Jump to content

Pengu - Virtual Pets (DIY Charles Proxy exploit)


19 posts in this topic

Recommended Posts

Updated (edited)

Charles installation: Step 1.

 

  • Install Charles Proxy following the standard directions. https://www.charlesproxy.com/download/
  • Start the program.
  • Go to Proxy > Proxy Settings.
  • Select the Proxies tab, enter "8888" in the HTTP Proxy Port field then select Ok.
  • Go back to the proxy tab and select “SSL Proxy settings”
  • Select (“Enable SSL Proxying”), Then Select “Add”
  •                 In The “Host” Field Input your Ipv4 address. Also in the “Port” field make sure to input 8888
  •                 *IMPORTANT* To find your Ipv4 In “Charles Proxy”, select (Help > SSL Proxying > Install charles root certificate on a mobile device or remote browser. Follow the directions Prompted! (Please Read everything to avoid issues)

 

Charles Installation IOS (Step 2)

 

  • On your iphone navigate to Settings > Wi-Fi > Select the “I’ next to your connected wifi > scroll to the bottom and select "Configure PROXY". > Select Manual > type in the SAME Ipv4 and Port you’re using!
  • Open Safari on your iPhone.
  • Browse to https://chls.pro/ssl.
  • Safari will prompt you to install the SSL certificate.
  • If you are on iOS 10.3 or later, open the Settings app and navigate to General > About > Certificate Trust Settings.
  • Find the Charles Proxy certificate and enable the certificate.

Now, your iPhone is set up to use Charles Proxy for intercepting and monitoring HTTPS traffic.

 

 

Into the exploit Step 1.

 

Now that everything is enabled! Make sure that Pengu is installed on your device!

 

  • Open Pengu on you iOS Device.
  • Sign up and create your pet. 
  • Once you have your pet, Go to the controller in the bottom left corner ( the arcade)
  • Stay on the arcade page and navigate to your computer.
  • Within Charles proxy you should already see some data popping up (Noise) Condense this by typing in “Pengu” In the “filter” field below the data(noise). It will single out the App we’re trying to exploit.
  • Start the SSL proxying by selecting the lock ( To the left of the turtle icon)
  • Once you’ve selected the Lock. The lock should no longer look opened. (locked) You are now SSL Pinning
  • Click the brush to clear the Pengu data. ( left of the record icon)
  • Navigate to your iOS device and start a Pengu flappy bird game!
  • Play the Pengu bird game legit ( just get more than 1 point)
  • After you played a game. You should have 2 hearts left. (Stay on this page)
  • Navigate to Charles Proxy (Computer) you should see https://Penguapp.co select the arrow for the drop down menu and navigate to, v1 > games > flappy-pengu > (Pengu Id) > Select "Report"
  • To the right of report you should see two lists Request(Top)/Response(Bottom) Select (JSON) for both menus These are going to contain your score( which we will change)

 

 

Changing Values ( Step 2)

 

Now that you have survived the first step This will be easier >Trust<

 

  • Right click on the “Report” option mentioned in *Step 1*
  • Navigate to “Breakpoints” and Select it. ( It will now have a check mark next to it)
  • EVERYTHING BELOW THIS POINT IS TIMED ( IF YOU TAKE TO LONG IT WILL TIME OUT) {READ THIS THEN EXECUTE ACCORDINGLY)
  • Return to the IOS Device and play another game! (Try again)
  • Once your second game has been played a breakpoint should appear on Charles proxy.
  • Select the tab “Edit Request” (next to Overview)
  • Select JSON Right above Execute (Not Json Text)
  • You should see the Legit score you achieved.
  • Double click on the score you achieved and modify the value to a (Reasonable number) I.e (60000)
  • Now EXECUTE THAT BAD BOY. 
  • Once executed. Another menu should pop up ( the response). Select “Edit response” and make sure (score is what you set it too.
  • NOW EXECUTE THAT!

 

You now should have a modified value and the game will input your Modified score. 

 

Once you have the desired coins then you’re all set!

 

(Disconnecting Charles)

 

  • Select the Lock (Left of the turtle) *it will stop ssl pinning
  • Navigate to your iOS device and go to your settings > wifi > blue I next to the connected wifi > configure proxy > select OFF > Save
  • Navigate to General > About > Certificate Trust Settings > Select the Charles proxy to turn it off

 

Update 01/16/25

 

I found a work around for mac, It's going to require you to have frida-ps and objection (Bypass ssl pinning detection

https://prnt.sc/OEAMeSl-MIUw

 

I hope you guys enjoy this little exploit. If you have any questions let me know!

 

Updated by SkyVexy
Workaround found
  • Like 1
  • Agree 1
  • Informative 1
Posted

For some reason instead of v1 on the dropdown, I have 2 'unknown' fields, one arrow up (blue) and one arrow down(green).
Any ideas what could be the issue ?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • [ iGameGod ] Township [ All iOS Versions ] +3 Cheats
      Modded/Hacked App: Township By PLR Worldwide Sales Limited
      Bundle ID: com.playrix.township-ios
      iTunes Store Link: https://apps.apple.com/us/app/township/id638689075?uo=4


      DIY Requirements:
      - Non-Jailbroken or Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod App / iGameGod Non-Jailbroken


      DIY Features:
      - Cash

      - Gold

      - XP
      • 294 replies
    • Cafeland - World Kitchen Cheats v2.49.3 +1
      Modded/Hacked App: Cafeland - World Kitchen by Gamegos Internet Teknolojileri Ltd Sti.
      Bundle ID: com.gamegos.mobile.cafeland
      iTunes Store Link: https://apps.apple.com/us/app/cafeland-world-kitchen/id1147665432?uo=4&at=1010lce4



      Hack Features:
      - Freeze Currencies


      iOS Hack Download Link: https://iosgods.com/topic/100701-arm64-cafeland-world-kitchen-cheats-v2023-1/
      • 417 replies
    • Cafeland - World Kitchen v2.49.3 Jailed Cheats +1
      Modded/Hacked App: Cafeland - World Kitchen by Gamegos Internet Teknolojileri Ltd Sti.
      Bundle ID: com.gamegos.mobile.cafeland
      iTunes Store Link: https://apps.apple.com/us/app/cafeland-world-kitchen/id1147665432?uo=4&at=1010lce4


      Hack Features:
      - Freeze Currencies

      iOS Hack Download Link: https://iosgods.com/topic/100703-arm64-cafeland-world-kitchen-v2182-jailed-cheats-1/
      • 572 replies
    • My Cafe — Restaurant game Cheats v2025060.0.740 +3
      Modded/Hacked App: My Cafe — Restaurant Game By Melsoft
      Bundle ID: com.Melesta.MyCafe
      iTunes Store Link: https://apps.apple.com/us/app/my-cafe-restaurant-game/id1068204657?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Increase Game Speed
      - No Timer to Buy Energy
      - Custom Dice Value


      Notes:
      - DO NOT BUY VIP FOR OTHER FEATURES, IT HAS BEEN PATCHED AND NO LONGER WORK

       

      Non-Jailbroken Hack: https://iosgods.com/topic/134272-my-cafe-%E2%80%94-restaurant-game-v20250205684-3-cheats/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/130634-my-cafe-%E2%80%94-restaurant-game-cheats-v20250300691-3/
      • 657 replies
    • MARVEL Contest of Champions v51.0.0 +11++ Amazing Cheats!
      Modded/Hacked App: MARVEL Contest of Champions By Kabam
      Bundle ID: com.kabam.marvelbattle
      iTunes Link: https://itunes.apple.com/us/app/marvel-contest-of-champions/id896112560?mt=8&uo=4&at=1010lce4


      Hack Features
      - Enemy/AI Doesn't Attack
      - Special Attack/Skill Always Available
      - No Knockbacks When Hit
      - No Knockdowns When Hit
      - Enemy Doesn't Block
      - Auto Win - Whoever Attacks first, loses. Disable AI Doesn't Attack for this to work.
      - One Hit Kill / High Damage - Linked. Attack first or use with Enemy Doesn't Attack.

      Non-Jailbroken version of this hack: https://iosgods.com/topic/44075-marvel-contest-of-champions-v1311-2-cheats-for-jailed-devices/
        • Informative
      • 3,496 replies
    • Archer Hunter: Roguelike Game v0.29.462 [ +4 Jailed ] Currency Max
      Modded/Hacked App: Archer Hunter: Roguelike Game By Suga Pte. Ltd.
      Bundle ID: co.imba.archero
      iTunes Store Link: https://apps.apple.com/us/app/archer-hunter-roguelike-game/id1543119725?uo=4


      🤩 Hack Features

      - Gems [ Revive To Get Disable After Hack ]
      - Coins [ Weapon Up To Get Disable After Hack ]
      - HP [ Check Status ]
      - ATK [ Check Status ]


      🍏 Jailbreak iOS hacks: https://iosgods.com/forum/5-game-cheats-hack-requests/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/
      • 25 replies
    • Archer Hunter: Roguelike Game v0.29.462 [ +4 Cheats ] Currency Max
      Modded/Hacked App: Archer Hunter: Roguelike Game By Suga Pte. Ltd.
      Bundle ID: co.imba.archero
      iTunes Store Link: https://apps.apple.com/us/app/archer-hunter-roguelike-game/id1543119725?uo=4



      🤩 Hack Features

      - Gems [ Revive To Get Disable After Hack ]
      - Coins [ Weapon Up To Get Disable After Hack ]
      - HP [ Check Status ]
      - ATK [ Check Status ] 


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/forum/79-no-jailbreak-section/
      🤖 Modded Android APKs: https://iosgods.com/forum/68-android-section/

       

      ⬇️ iOS Hack Download Link


      Hidden Content

      Download Hack
      • 19 replies
    • Nighty Knight: Frontier War TD v1.0.61 [ +9 Jailed ] Currency Max
      Modded/Hacked App: Nighty Knight: Frontier War TD By Pusilung HK Limited
      Bundle ID: com.ezg011.empire.war.td.strategy.tower.defend.game
      iTunes Store Link: https://apps.apple.com/us/app/nighty-knight-frontier-war-td/id6740115606?uo=4


      🤩 Hack Features

      - Currency Unlimited [ Earns Some ] Show 0 - NaN But Works

      - Resources Unlimited [ Earns Some ] Show 0 - NaN But Works

      - Energy Cost 0 

      - Hp [ Equip Status Check ]

      - DMG [ Equip Status Check ]

      - Tower Cost

      - Silver Coins [ Build Tower ]

      - Enemy Max 1

      - Enemy Freeze
      • 41 replies
    • Arcane Defense v0.12.0 [ +2 Jailed ] ADS Free
      Modded/Hacked App: Arcane Defense By Keystorm Holdings Limited
      Bundle ID: com.game.arcanedefense
      App Store Link: https://apps.apple.com/us/app/arcane-defense/id6642700751?uo=4
       

      🤩 Hack Features

      - Premium + ADS
      - DMG

      • 4 replies
    • Arcane Defense v0.12.0 [ +2 Cheats ] ADS Free
      Modded/Hacked App: Arcane Defense By Keystorm Holdings Limited
      Bundle ID: com.game.arcanedefense
      iTunes Store Link: https://apps.apple.com/us/app/arcane-defense/id6642700751?uo=4
       

      🤩 Hack Features

      - Premium + ADS
      - DMG

      • 10 replies
    • Cooking World: Cooking Games v1.7 [ +4 Cheats ] Currency Max
      Modded/Hacked App: Cooking World: Cooking Games By MagicSeven Co., Ltd
      Bundle ID: com.cooking.world.chef.craze.restaurant.fever
      iTunes Store Link: https://apps.apple.com/us/app/cooking-world-cooking-games/id6469040590?uo=4
       

      🤩 Hack Features

      - Gems [ Earn Some ]
      - Coins [ Earn Some ]
      - Exp [ Earn Some + Rewards ] Breakable Feature

      - Lives [ Linked With Exp ]
      • 11 replies
    • Cooking World: Cooking Games v1.7 [ +4 Jailed ] Currency Max
      Modded/Hacked App: Cooking World: Cooking Games By MagicSeven Co., Ltd
      Bundle ID: com.cooking.world.chef.craze.restaurant.fever
      iTunes Store Link: https://apps.apple.com/us/app/cooking-world-cooking-games/id6469040590?uo=4

       

      🤩 Hack Features

      - Gems [ Earn Some ]
      - Coins [ Earn Some ]
      - Exp [ Earn Some + Rewards ] Breakable Feature 

      - Lives [ Linked With Exp ]
      • 13 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines