Jump to content

Pengu - Virtual Pets (DIY Charles Proxy exploit)


19 posts in this topic

Recommended Posts

Updated (edited)

Charles installation: Step 1.

 

  • Install Charles Proxy following the standard directions. https://www.charlesproxy.com/download/
  • Start the program.
  • Go to Proxy > Proxy Settings.
  • Select the Proxies tab, enter "8888" in the HTTP Proxy Port field then select Ok.
  • Go back to the proxy tab and select “SSL Proxy settings”
  • Select (“Enable SSL Proxying”), Then Select “Add”
  •                 In The “Host” Field Input your Ipv4 address. Also in the “Port” field make sure to input 8888
  •                 *IMPORTANT* To find your Ipv4 In “Charles Proxy”, select (Help > SSL Proxying > Install charles root certificate on a mobile device or remote browser. Follow the directions Prompted! (Please Read everything to avoid issues)

 

Charles Installation IOS (Step 2)

 

  • On your iphone navigate to Settings > Wi-Fi > Select the “I’ next to your connected wifi > scroll to the bottom and select "Configure PROXY". > Select Manual > type in the SAME Ipv4 and Port you’re using!
  • Open Safari on your iPhone.
  • Browse to https://chls.pro/ssl.
  • Safari will prompt you to install the SSL certificate.
  • If you are on iOS 10.3 or later, open the Settings app and navigate to General > About > Certificate Trust Settings.
  • Find the Charles Proxy certificate and enable the certificate.

Now, your iPhone is set up to use Charles Proxy for intercepting and monitoring HTTPS traffic.

 

 

Into the exploit Step 1.

 

Now that everything is enabled! Make sure that Pengu is installed on your device!

 

  • Open Pengu on you iOS Device.
  • Sign up and create your pet. 
  • Once you have your pet, Go to the controller in the bottom left corner ( the arcade)
  • Stay on the arcade page and navigate to your computer.
  • Within Charles proxy you should already see some data popping up (Noise) Condense this by typing in “Pengu” In the “filter” field below the data(noise). It will single out the App we’re trying to exploit.
  • Start the SSL proxying by selecting the lock ( To the left of the turtle icon)
  • Once you’ve selected the Lock. The lock should no longer look opened. (locked) You are now SSL Pinning
  • Click the brush to clear the Pengu data. ( left of the record icon)
  • Navigate to your iOS device and start a Pengu flappy bird game!
  • Play the Pengu bird game legit ( just get more than 1 point)
  • After you played a game. You should have 2 hearts left. (Stay on this page)
  • Navigate to Charles Proxy (Computer) you should see https://Penguapp.co select the arrow for the drop down menu and navigate to, v1 > games > flappy-pengu > (Pengu Id) > Select "Report"
  • To the right of report you should see two lists Request(Top)/Response(Bottom) Select (JSON) for both menus These are going to contain your score( which we will change)

 

 

Changing Values ( Step 2)

 

Now that you have survived the first step This will be easier >Trust<

 

  • Right click on the “Report” option mentioned in *Step 1*
  • Navigate to “Breakpoints” and Select it. ( It will now have a check mark next to it)
  • EVERYTHING BELOW THIS POINT IS TIMED ( IF YOU TAKE TO LONG IT WILL TIME OUT) {READ THIS THEN EXECUTE ACCORDINGLY)
  • Return to the IOS Device and play another game! (Try again)
  • Once your second game has been played a breakpoint should appear on Charles proxy.
  • Select the tab “Edit Request” (next to Overview)
  • Select JSON Right above Execute (Not Json Text)
  • You should see the Legit score you achieved.
  • Double click on the score you achieved and modify the value to a (Reasonable number) I.e (60000)
  • Now EXECUTE THAT BAD BOY. 
  • Once executed. Another menu should pop up ( the response). Select “Edit response” and make sure (score is what you set it too.
  • NOW EXECUTE THAT!

 

You now should have a modified value and the game will input your Modified score. 

 

Once you have the desired coins then you’re all set!

 

(Disconnecting Charles)

 

  • Select the Lock (Left of the turtle) *it will stop ssl pinning
  • Navigate to your iOS device and go to your settings > wifi > blue I next to the connected wifi > configure proxy > select OFF > Save
  • Navigate to General > About > Certificate Trust Settings > Select the Charles proxy to turn it off

 

Update 01/16/25

 

I found a work around for mac, It's going to require you to have frida-ps and objection (Bypass ssl pinning detection

https://prnt.sc/OEAMeSl-MIUw

 

I hope you guys enjoy this little exploit. If you have any questions let me know!

 

Updated by SkyVexy
Workaround found
  • Like 1
  • Agree 1
  • Informative 1
Posted

For some reason instead of v1 on the dropdown, I have 2 'unknown' fields, one arrow up (blue) and one arrow down(green).
Any ideas what could be the issue ?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Zombies Clicker v20.1.5 [+4 Jailed Cheats]
      Modded/Hacked App: Zombies Clicker By EDENAP d.o.o.
      Bundle ID: com.edenap.a3
      App Store Link: https://apps.apple.com/us/app/zombies-clicker/id6746955704?uo=4


      🤩 Hack Features

      - Add Currency
      - Add Prestige
      - Never Die
      - One Hit Kill
      • 0 replies
    • Zombies Clicker v20.1.5 [+4 Cheats]
      Modded/Hacked App: Zombies Clicker By EDENAP d.o.o.
      Bundle ID: com.edenap.a3
      App Store Link: https://apps.apple.com/us/app/zombies-clicker/id6746955704?uo=4



      🤩 Hack Features

      - Add Currency
      - Add Prestige
      - Never Die
      - One Hit Kill
      • 0 replies
    • June’s Journey: Hidden Objects v3.38.3 Jailed Cheats +2
      Modded/Hacked App: June’s Journey: Hidden Objects By wooga gmbh
      Bundle ID: net.wooga.junes-journey-hidden-object-mystery-game
      iTunes Store Link: https://apps.apple.com/us/app/junes-journey-hidden-objects/id1200391796?uo=4


      Hack Features:
      - Infinite Currencies
      - Instant Hint


      iOS Hack Download IPA Link: https://iosgods.com/topic/176104-june%E2%80%99s-journey-hidden-objects-v2946-jailed-cheats-2/
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 50 replies
    • Pal Go: Tower Defense TD v0.3.84 [+7 Cheats]
      Modded/Hacked App: Pal Go: Tower Defense TD By Playwind Ltd
      Bundle ID: com.playwindgames.freedefender
      iTunes Store Link: https://apps.apple.com/us/app/pal-go-tower-defense-td/id6479316663?uo=4


       

      🚀 Hack Features

      - [VIP] Freeze Currency (Currency will not decrease when used)

      - [VIP] Currency Always Enough (Buy even when you don't have enough currency)

      - [Free] Higher Recruit Energy (Gives 500 Recruit Energy Every Wave)

      - [Free] Always Can Drag Hero

      - [Free] Skip Ads

      - [Free] No Attack Cooldown

      - [Free] Global Speed Multiplier (Enable Inside Battle)

       

      Warning


      Do not use on main account. There is a chance of ban. Not responsible for any bans.

       


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/forum/79-no-jailbreak-section/
      🤖 Modded Android APK(s): https://iosgods.com/forum/68-android-section/
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 51 replies
    • Pal Go: Tower Defense TD v0.3.84 [+7 Jailed Cheats]
      Modded/Hacked App: Pal Go: Tower Defense TD By Playwind Ltd
      Bundle ID: com.playwindgames.freedefender
      iTunes Store Link: https://apps.apple.com/us/app/pal-go-tower-defense-td/id6479316663?uo=4


       

      Hack Features

      - [VIP] Freeze Currency (Currency will not decrease when used)

      - [VIP] Currency Always Enough (Buy even when you don't have enough currency)

      - [Free] Higher Recruit Energy (Gives 500 Recruit Energy Every Wave)

      - [Free] Always Can Drag Hero

      - [Free] Skip Ads

      - [Free] No Attack Cooldown

      - [Free] Global Speed Multiplier (Enable Inside Battle)

       

      Warning


      Do not use on main account. There is a chance of ban. Not responsible for any bans.

       

      Jailbreak required iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      Modded Android APKs: https://iosgods.com/forum/68-android-section/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 77 replies
    • Dopamine Hit Cheats v2.12.0 +5
      Modded/Hacked App: Dopamine Hit By Mobigames INC.
      Bundle ID: com.mobigames.fakeroem
      App Store Link: https://apps.apple.com/us/app/dopamine-hit/id6736514242?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - God Mode
      - Multiply Attack
      - No Skills Cooldown
      - Freeze Currencies
      - PREMIUM

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/196879-dopamine-hit-cheats-v2120-5/
        • Winner
      • 2 replies
    • DC: Dark Legion™ v2.1.24 [+2 Cheats]
      Modded/Hacked App: DC: Dark Legion™ By FunPlus International AG
      Bundle ID: com.kingsgroup.dcdl
      App Store Link: https://apps.apple.com/us/app/dc-dark-legion/id6479020757?uo=4

       

      Important


      Doesn't work on PvP contents.

      There is a high chance of ban. Not responsible for any bans. Do not use on main account.

      1- Enable Activate Cheat

      2- Enable both multiplier

       

       

      🤩 Hack Features

      - Damage Multiplier
      - Defense Multiplier
        • Agree
        • Thanks
        • Winner
        • Like
      • 15 replies
    • DC: Dark Legion™  v2.1.24 [+2 Jailed Cheats]
      Modded/Hacked App: DC: Dark Legion™ By FunPlus International AG
      Bundle ID: com.kingsgroup.dcdl
      iTunes Store Link: https://apps.apple.com/us/app/dc-dark-legion/id6479020757?uo=4

      🤩 Hack Features
      - Damage Multiplier
      - Defense Multiplier
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 118 replies
    • Gossip Harbor®: Merge & Story v3.68.0 [+2 Jailed Cheats]
      Modded/Hacked App: Gossip Harbor®: Merge & Story By Microfun Limited
      Bundle ID: com.mergegame.icookie
      App Store Link: https://apps.apple.com/us/app/gossip-harbor-merge-story/id1623318294?uo=4



      🤩 Hack Features

      - Unlimited Energy
      - Freeze Currency (Never Decrease)
        • Agree
        • Thanks
        • Winner
        • Like
      • 14 replies
    • Gossip Harbor®: Merge & Story v3.68.0 [+2 Cheats]
      Modded/Hacked App: Gossip Harbor®: Merge & Story By Microfun Limited
      Bundle ID: com.mergegame.icookie
      App Store Link: https://apps.apple.com/us/app/gossip-harbor-merge-story/id1623318294?uo=4



      🤩 Hack Features

      - Unlimited Energy
      - Freeze Currency (Never Decrease)
       
        • Haha
        • Winner
        • Like
      • 5 replies
    • Idle Zombie Miner: Gold Tycoon v2.241.1875 +1++ Jailed Cheat [ Currencies ]
      Modded/Hacked App: Idle Zombie Miner: Gold Tycoon By VISTREX LIMITED
      Bundle ID: com.zombie.idleminertycoon
      iTunes Store Link: https://apps.apple.com/us/app/idle-zombie-miner-gold-tycoon/id6471983323?uo=4


      Hack Features:
      - Unlimited Currencies -> Will increase instead of decrease.


      Jailbreak required hack(s): [Mod Menu Hack] Idle Zombie Miner: Gold Tycoon v2.53.1001 +1++ Cheat [ Unlimited Currencies ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 101 replies
    • Idle Zombie Miner: Gold Tycoon v2.241.1875 +1++ Cheat [ Currencies ]
      Modded/Hacked App: Idle Zombie Miner: Gold Tycoon By VISTREX LIMITED
      Bundle ID: com.zombie.idleminertycoon
      iTunes Store Link: https://apps.apple.com/us/app/idle-zombie-miner-gold-tycoon/id6471983323?uo=4


      Hack Features:
      - Unlimited Currencies -> Will increase instead of decrease.


      Non-Jailbroken & No Jailbreak required hack(s): [Non-Jailbroken Hack] Idle Zombie Miner: Gold Tycoon v2.53.1001 +1++ Jailed Cheat [ Unlimited Currencies ] - Free Non-Jailbroken IPA Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 69 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines