Jump to content

[Breaking Security]How to disable syscall (anti-debugging protection)


318 posts in this topic

Recommended Posts

Posted

I made this tutorial in April of 2015 for the cheaters here and after almost a year of it being private I decided to post it to the public.

 

Gameloft always uses syscall on their games, and while this was written in April, MC5 still has removable syscall and you can use MC5 to practice :)

 

Requirements:

- IDA Pro

- Modern Combat 5

- GNU Debugger from cydia.radare.org (repo)

- OpenSSH

- Clutch 1.4.7-2

- armv7 binary of MC5, crack it on a 32 bit device for it to be armv7. I won't post one here because of copyright issues.

 

Below this line is the exact text I wrote on April 10, 2015. Enjoy :)

 

------

Hidden Content

    What is syscall? Syscall is anti-debugging protection. This is what causes the Segmentation Fault: 11 when trying to attach to an app. But as hackers we need to attach to an app, and thats why I made this tutorial :snoop:

     

    Again, I'm using MC5.

     

    Let's get started :p

     

    1. Open up the binary in IDA and wait like four to five minutes so that you can actually xref.

     

    2. Once you have waited, click on the "Imports" tab and search for syscall.

    nvzZIjL.jpg

     

    3. Double click it and xref to syscall's location in the binary. Here is the function that you are looking for:

    nuc5Cfj.jpg

     

    It should have _getpid, _memset, and _sysctl there.

     

    4. Highlight the BLX _syscall (or BLX.W _syscall sometimes), and click "Hex View 1". The hex should be highlighted. Now right click before the beginning of the highlighted hex and click "edit".

    fLfnXh3.jpg

     

    5. Now type "C046C046". This means NOP, or no instruction/operation. Basically it makes the app ignore the instruction. The edited hex should have turned orange.

    Wpp9SuU.jpg

     

    6. Save your changes. Right click on the orange edited hex and click "Apply changes".

    0oIyscA.jpg

     

    7. After that, go back to IDA View A and confirm that the BLX _syscall and the instruction below it is NOP'ed.

     

    8. Apply your changes to the binary. Go to Edit --> Patch program --> Apply patches to input file. Create a backup if you want to.

    9Hrh8Xv.jpg

     

    9. Replace the original binary with the hacked binary and set the permissions to:

    Owner: mobile

    Group: mobile

     

    User: read, write, execute

    Group: read, write, execute

    World: read, write, execute

     

    Now you are done! Try to attach and it should work! :)

Proof: (me attaching to Modern Combat 5 in GDB)

 

xrLa6qY.jpg

Posted

Thanks for sharing ! ;)


One question.

when the app do not use _syscall what it could be ?

i searched for all methods that check if they had Cydia or etc.

 

Thanks.

  • Like 46
  • Winner 2
  • Thanks 3
  • Haha 3
  • Agree 8
  • Informative 2
Posted

Thanks for sharing ! ;)

One question.

when the app do not use _syscall what it could be ?

i searched for all methods that check if they had Cydia or etc.

 

Thanks.

 

It's ptrace. Try searching imports for ptrace

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Family Island — Farm game v2025146.1.75628 Jailed Cheats +1
      Modded/Hacked App: Family Island™ — Farm game by Melsoft
      Bundle ID: com.MelsoftGames.FamilyIsland
      iTunes Store Link: https://apps.apple.com/us/app/family-island-farm-game/id1464689103?uo=4&at=1010lce4


      Hack Features:
      - Cheat Engine Enabled


      iOS Hack Download Link: https://iosgods.com/topic/115337-arm64-family-island-%E2%80%94-farm-game-v20190824862-jailed-cheats-1/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 2,307 replies
    • Train of Hope: Survival Game v1.8.2 +5 Jailed Cheats [ Damage & Defence ]
      Modded/Hacked App: Train of Hope: Survival Game By Samfinaco LLC
      Bundle ID: com.samfinaco.tos
      iTunes Store Link: https://apps.apple.com/us/app/train-of-hope-survival-game/id6636482655?uo=4

       
       

      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
      - Unlimited Resources -> Will increase instead of decrease.
      - Unlimited Hero Experience -> Will increase instead of decrease.
        • Haha
        • Thanks
        • Winner
        • Like
      • 42 replies
    • Train of Hope: Survival Game v1.8.2 +5 Cheats [ Damage & Defence ]
      Modded/Hacked App: Train of Hope: Survival Game By Samfinaco LLC
      Bundle ID: com.samfinaco.tos
      iTunes Store Link: https://apps.apple.com/us/app/train-of-hope-survival-game/id6636482655?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
      - Unlimited Resources -> Will increase instead of decrease.
      - Unlimited Hero Experience -> Will increase instead of decrease.
        • Agree
        • Like
      • 39 replies
    • Final Outpost v2.3.19 [+3 Jailed Cheats]
      Modded/Hacked App: Final Outpost By Exabyte Games Ltd
      Bundle ID: com.samclothier.DEADfense
      iTunes Store Link: https://apps.apple.com/us/app/final-outpost/id1425444801?uo=4



      🤩 Hack Features

      -  Always Enough Resources
      -  Always Attain Skill
      -  No Food Consume
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 20 replies
    • Final Outpost v2.3.19 [+3 Cheats]
      Modded/Hacked App: Final Outpost By Exabyte Games Ltd
      Bundle ID: com.samclothier.DEADfense
      iTunes Store Link: https://apps.apple.com/us/app/final-outpost/id1425444801?uo=4

       

      🤩 Hack Features

      -  Always Enough Resources
      -  Always Attain Skill
      -  No Food Consume
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 15 replies
    • Feed the Deep v1.0.6 [+6 Jailed Cheats]
      Modded/Hacked App: Feed the Deep By L MUSCAT ENTERPRISES PTY LTD
      Bundle ID: com.Luke-Muscat.FtD
      App Store Link: https://apps.apple.com/us/app/feed-the-deep/id6745767745?uo=4



      🤩 Hack Features

      - Free IAP
      - Never Die
      - Add Gold (Enable inside game)
      - Add Orb (Enable inside game)
      - Add Ammo (Enable inside game)
      - Unlimited Oxygen
        • Informative
        • Agree
        • Winner
        • Like
      • 6 replies
    • Feed the Deep v1.0.6 [+6 Cheats]
      Modded/Hacked App: Feed the Deep By L MUSCAT ENTERPRISES PTY LTD
      Bundle ID: com.Luke-Muscat.FtD
      App Store Link: https://apps.apple.com/us/app/feed-the-deep/id6745767745?uo=4


       

      🤩 Hack Features

      - Free IAP
      - Never Die
      - Add Gold (Enable inside game)
      - Add Orb (Enable inside game)
      - Add Ammo (Enable inside game)
      - Unlimited Oxygen
        • Winner
        • Like
      • 4 replies
    • Amikin Village: Magic Sim RPG v1.0.5 +5 Jailed Cheats [ Damage + More ]
      Modded/Hacked App: Amikin Village: Magic Sim RPG By HELIO LTD
      Bundle ID: com.heliogames.amikin.survival
      App Store Link: https://apps.apple.com/us/app/amikin-village-magic-sim-rpg/id6478102304?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - God Mode
      - Speed Multiplier
      - Unlimited Weapon Durability
      - Split Hack
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 322 replies
    • Amikin Village: Magic Sim RPG v1.0.5 +5 Cheats [ Damage + More ]
      Modded/Hacked App: Amikin Village: Magic Sim RPG By HELIO LTD
      Bundle ID: com.heliogames.amikin.survival
      App Store Link: https://apps.apple.com/us/app/amikin-village-magic-sim-rpg/id6478102304?uo=4

       
       

      🤩 Hack Features

      - Damage Multiplier
      - God Mode
      - Speed Multiplier
      - Unlimited Weapon Durability
      - Split Hack
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 108 replies
    • Goblins Wood: Tycoon Idle Sim v2.50.0 +1++ Jailed Cheat [ Unlimited Currencies ]
      Modded/Hacked App: Goblins Wood: Tycoon Idle Sim By ProGamesLab LTD
      Bundle ID: idle.goblins.wood.tycoon
      iTunes Store Link: https://apps.apple.com/us/app/goblins-wood-tycoon-idle-sim/id6446766326?uo=4


      Hack Features:
      - Unlimited Currencies -> Will increase instead of decrease.


      Jailbreak required hack(s): [Mod Menu Hack] Goblins Wood: Tycoon Idle Sim v2.42.0 +1++ Cheat [ Unlimited Currencies ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Agree
        • Thanks
        • Winner
        • Like
      • 29 replies
    • Goblins Wood: Tycoon Idle Sim v2.50.0 +1++ Cheat [ Unlimited Currencies ]
      Modded/Hacked App: Goblins Wood: Tycoon Idle Sim By ProGamesLab LTD
      Bundle ID: idle.goblins.wood.tycoon
      iTunes Store Link: https://apps.apple.com/us/app/goblins-wood-tycoon-idle-sim/id6446766326?uo=4


      Hack Features:
      - Unlimited Currencies -> Will increase instead of decrease.


      Non-Jailbroken & No Jailbreak required hack(s): [IPA Mod Menu] Goblins Wood: Tycoon Idle Sim v2.42.0 +1++ Jailed Cheat [ Unlimited Currencies ] - Free Non-Jailbroken IPA Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Agree
        • Thanks
        • Winner
        • Like
      • 34 replies
    • Guardian War: RPG Pixel Games v0.2.649 +3 Jailed Cheats
      Modded/Hacked App: Guardian War: RPG Pixel Games By Pitado Viet Nam JSC
      Bundle ID: com.fansipan.guardian.war.rpg.pixel.hero.adventure.games
      iTunes Store Link: https://apps.apple.com/us/app/guardian-war-rpg-pixel-games/id6472647574?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - Damage Multiplier
      - Never Die
      - Add Resources


      Jailbreak required hack(s): 


      iOS Hack Download IPA Link:

      Hidden Content

      Download via the iOSGods App








      PC Installation Instructions:
      STEP 1: If necessary, uninstall the app if you have it installed on your iDevice. Some hacked IPAs will install as a duplicate app. Make sure to back it up so you don't lose your progress.
      STEP 2: Download the pre-hacked .IPA file from the link above to your computer. To download from the iOSGods App, see this tutorial topic.
      STEP 3: Download Sideloadly and install it on your PC.
      STEP 4: Open/Run Sideloadly on your computer, connect your iOS Device, and wait until your device name shows up.
      STEP 5: Once your iDevice appears, drag the modded .IPA file you downloaded and drop it inside the Sideloadly application.
      STEP 6: You will now have to enter your iTunes/Apple ID email login, press "Start" & then you will be asked to enter your password. Go ahead and enter the required information.
      STEP 7: Wait for Sideloadly to finish sideloading/installing the hacked IPA. If there are issues during installation, please read the note below.
      STEP 8: Once the installation is complete and you see the app on your Home Screen, you will need to go to Settings -> General -> Profiles/VPN & Device Management. Once there, tap on the email you entered from step 6, and then tap on 'Trust [email protected]'.
      STEP 9: Now go to your Home Screen and open the newly installed app and everything should work fine. You may need to follow further per app instructions inside the hack's popup in-game.

      NOTE: iOS/iPadOS 16 and later, you must enable Developer Mode. For free Apple Developer accounts, you will need to repeat this process every 7 days. Jailbroken iDevices can also use Sideloadly/Filza/IPA Installer to normally install the IPA with AppSync. If you have any questions or problems, read our Sideloadly FAQ section of the topic and if you don't find a solution, please post your issue down below and we'll do our best to help! If the hack does work for you, post your feedback below and help out other fellow members that are encountering issues.


      Credits:
      - AlyssaX64


      Cheat Video/Screenshots:

      N/A
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 86 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines