Jump to content

Pengu - Virtual Pets (DIY Charles Proxy exploit)


19 posts in this topic

Recommended Posts

Updated (edited)

Charles installation: Step 1.

 

  • Install Charles Proxy following the standard directions. https://www.charlesproxy.com/download/
  • Start the program.
  • Go to Proxy > Proxy Settings.
  • Select the Proxies tab, enter "8888" in the HTTP Proxy Port field then select Ok.
  • Go back to the proxy tab and select “SSL Proxy settings”
  • Select (“Enable SSL Proxying”), Then Select “Add”
  •                 In The “Host” Field Input your Ipv4 address. Also in the “Port” field make sure to input 8888
  •                 *IMPORTANT* To find your Ipv4 In “Charles Proxy”, select (Help > SSL Proxying > Install charles root certificate on a mobile device or remote browser. Follow the directions Prompted! (Please Read everything to avoid issues)

 

Charles Installation IOS (Step 2)

 

  • On your iphone navigate to Settings > Wi-Fi > Select the “I’ next to your connected wifi > scroll to the bottom and select "Configure PROXY". > Select Manual > type in the SAME Ipv4 and Port you’re using!
  • Open Safari on your iPhone.
  • Browse to https://chls.pro/ssl.
  • Safari will prompt you to install the SSL certificate.
  • If you are on iOS 10.3 or later, open the Settings app and navigate to General > About > Certificate Trust Settings.
  • Find the Charles Proxy certificate and enable the certificate.

Now, your iPhone is set up to use Charles Proxy for intercepting and monitoring HTTPS traffic.

 

 

Into the exploit Step 1.

 

Now that everything is enabled! Make sure that Pengu is installed on your device!

 

  • Open Pengu on you iOS Device.
  • Sign up and create your pet. 
  • Once you have your pet, Go to the controller in the bottom left corner ( the arcade)
  • Stay on the arcade page and navigate to your computer.
  • Within Charles proxy you should already see some data popping up (Noise) Condense this by typing in “Pengu” In the “filter” field below the data(noise). It will single out the App we’re trying to exploit.
  • Start the SSL proxying by selecting the lock ( To the left of the turtle icon)
  • Once you’ve selected the Lock. The lock should no longer look opened. (locked) You are now SSL Pinning
  • Click the brush to clear the Pengu data. ( left of the record icon)
  • Navigate to your iOS device and start a Pengu flappy bird game!
  • Play the Pengu bird game legit ( just get more than 1 point)
  • After you played a game. You should have 2 hearts left. (Stay on this page)
  • Navigate to Charles Proxy (Computer) you should see https://Penguapp.co select the arrow for the drop down menu and navigate to, v1 > games > flappy-pengu > (Pengu Id) > Select "Report"
  • To the right of report you should see two lists Request(Top)/Response(Bottom) Select (JSON) for both menus These are going to contain your score( which we will change)

 

 

Changing Values ( Step 2)

 

Now that you have survived the first step This will be easier >Trust<

 

  • Right click on the “Report” option mentioned in *Step 1*
  • Navigate to “Breakpoints” and Select it. ( It will now have a check mark next to it)
  • EVERYTHING BELOW THIS POINT IS TIMED ( IF YOU TAKE TO LONG IT WILL TIME OUT) {READ THIS THEN EXECUTE ACCORDINGLY)
  • Return to the IOS Device and play another game! (Try again)
  • Once your second game has been played a breakpoint should appear on Charles proxy.
  • Select the tab “Edit Request” (next to Overview)
  • Select JSON Right above Execute (Not Json Text)
  • You should see the Legit score you achieved.
  • Double click on the score you achieved and modify the value to a (Reasonable number) I.e (60000)
  • Now EXECUTE THAT BAD BOY. 
  • Once executed. Another menu should pop up ( the response). Select “Edit response” and make sure (score is what you set it too.
  • NOW EXECUTE THAT!

 

You now should have a modified value and the game will input your Modified score. 

 

Once you have the desired coins then you’re all set!

 

(Disconnecting Charles)

 

  • Select the Lock (Left of the turtle) *it will stop ssl pinning
  • Navigate to your iOS device and go to your settings > wifi > blue I next to the connected wifi > configure proxy > select OFF > Save
  • Navigate to General > About > Certificate Trust Settings > Select the Charles proxy to turn it off

 

Update 01/16/25

 

I found a work around for mac, It's going to require you to have frida-ps and objection (Bypass ssl pinning detection

https://prnt.sc/OEAMeSl-MIUw

 

I hope you guys enjoy this little exploit. If you have any questions let me know!

 

Updated by SkyVexy
Workaround found
  • Like 1
  • Agree 1
  • Informative 1
Posted

For some reason instead of v1 on the dropdown, I have 2 'unknown' fields, one arrow up (blue) and one arrow down(green).
Any ideas what could be the issue ?

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Hunt And Hook:Frontier v0.15 [ +4 Cheats ] Currency Max
      Modded/Hacked App: Hunt And Hook:Frontier By Nexelon inc.
      Bundle ID: com.nexelon.hunthook
      App Store Link: https://apps.apple.com/us/app/hunt-and-hook-frontier/id6744633735?uo=4


      🤩 Hack Features

      - Gems
      - Gold
      - Life
      - Ammo
      • 2 replies
    • Hunt And Hook:Frontier v0.15 [ +4 Jailed ] Currency Max
      Modded/Hacked App: Hunt And Hook:Frontier By Nexelon inc.
      Bundle ID: com.nexelon.hunthook
      App Store Link: https://apps.apple.com/us/app/hunt-and-hook-frontier/id6744633735?uo=4
       

      🤩 Hack Features

      - Gems
      - Gold
      - Life
      - Ammo
      • 1 reply
    • Land Builder v1.26.0 [ +3 Cheats ] Currency Max
      Modded/Hacked App: Land Builder By SayGames LTD
      Bundle ID: com.game.perfectlands
      App Store Link: https://apps.apple.com/us/app/land-builder/id6443774303?uo=4 

      🤩 Hack Features

      - Gems
      - Gold
      - Skip
      • 0 replies
    • Land Builder v1.26.0 [ +3 Jailed ] Currency Max
      Modded/Hacked App: Land Builder By SayGames LTD
      Bundle ID: com.game.perfectlands
      App Store Link: https://apps.apple.com/us/app/land-builder/id6443774303?uo=4
       

      🤩 Hack Features

      - Gems
      - Gold
      - Skip
      • 0 replies
    • Otherworld Three Kingdoms Cheats v1.0.33 +4
      Modded/Hacked App: Otherworld Three Kingdoms By SuperPlanet corp.
      Bundle ID: com.superplanet.samworld
      iTunes Store Link: https://apps.apple.com/us/app/otherworld-three-kingdoms/id6496345383?uo=4


      Hack Features:
      - Multiply Attack
      - Multiply Defense
      - Instant Skills


      iOS Hack Download Link: https://iosgods.com/topic/183743-otherworld-three-kingdoms-cheats-v103-3/
        • Like
      • 137 replies
    • Boxing Star: Real Boxing Fight Cheats v7.1.0 +4
      Modded/Hacked App: Boxing Star: Real Boxing Fight By THUMBAGE Co., Ltd
      Bundle ID: com.ftt.boxingstar.gl.ios
      iTunes Store Link: https://apps.apple.com/us/app/boxing-star-real-boxing-fight/id1241887528?uo=4


      Hack Features:
      - Multiply Attack
      - Multiply Defense
      - God Mode
      - One Touch & Win

      Free Non-Jailbroken Hack: https://iosgods.com/topic/92347-boxing-star-real-boxing-fight-v620-jailed-cheats-4/


      Hack Download Link: https://iosgods.com/topic/72805-boxing-star-real-boxing-fight-cheats-v620-4/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,687 replies
    • Travel Town - Merge Adventure v2.12.1170 Jailed Cheats +1
      Modded/Hacked App: Travel Town - Merge Adventure By Magmatic Games Ltd
      Bundle ID: io.randomco.travel
      iTunes Store Link: https://apps.apple.com/us/app/travel-town-merge-adventure/id1521236603?uo=4


      Hack Features:
      - Infinite Currencies


      iOS Hack Download Link: https://iosgods.com/topic/148953-travel-town-merge-adventure-v212287-jailed-cheats-1/
        • Agree
        • Like
      • 791 replies
    • Zooba: Zoo Battle Royale Game v5.22.0 Jailed Cheats +2
      Modded/Hacked App: Zooba: Zoo Battle Royale Games By Wildlife Studios Limited
      Bundle ID: com.fungames.battleroyale
      iTunes Store Link: https://apps.apple.com/us/app/zooba-zoo-battle-royale-games/id1459402952?uo=4


      Hack Features:
      - Map Hacks
      - Allow Shoot in Water


      Jailbreak required hack(s): https://iosgods.com/topic/131104-arm64-zooba-zoo-battle-royale-game-cheats-all-versions-2/


      iOS Hack Download Link: https://iosgods.com/topic/131134-arm64-zooba-zoo-battle-royale-game-v320-jailed-cheats-2/
        • Informative
      • 1,318 replies
    • Matchington Mansion Cheats v1.185.0 +5
      Modded/Hacked App: Matchington Mansion By Magic Tavern, Inc.
      Bundle ID: com.matchington.mansion
      iTunes Store Link: https://apps.apple.com/us/app/matchington-mansion/id1216575026?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Infinite Moves
      - Infinite Lives
      - Infinite Booster
      - Infinite Coin (Spend some/ Get some)
      - Infinite Stars (Complete task without needing Stars)

       

      Non-Jailbroken Hack: https://iosgods.com/topic/75130-matchington-mansion-v11750-jailed-cheats-3/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/75127-matchington-mansion-cheats-v11770-5/
      • 806 replies
    • Disney Magic Kingdoms Cheats v10.7.0 +1
      Modded/Hacked App: Disney Magic Kingdoms By Gameloft
      Bundle ID: com.gameloft.disneykingdom
      iTunes Store Link: https://apps.apple.com/us/app/disney-magic-kingdoms/id731592936?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Free Store ( not Free iAP )

       

      Non-Jailbroken Hack: https://iosgods.com/topic/184748-disney-magic-kingdoms-v1012-jailed-cheats-1/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/147877-disney-magic-kingdoms-cheats-v1020-1/
        • Informative
      • 391 replies
    • Dragons: Rise of Berk v1.99.6 +5 Cheats
      Modded/Hacked App: Dragons: Rise of Berk By Jam City, Inc.
      Bundle ID: com.ludia.dragons
      iTunes Store Link: https://apps.apple.com/us/app/dragons-rise-of-berk/id667461862?uo=4


      Hack Features:
      - Free Shopping (shows original cost but able to purchase regardless)
      - Free Skipping
      - Free Odin's Market Shopping
      - Odin's Market Packs Never Reduce
      - Currency Hack [Spend to Gain - reverts to zero on next launch]
      - Enable Rider's Club


      Non-Jailbroken & No Jailbreak required hack(s):  https://iosgods.com/topic/79228-dragons-rise-of-berk-v1794-4-cheats-for-jailed-idevices/


      iOS Hack Download Link: https://iosgods.com/topic/139612-dragons-rise-of-berk-v1794-6-cheats/
        • Haha
      • 697 replies
    • Dragon City - Breed & Battle! Cheats v25.10.1 +4
      Modded/Hacked App: Dragon City - Breed & Battle! By Socialpoint
      Bundle ID: es.socialpoint.dragoncity
      iTunes Store Link: https://apps.apple.com/us/app/dragon-city-breed-battle/id561941526?uo=4


      Hack Features:
      - One Hit Kill
      - God Mode 
      - Auto-Battle Unlocked

      This hack is using the new iOSGods Auto Updater. The hack will automatically update itself to the current app version you have installed on your iDevice.
      Note:
      Everything is linked with enemies, please use it carefully

      This hack works on the latest x64 or ARM64 & ARM64e iDevices: iPhone 5s, 6, 6 Plus, 6s, 6s Plus, 7, 7 Plus, 8, 8 Plus, X, Xr, Xs, Xs Max, 11, 11 Pro, 11 Pro Max, 12, 12 Pro, 12 Pro Max, 12 Mini, 13, 13 Pro, 13 Pro Max, 13 Mini, 14, 14 Plus, 14 Pro, 14 Pro Max, SE, iPod Touch 6G, 7G, iPad Air, Air 2, iPad Pro & iPad Mini 2, 3, 4, 5, 6 and later.


      iOS Hack Download Link: https://iosgods.com/topic/129371-dragon-city-mobile-cheats-auto-updating-3-god-mode-one-hit-kill/
        • Informative
        • Haha
        • Winner
        • Like
      • 2,196 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines