Jump to content

LF a confident guy with some revesrse knowledge for some help.


Go to solution Solved by n1ce0n3,

2 posts in this topic

Recommended Posts

Posted (edited)

Hi there, I'm currently trying to hack a pretty popular game (not going to tell the name of the game, though, it's pretty new and it has around a milion downloads on the play store :))

1. The game uses LUA, which is packed with some kind of a packer that renamed all the source files into its' hashed names. There's a ton of files like that.  

(pic1, pic2)

The progress I have so far. The game uses LuaJIT-2.1.0-beta3 on top of lua5.1. If I got it right the game uses a 64-bit compiler, since LUA's header is  1B 4C 4A 02 0A, when I compile lua script with a 32bit version of luajit - the header is  1B 4C 4A 02 02, the 64 bit version gives me  1B 4C 4A 02 0A.

Okay, so.

Each of these files you can see in a screenshot is not just a LUA script.

It is a lua script, which is compiled into LuaJIT with it's own name, after that that script gets zipped into a hashed name, but it keeps the lua extension. (e.g. config/Team.lua, becomes a ZIPPed archive "aa/aa70e1b8e38c140d2242f45bb58e2edf.lua".

On top of that the zip archive gets XXTEA encrypted.

Oh, forgot to mention that the game is built on cocos2d engine.

I've managed to recover all the source files (using luajit decompiler doesn't give you the exact sources, but at least it gives you a readable file, which you can look through and actually figure what's going on there.)

The problem is that if I modify a decompiled script - pack it the way it was originally packed, most of the times - it fails to work (I think it's because the decompiler doesn't give you the exact source code as it is originally written, since I've tried compilig for all of the architectures available, and most of the time - the game eitehr hangs when it gets to read that file - or doesn't load the section that I've modified like the file is corrupt or something)

The game loads cocos2dlua.so library during the startup - and then it unloads the library, so that it doesn't remain in the proccesses' memory.

As much as I've tried - I couldn't figure the addresses of the functions I wan.

Also, the library has no exports, exports tab in IDA have a single entry, which is ".init_proc".

I've located the LUA functions' names in IDA, but since I'm not super confident with IDA, I cannot figure how do I either hook any of these, or how to get their address.

They are in the symbols table, but yet again, I have no idea how I can reach them. (pic)

I've hooked fopen, fred, fwrite, fgets, fread and most of the other relevant native functions, but the most I could've gotten was the file name that gets loaded.

TL:DR

I've decompiled all of the games' sources (over 10k LUA files), and the only thing that is left to do is to somehow execute luaL_loadstring or luaL_loadfile on my own.

I've spent quite some time on that and honestly I am out of ideas can I get what I'm trying to.

I even tried pattern scanning the binary and all its' libraries to get either of the functions, basically, any lua function - had no success so far.

 

I'll really appreciate any help I can get at this point.

Feel free to reach me out messages so then we can get in touch via discord or any way you'll prefer. Thanks in advance.

The game's binary is actually a "split installer" as they call it, it has both ARM and x86 libraries within it's content (even every lua script has another version of itself for another architecture). That prevents me from loading the binary manually into the process , since it gives me an error:

Error: dlopen failed: "/data/local/tmp/libcocos2dlua.so" has unexpected e_machine: 183 (EM_AARCH64)

Updated by n1ce0n3
  • Informative 1

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • ACECRAFT v1.3.73 [+5 Jailed Cheats]
      Modded/Hacked App: ACECRAFT By VIZTA PTE. LTD.
      Bundle ID: com.vizta.wefly
      App Store Link: https://apps.apple.com/ca/app/acecraft/id6499112583?uo=4


       

      🤩 Hack Features

      - Never Die
      - One Hit Kill
      - High Energy Gain (Ultimate Skill)
      - Exp Gain Multiplier
      - Attack Multiplier
      • 39 replies
    • ACECRAFT v1.3.73 [+5 Cheats]
      Modded/Hacked App: ACECRAFT By VIZTA PTE. LTD.
      Bundle ID: com.vizta.wefly
      App Store Link: https://apps.apple.com/ca/app/acecraft/id6499112583?uo=4



      🤩 Hack Features

      - Never Die
      - One Hit Kill
      - High Energy Gain (Ultimate Skill)
      - Exp Gain Multiplier
      - Attack Multiplier
      • 18 replies
    • Legend of Survivors V1.2.12 [ +17 Jailed ] Currency Max
      Modded/Hacked App: Legend of Survivors By ABI GLOBAL LTD.
      Bundle ID: com.abi.legendofsurvivors
      iTunes Store Link: https://apps.apple.com/us/app/legend-of-survivors/id6489580730?uo=4


      Hack Features:

      - NO ADS

      - Gems 

      - Gold

      - Energy 

      - Material

      - Health Max [ Equip & Upgrade ]

      - Damage [ Equip & Upgrade ]

      - Skill Cooldown

      - EXP + Level [ Patrol Reward ]

      - Patrol Reward [ Claim Unlimited ]

      - Growth Pack Unlock

      - Growth Pack [ Claim Unlimited ]

      - Monthly card Pack Unlock

      - Monthly card Pack [ Claim Unlimited ]


      Jailbreak required hack(s): https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 60 replies
    • Legend of Survivors V1.2.12 [ +17 Cheats ] Currency Max
      Modded/Hacked App: Legend of Survivors By ABI GLOBAL LTD.
      Bundle ID: com.abi.legendofsurvivors
      iTunes Store Link: https://apps.apple.com/us/app/legend-of-survivors/id6489580730?uo=4


      Hack Features:
      - IAP Free [ Buy Anything - Gems Gold Ads Premium Packs ]

      - NO ADS

      - Gems 

      - Gold

      - Energy 

      - Material

      - Health Max [ Equip & Upgrade ]

      - Damage [ Equip & Upgrade ]

      - Skill Cooldown

      - EXP + Level [ Patrol Reward ]

      - Patrol Reward [ Claim Unlimited ]

      - Growth Pack Unlock

      - Growth Pack [ Claim Unlimited ]

      - Monthly card Pack Unlock

      - Monthly card Pack [ Claim Unlimited ]
        • Like
      • 139 replies
    • Chef Treat v1.0.4 [ +1 Cheats ] Auto Win
      Modded/Hacked App: Chef Treat By HONGKONG 707 INTERACTIVE TECHNOLOGY CO., LIMITED
      Bundle ID: com.match.cheftreat.ios
      App Store Link: https://apps.apple.com/us/app/chef-treat/id6748721903?uo=4


      🤩 Hack Features

      - Auto Win


      • 2 replies
    • Chef Treat v1.0.4 [ +1 Jailed ] Auto Win
      Modded/Hacked App: Chef Treat By HONGKONG 707 INTERACTIVE TECHNOLOGY CO., LIMITED
      Bundle ID: com.match.cheftreat.ios
      App Store Link: https://apps.apple.com/ph/app/chef-treat/id6748721903?uo=4

       
      🤩 Hack Features

      - Auto Win


      • 3 replies
    • North War: Island Defense 3D v1.1.1 [ +6 Cheats ] Currency Max
      Modded/Hacked App: North War: Island Defense 3D By ONDI TECHNOLOGY JSC
      Bundle ID: com.bgg.island.battle
      App Store Link: https://apps.apple.com/ph/app/north-war-island-defense-3d/id6744058107?uo=4 

      🤩 Hack Features

      - Unlimited Gems / Use & Earn
      - Unlimited Coins / Use & Earn
      - Unlimited Energy / Use & Earn
      • 12 replies
    • North War: Island Defense 3D v1.1.1 [ +6 Jailed ] Currency Max
      Modded/Hacked App: North War: Island Defense 3D By ONDI TECHNOLOGY JSC
      Bundle ID: com.bgg.island.battle
      App Store Link: https://apps.apple.com/ph/app/north-war-island-defense-3d/id6744058107?uo=4 

      🤩 Hack Features

      - Unlimited Gems / Use & Earn
      - Unlimited Coins / Use & Earn
      - Unlimited Energy / Use & Earn
      • 6 replies
    • Zombie Blaster-Survive&Rescue v1.0.4 [ +7 Cheats ] Currency Max
      Modded/Hacked App: Zombie Blaster-Survive&Rescue By Shenzhen Hijoy Information Technology Co., Ltd
      Bundle ID: com.sfromance.zombieblaster
      App Store Link: https://apps.apple.com/us/app/zombie-blaster-survive-rescue/id6749564079?uo=4

       
      🤩 Hack Features

      - Gems

      - Gold

      - Energy

      - Keys +2

      - Shader

      - Battle Coins

      - ATK Weapon
      • 4 replies
    • Zombie Blaster-Survive&Rescue v1.0.4 [ +7 Jailed ] Currency Max
      Modded/Hacked App: Zombie Blaster-Survive&Rescue By Shenzhen Hijoy Information Technology Co., Ltd
      Bundle ID: com.sfromance.zombieblaster
      App Store Link: https://apps.apple.com/us/app/zombie-blaster-survive-rescue/id6749564079?uo=4

       

      🤩 Hack Features

      - Gems

      - Gold

      - Energy

      - Keys +2

      - Shader

      - Battle Coins

      - ATK Weapon
      • 2 replies
    • RiftCraft v2.44.30 [ +4 Jailed ] Auto Win
      Modded/Hacked App: RiftCraft By Sneaky Panda LTD
      Bundle ID: com.sneakypanda.riftcraft
      App Store Link: https://apps.apple.com/us/app/riftcraft/id6744392381?uo=4
       

      🤩 Hack Features

      - Auto Win [ PvP & Stage ]
      - ADS [ Rewards Free ]
      - Gems
      - Tokens
      • 6 replies
    • RiftCraft v2.44.30 [ +4 Cheats ] Auto Win
      Modded/Hacked App: RiftCraft By Sneaky Panda LTD
      Bundle ID: com.sneakypanda.riftcraft
      App Store Link: https://apps.apple.com/us/app/riftcraft/id6744392381?uo=4 

      🤩 Hack Features

      - Auto Win [ PvP & Stage ]
      - ADS [ Rewards Free ]
      - Gems
      - Tokens
      • 7 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines