Jump to content

11 posts in this topic

Recommended Posts

Posted

Hi

 

Wow what an amazing forum this is. I am relatively new to pen-testing and stumbled upon this forum via googling clutch/class-dump-z etc.

 

I have been successful with clutch, class-dump, gdb, etc but some details elude me.

 

1. Clutch doesn't list stock Apple apps so how are we supposed to clutch them? Via grep PID? 

 

2a. All of this pen-testing produces only class header methods and property names etc? What about the REAL data that's in the methods defined in the .m files such as domain addresses, beacon UIDs, method definitions etc?

 

2b. So gdb gives us @selector names which are the names of the functions/methods but how are we supposed to work with the function names if we don't have the method definition? 

 

 

I was sort of disappointed with the results of my first days of pen-testing because I thought I could learn more about coding via dumped .m files where all the valuable syntax is located.  It was the whole point of starting to learn pen-testing. 

 

Are there any tools to view the actual code of a binary? Btw, all this stuff is fine for Obj-C but what about Swift binaries? Cycript is the way to go?

 

I've been reading tons of tutorials on iOS security but a lot of them seem to pre-date iOS 8. Some say use class-dump, some say use class-dump-z etc. Are there any current tutorials that are super thorough from basic of clutch all the way up to hooking into runtime?

 

Thanks

 

 

Posted

Hi

 

Wow what an amazing forum this is. I am relatively new to pen-testing and stumbled upon this forum via googling clutch/class-dump-z etc.

 

I have been successful with clutch, class-dump, gdb, etc but some details elude me.

 

1. Clutch doesn't list stock Apple apps so how are we supposed to clutch them? Via grep PID? 

 

2a. All of this pen-testing produces only class header methods and property names etc? What about the REAL data that's in the methods defined in the .m files such as domain addresses, beacon UIDs, method definitions etc?

 

2b. So gdb gives us @selector names which are the names of the functions/methods but how are we supposed to work with the function names if we don't have the method definition? 

 

 

I was sort of disappointed with the results of my first days of pen-testing because I thought I could learn more about coding via dumped .m files where all the valuable syntax is located.  It was the whole point of starting to learn pen-testing. 

 

Are there any tools to view the actual code of a binary? Btw, all this stuff is fine for Obj-C but what about Swift binaries? Cycript is the way to go?

 

I've been reading tons of tutorials on iOS security but a lot of them seem to pre-date iOS 8. Some say use class-dump, some say use class-dump-z etc. Are there any current tutorials that are super thorough from basic of clutch all the way up to hooking into runtime?

 

Thanks

What do you mean by "actual code"? There's thing called IDA which lets you encrypt the binary. That is how we hack. :)

Posted

Ok well IDC/IDA is all new to me. I don't want to do any hacking per se. I just want to view the original code that was created with the IDE. Is the closest we can get the header files with class-dump?

 

Also how do we clutch stock Apple apps?

Posted

Ok well IDC/IDA is all new to me. I don't want to do any hacking per se. I just want to view the original code that was created with the IDE. Is the closest we can get the header files with class-dump?

 

Also how do we clutch stock Apple apps?

so like your gonna make an stock.ipa and put it in appstore  xD

Posted (edited)

so like your gonna make an stock.ipa and put it in appstore  xD

HaHa and make billions$.

 

I guess no one on iOS Gods is actually a god then :( 

 

No one is going to teach me how to clutch stock apps?

Updated by osakaboy
Posted

Who's this noob DiDA you're talking about?

 

Jk :p

 

Class Dump is the closest you can get like in every Windows form application.

 

The latest Class Dump is classdump-dyld from limneos for iOS 8.

 

You can't see the stock apps in Clutch because they are not listed as mobile. The permissions are still on root however you can try to clutch the executable name of the stock app or try Flex 2 which displays them also.

Posted (edited)

@osakaboy

All the .m and source files are compiled into a binary.

If you want the code, you can only reverse engineer it with clutch and read the ARM instructions (using IDA) in the decrypted binary.

Decrypting & Disassembling the binary and getting the source code in plain text is just not possible.

Updated by KingRalph
Posted

@osakaboy

All the .m and source files are compiled into a binary.

If you want the code, you can only reverse engineer it with clutch and read the ARM instructions (using IDA) in the decrypted binary.

Decrypting & Disassembling the binary and getting the source code in plain text is just not possible.

So to clarify we CAN read the .m source code by using clutch then using IDA?  Are the ARM instructions the same as the method definitions? i.e. the code the programmer wrote?

Who's this noob DiDA you're talking about?

 

Jk :p

 

Class Dump is the closest you can get like in every Windows form application.

 

The latest Class Dump is classdump-dyld from limneos for iOS 8.

 

You can't see the stock apps in Clutch because they are not listed as mobile. The permissions are still on root however you can try to clutch the executable name of the stock app or try Flex 2 which displays them also.

But how do you clutch the executable if its number value i.e. 1-23 isn't listed in clutch? i.e. "clutch 2". And are you saying I should use classdump-dyld instead of the older class-dump tools? Classdump-dyld is specifically written for iOS 8?

Posted

So to clarify we CAN read the .m source code by using clutch then using IDA?  Are the ARM instructions the same as the method definitions? i.e. the code the programmer wrote?

Absolutely not.  :no:

The closest you can get to the source code is reading the binary's ARM processor code.

You cannot read the code in plain objective c code.

If you want to find out more info about the app's code, you can debug it using FLEXible.

Posted

But how do you clutch the executable if its number value i.e. 1-23 isn't listed in clutch? i.e. "clutch 2". And are you saying I should use classdump-dyld instead of the older class-dump tools? Classdump-dyld is specifically written for iOS 8?

I don't think it has to be listed when you type Clutch "Binaryname". Clutch 1.4.7 has it I believe. Anyway I read somewhere that you don't need to crack the stock apps to use class dump

 

Yea cd-dyld is faster and does not generate errors because of some iOS 8 structures.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Shark Universe v11.0.0 [+2 Jailed Cheats]
      Modded/Hacked App: Shark Universe By Supercent Inc.
      Bundle ID: io.supercent.sharkuniverse2
      App Store Link: https://apps.apple.com/us/app/shark-universe/id6742216032?uo=4

       

      🤩 Hack Features

      - Never Die
      - Add Currency

      • 0 replies
    • Shark Universe v11.0.0 [+2 Cheats]
      Modded/Hacked App: Shark Universe By Supercent Inc.
      Bundle ID: io.supercent.sharkuniverse2
      App Store Link: https://apps.apple.com/us/app/shark-universe/id6742216032?uo=4



      🤩 Hack Features

      - Never Die
      - Add Currency
       
      • 0 replies
    • Matching Story v1.42.02 [ +6 Cheats ] Auto Win
      Modded/Hacked App: Matching Story By VERTEX GAMES PTE. LTD.
      Bundle ID: matching.story
      iTunes Store Link: https://apps.apple.com/ph/app/matching-story/id1558803930?uo=4


      🤩 Hack Features

      - Auto Win

      - Coins

      - Diamonds [ Win Match Linked With Moves ]

      - Lives

      - Booster

      - Moves
        • Agree
      • 32 replies
    • Matching Story v1.42.02 [ +6 Jailed ] Auto Win
      Modded/Hacked App: Matching Story By VERTEX GAMES PTE. LTD.
      Bundle ID: matching.story
      iTunes Store Link: https://apps.apple.com/ph/app/matching-story/id1558803930?uo=4

       
      🤩 Hack Features

      - Auto Win

      - Coins

      - Diamonds [ Win Match Linked With Moves ]

      - Lives

      - Booster

      - Moves
      • 43 replies
    • Villain Universe! v15.0.0 [+3 Jailed Cheats]
      Modded/Hacked App: Villain Universe! By Supercent Inc.
      Bundle ID: io.supercent.devilhunteridle
      App Store Link: https://apps.apple.com/us/app/villain-universe/id6467405012?uo=4



      🤩 Hack Features

      - Never Die
      - Unlimited Currency
      - One Hit Kill
      • 0 replies
    • Villain Universe! v15.0.0 [+3 Cheats]
      Modded/Hacked App: Villain Universe! By Supercent Inc.
      Bundle ID: io.supercent.devilhunteridle
      App Store Link: https://apps.apple.com/us/app/villain-universe/id6467405012?uo=4



      🤩 Hack Features

      - Never Die
      - Unlimited Currency
      - One Hit Kill
      • 0 replies
    • My Perfect Casino v0.3.40 +3 Jailed Cheats
      Modded/Hacked App: My Perfect Casino By BoomBit, Inc.
      Bundle ID: com.SmyrnaGames.MyPerfectCasino
      App Store Link: https://apps.apple.com/us/app/my-perfect-casino/id6744884477?uo=4

       

       

      📌 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🤩 Hack Features

      - Add Chips → Settings → Manage Consent
      - Add Diamonds → Settings → Manage Consent
      - Add Cash → Settings → Manage Consent

       

      ⬇️ iOS Hack Download IPA Link


      Hidden Content

      Download via the iOSGods App







       

      📖 PC Installation Instructions

      STEP 1: Download the pre-hacked .IPA file from the link above to your computer. To download from the iOSGods App, see our iOSGods App IPA Download Tutorial which includes a video example.
      STEP 2: Download Sideloadly and install it on your Windows or Mac.
      STEP 3: Open Sideloadly on your computer, connect your iOS device, and wait until your device name appears in Sideloadly.
      STEP 4: Once your iDevice is recognized, drag the modded .IPA file you downloaded and drop it into the Sideloadly application.
      STEP 5: Enter your Apple Account email, then press “Start.” You’ll then be asked to enter your password. Go ahead and provide the required information.
      STEP 6: Wait for Sideloadly to finish sideloading/installing the hacked IPA. If there are issues during installation, please read the note below.
      STEP 7: Once the installation is complete and you see the app on your Home Screen, you will need to go to Settings -> General -> Profiles / VPN & Device Management. Once there, tap on the email you entered from step 6, and then tap on 'Trust [email protected]'.
      STEP 8: Now go to your Home Screen and open the newly installed app and everything should work fine. You may need to follow further per app instructions inside the hack's popup in-game.

      NOTE: iOS/iPadOS 16 and later, you must enable Developer Mode. For free Apple Developer accounts, you will need to repeat this process every 7 days. If you have any questions or problems, read our Sideloadly FAQ section of the topic and if you don't find a solution, please post your issue below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.

       

      🙌 Credits

      - AlyssaX64

       

      📷 Cheat Video/Screenshots

      N/A
      • 1 reply
    • My Perfect Casino v0.3.40 +3 Cheats
      Modded/Hacked App: My Perfect Casino By BoomBit, Inc.
      Bundle ID: com.SmyrnaGames.MyPerfectCasino
      App Store Link: https://apps.apple.com/us/app/my-perfect-casino/id6744884477?uo=4

       

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Add Chips → Settings → Manage Consent
      - Add Diamonds → Settings → Manage Consent
      - Add Cash → Settings → Manage Consent

       

      ⬇️ iOS Hack Download Link


      Hidden Content

      Download Hack







       

      📖 iOS Installation Instructions

      STEP 1: Download the .deb hack file from the link above. Use Safari, Google Chrome or other iOS browsers to download.
      STEP 2: Once the file has downloaded, tap on it and then you will be prompted on whether you want to open the deb with iGameGod or copy it to Filza.
      STEP 3: If needed, tap on the downloaded file again, then select ‘Normal Install’ from the options on your screen.
      STEP 4: Let iGameGod/Filza finish the cheat installation. If it doesn’t install successfully, see the note below.
      STEP 5: Open the game, log in to your iOSGods account when asked, then toggle on the features you want and enjoy!

       

      NOTE: If you have any questions or problems, read our Jailbreak iOS Hack Troubleshooting & Frequently Asked Questions & Answers topic. If you still haven't found a solution, post your issue below and we'll do our best to help! If the hack does work for you, please post your feedback below and help out other fellow members that are encountering issues.

       

      🙌 Credits

      - AlyssaX64

       

      📷 Cheat Video/Screenshots

      N/A

       

      More iOS App Hacks
      If you’re looking for Non-Jailbroken & No Jailbreak required iOS IPA hacks, visit the iOS Game Cheats & Hacks or the iOSGods App for a variety of modded games and apps for non-jailbroken iOS devices.

      Modded Android APKs
      Need modded apps or games for Android? Check out the latest custom APK mods, cheats & more in our Android Section.
      • 1 reply
    • SDガンダム ジージェネレーション エターナル v1.3.1 +4 cheats
      Modded/Hacked App: SDガンダム ジージェネレーション エターナル By Bandai Namco Entertainment Inc.
      Bundle ID: jp.co.bandainamcoent.BNEI0403
      iTunes Store Link: https://apps.apple.com/jp/app/sd%E3%82%AC%E3%83%B3%E3%83%80%E3%83%A0-%E3%82%B8%E3%83%BC%E3%82%B8%E3%82%A7%E3%83%8D%E3%83%AC%E3%83%BC%E3%82%B7%E3%83%A7%E3%83%B3-%E3%82%A8%E3%82%BF%E3%83%BC%E3%83%8A%E3%83%AB/id6692611665?uo=4

       

       

      📌 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🤩 Hack Features

      - Damage Multiplier
      - Defense Multiplier
      - Unlimited Skill Energy
      - Game Speed Multiplier

       

      ⬇️ iOS Hack Download IPA Link


      Hidden Content
      React or reply to this topic to see the <a href='https://iosgods.com/topic/3762-info-how-to-unlockview-the-hidden-content-on-iosgods/#findComment-78119'>hidden content & download link</a>. 👀







       

      📖 PC Installation Instructions

      STEP 1: Download the pre-hacked .IPA file from the link above to your computer. To download from the iOSGods App, see our iOSGods App IPA Download Tutorial which includes a video example.
      STEP 2: Download Sideloadly and install it on your Windows or Mac.
      STEP 3: Open Sideloadly on your computer, connect your iOS device, and wait until your device name appears in Sideloadly.
      STEP 4: Once your iDevice is recognized, drag the modded .IPA file you downloaded and drop it into the Sideloadly application.
      STEP 5: Enter your Apple Account email, then press “Start.” You’ll then be asked to enter your password. Go ahead and provide the required information.
      STEP 6: Wait for Sideloadly to finish sideloading/installing the hacked IPA. If there are issues during installation, please read the note below.
      STEP 7: Once the installation is complete and you see the app on your Home Screen, you will need to go to Settings -> General -> Profiles / VPN & Device Management. Once there, tap on the email you entered from step 6, and then tap on 'Trust [email protected]'.
      STEP 8: Now go to your Home Screen and open the newly installed app and everything should work fine. You may need to follow further per app instructions inside the hack's popup in-game.

      NOTE: iOS/iPadOS 16 and later, you must enable Developer Mode. For free Apple Developer accounts, you will need to repeat this process every 7 days. If you have any questions or problems, read our Sideloadly FAQ section of the topic and if you don't find a solution, please post your issue below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.

       

      🙌 Credits

      - @KyosukeNanbu
      • 49 replies
    • SDガンダム ジージェネレーション エターナル v1.3.1 +4 cheats
      Modded/Hacked App: SDガンダム ジージェネレーション エターナル By Bandai Namco Entertainment Inc.
      Bundle ID: jp.co.bandainamcoent.BNEI0403
      iTunes Store Link: https://apps.apple.com/jp/app/sd%E3%82%AC%E3%83%B3%E3%83%80%E3%83%A0-%E3%82%B8%E3%83%BC%E3%82%B8%E3%82%A7%E3%83%8D%E3%83%AC%E3%83%BC%E3%82%B7%E3%83%A7%E3%83%B3-%E3%82%A8%E3%82%BF%E3%83%BC%E3%83%8A%E3%83%AB/id6692611665?uo=4

       

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Damage Multiplier
      - Defense Multiplier
      - Unlimited Skill Energy
      - Game Speed Multiplier

       

      ⬇️ iOS Hack Download Link


      Hidden Content
      React or reply to this topic to see the <a href='https://iosgods.com/topic/3762-info-how-to-unlockview-the-hidden-content-on-iosgods/#findComment-78119'>hidden content & download link</a>. 👀







       

      📖 iOS Installation Instructions

      STEP 1: Download the .deb hack file from the link above. Use Safari, Google Chrome or other iOS browsers to download.
      STEP 2: Once the file has downloaded, tap on it and then you will be prompted on whether you want to open the deb with iGameGod or copy it to Filza.
      STEP 3: If needed, tap on the downloaded file again, then select ‘Normal Install’ from the options on your screen.
      STEP 4: Let iGameGod/Filza finish the cheat installation. If it doesn’t install successfully, see the note below.
      STEP 5: Open the game, log in to your iOSGods account when asked, then toggle on the features you want and enjoy!

       

      NOTE: If you have any questions or problems, read our Jailbreak iOS Hack Troubleshooting & Frequently Asked Questions & Answers topic. If you still haven't found a solution, post your issue below and we'll do our best to help! If the hack does work for you, please post your feedback below and help out other fellow members that are encountering issues.

       

      🙌 Credits

      - @KyosukeNanbu

       

      More iOS App Hacks
      If you’re looking for Non-Jailbroken & No Jailbreak required iOS IPA hacks, visit the iOS Game Cheats & Hacks or the iOSGods App for a variety of modded games and apps for non-jailbroken iOS devices.

      Modded Android APKs
      Need modded apps or games for Android? Check out the latest custom APK mods, cheats & more in our Android Section.
        • Winner
      • 55 replies
    • RS Boxing Champions v68.68.322 +1 Jailed Cheat
      Modded/Hacked App: RS Boxing Champions By RELIANCE ENTERTAINMENT STUDIOS UK PVT LIMITED
      Bundle ID: com.reliancegames.rschampions
      iTunes Store Link: https://apps.apple.com/us/app/rs-boxing-champions/id944877545?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - Unlimited Currencies → Spend/Gain


      Jailbreak required hack(s): 


      iOS Hack Download IPA Link:

      Hidden Content

      Download via the iOSGods App








      PC Installation Instructions:
      STEP 1: If necessary, uninstall the app if you have it installed on your iDevice. Some hacked IPAs will install as a duplicate app. Make sure to back it up so you don't lose your progress.
      STEP 2: Download the pre-hacked .IPA file from the link above to your computer. To download from the iOSGods App, see this tutorial topic.
      STEP 3: Download Sideloadly and install it on your PC.
      STEP 4: Open/Run Sideloadly on your computer, connect your iOS Device, and wait until your device name shows up.
      STEP 5: Once your iDevice appears, drag the modded .IPA file you downloaded and drop it inside the Sideloadly application.
      STEP 6: You will now have to enter your iTunes/Apple ID email login, press "Start" & then you will be asked to enter your password. Go ahead and enter the required information.
      STEP 7: Wait for Sideloadly to finish sideloading/installing the hacked IPA. If there are issues during installation, please read the note below.
      STEP 8: Once the installation is complete and you see the app on your Home Screen, you will need to go to Settings -> General -> Profiles/VPN & Device Management. Once there, tap on the email you entered from step 6, and then tap on 'Trust [email protected]'.
      STEP 9: Now go to your Home Screen and open the newly installed app and everything should work fine. You may need to follow further per app instructions inside the hack's popup in-game.

      NOTE: iOS/iPadOS 16 and later, you must enable Developer Mode. For free Apple Developer accounts, you will need to repeat this process every 7 days. Jailbroken iDevices can also use Sideloadly/Filza/IPA Installer to normally install the IPA with AppSync. If you have any questions or problems, read our Sideloadly FAQ section of the topic and if you don't find a solution, please post your issue down below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.


      Credits:
      - AlyssaX64


      Cheat Video/Screenshots:

      N/A
      • 39 replies
    • World Robot Boxing v99.99.112 +1 Jailed Cheat
      Modded/Hacked App: World Robot Boxing By RELIANCE ENTERTAINMENT STUDIOS UK PVT LIMITED
      Bundle ID: com.jumpgames.rswrb
      iTunes Store Link: https://apps.apple.com/us/app/world-robot-boxing/id659425518?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - Unlimited Currencies → Spend/Gain


      Jailbreak required hack(s): 


      iOS Hack Download IPA Link:

      Hidden Content

      Download via the iOSGods App








      PC Installation Instructions:
      STEP 1: If necessary, uninstall the app if you have it installed on your iDevice. Some hacked IPAs will install as a duplicate app. Make sure to back it up so you don't lose your progress.
      STEP 2: Download the pre-hacked .IPA file from the link above to your computer. To download from the iOSGods App, see this tutorial topic.
      STEP 3: Download Sideloadly and install it on your PC.
      STEP 4: Open/Run Sideloadly on your computer, connect your iOS Device, and wait until your device name shows up.
      STEP 5: Once your iDevice appears, drag the modded .IPA file you downloaded and drop it inside the Sideloadly application.
      STEP 6: You will now have to enter your iTunes/Apple ID email login, press "Start" & then you will be asked to enter your password. Go ahead and enter the required information.
      STEP 7: Wait for Sideloadly to finish sideloading/installing the hacked IPA. If there are issues during installation, please read the note below.
      STEP 8: Once the installation is complete and you see the app on your Home Screen, you will need to go to Settings -> General -> Profiles/VPN & Device Management. Once there, tap on the email you entered from step 6, and then tap on 'Trust [email protected]'.
      STEP 9: Now go to your Home Screen and open the newly installed app and everything should work fine. You may need to follow further per app instructions inside the hack's popup in-game.

      NOTE: iOS/iPadOS 16 and later, you must enable Developer Mode. For free Apple Developer accounts, you will need to repeat this process every 7 days. Jailbroken iDevices can also use Sideloadly/Filza/IPA Installer to normally install the IPA with AppSync. If you have any questions or problems, read our Sideloadly FAQ section of the topic and if you don't find a solution, please post your issue down below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.


      Credits:
      - AlyssaX64


      Cheat Video/Screenshots:

      N/A
      • 82 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines