco.tos
      iTunes Store Link: https://apps.apple.com/us/app/train-of-hope-survival-game/id6636482655?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
      - Unlimited Resources -> Will increase instead of decrease.
      - Unlimited Hero Experience -> Will increase instead of decrease.
      • 39 replies
    • Final Outpost v2.3.19 [+3 Jailed Cheats]
      Modded/Hacked App: Final Outpost By Exabyte Games Ltd
      Bundle ID: com.samclothier.DEADfense
      iTunes Store Link: https://apps.apple.com/us/app/final-outpost/id1425444801?uo=4



      🤩 Hack Features

      -  Always Enough Resources
      -  Always Attain Skill
      -  No Food Consume
      • 20 replies
    • Final Outpost v2.3.19 [+3 Cheats]
      Modded/Hacked App: Final Outpost By Exabyte Games Ltd
      Bundle ID: com.samclothier.DEADfense
      iTunes Store Link: https://apps.apple.com/us/app/final-outpost/id1425444801?uo=4

       

      🤩 Hack Features

      -  Always Enough Resources
      -  Always Attain Skill
      -  No Food Consume
      • 15 replies
    • Feed the Deep v1.0.6 [+6 Jailed Cheats]
      Modded/Hacked App: Feed the Deep By L MUSCAT ENTERPRISES PTY LTD
      Bundle ID: com.Luke-Muscat.FtD
      App Store Link: https://apps.apple.com/us/app/feed-the-deep/id6745767745?uo=4



      🤩 Hack Features

      - Free IAP
      - Never Die
      - Add Gold (Enable inside game)
      - Add Orb (Enable inside game)
      - Add Ammo (Enable inside game)
      - Unlimited Oxygen
      • 6 replies
    • Feed the Deep v1.0.6 [+6 Cheats]
      Modded/Hacked App: Feed the Deep By L MUSCAT ENTERPRISES PTY LTD
      Bundle ID: com.Luke-Muscat.FtD
      App Store Link: https://apps.apple.com/us/app/feed-the-deep/id6745767745?uo=4


       

      🤩 Hack Features

      - Free IAP
      - Never Die
      - Add Gold (Enable inside game)
      - Add Orb (Enable inside game)
      - Add Ammo (Enable inside game)
      - Unlimited Oxygen
      • 4 replies
    • Amikin Village: Magic Sim RPG v1.0.5 +5 Jailed Cheats [ Damage + More ]
      Modded/Hacked App: Amikin Village: Magic Sim RPG By HELIO LTD
      Bundle ID: com.heliogames.amikin.survival
      App Store Link: https://apps.apple.com/us/app/amikin-village-magic-sim-rpg/id6478102304?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - God Mode
      - Speed Multiplier
      - Unlimited Weapon Durability
      - Split Hack
      • 322 replies
    • Amikin Village: Magic Sim RPG v1.0.5 +5 Cheats [ Damage + More ]
      Modded/Hacked App: Amikin Village: Magic Sim RPG By HELIO LTD
      Bundle ID: com.heliogames.amikin.survival
      App Store Link: https://apps.apple.com/us/app/amikin-village-magic-sim-rpg/id6478102304?uo=4

       
       

      🤩 Hack Features

      - Damage Multiplier
      - God Mode
      - Speed Multiplier
      - Unlimited Weapon Durability
      - Split Hack
      • 108 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines