Jump to content
  • Sky
  • Mint
  • Azure
  • Indigo
  • Blueberry
  • Blackcurrant
  • Watermelon
  • Strawberry
  • Pomegranate
  • Ruby Red
  • Orange
  • Banana
  • Apple
  • Emerald
  • Teal
  • Chocolate
  • Slate
  • Midnight
  • Maastricht
  • Charcoal
  • Matte Black
Sign in to follow this  
Guest

Guide [Breaking Security]How to disable syscall (anti-debugging protection)

108 posts in this topic

Recommended Posts

Guest

I made this tutorial in April of 2015 for the cheaters here and after almost a year of it being private I decided to post it to the public.

 

Gameloft always uses syscall on their games, and while this was written in April, MC5 still has removable syscall and you can use MC5 to practice :)

 

Requirements:

- IDA Pro

- Modern Combat 5

- GNU Debugger from cydia.radare.org (repo)

- OpenSSH

- Clutch 1.4.7-2

- armv7 binary of MC5, crack it on a 32 bit device for it to be armv7. I won't post one here because of copyright issues.

 

Below this line is the exact text I wrote on April 10, 2015. Enjoy :)

 

------

Hidden Content

    What is syscall? Syscall is anti-debugging protection. This is what causes the Segmentation Fault: 11 when trying to attach to an app. But as hackers we need to attach to an app, and thats why I made this tutorial :snoop:

     

    Again, I'm using MC5.

     

    Let's get started :p

     

    1. Open up the binary in IDA and wait like four to five minutes so that you can actually xref.

     

    2. Once you have waited, click on the "Imports" tab and search for syscall.

    nvzZIjL.jpg

     

    3. Double click it and xref to syscall's location in the binary. Here is the function that you are looking for:

    nuc5Cfj.jpg

     

    It should have _getpid, _memset, and _sysctl there.

     

    4. Highlight the BLX _syscall (or BLX.W _syscall sometimes), and click "Hex View 1". The hex should be highlighted. Now right click before the beginning of the highlighted hex and click "edit".

    fLfnXh3.jpg

     

    5. Now type "C046C046". This means NOP, or no instruction/operation. Basically it makes the app ignore the instruction. The edited hex should have turned orange.

    Wpp9SuU.jpg

     

    6. Save your changes. Right click on the orange edited hex and click "Apply changes".

    0oIyscA.jpg

     

    7. After that, go back to IDA View A and confirm that the BLX _syscall and the instruction below it is NOP'ed.

     

    8. Apply your changes to the binary. Go to Edit --> Patch program --> Apply patches to input file. Create a backup if you want to.

    9Hrh8Xv.jpg

     

    9. Replace the original binary with the hacked binary and set the permissions to:

    Owner: mobile

    Group: mobile

     

    User: read, write, execute

    Group: read, write, execute

    World: read, write, execute

     

    Now you are done! Try to attach and it should work! :)

Proof: (me attaching to Modern Combat 5 in GDB)

 

xrLa6qY.jpg

Share this post


Link to post
Share on other sites

Thanks for sharing ! ;)


One question.

when the app do not use _syscall what it could be ?

i searched for all methods that check if they had Cydia or etc.

 

Thanks.

  • Like 4
  • Haha 2
  • Agree 1
  • Winner 1

Share this post


Link to post
Share on other sites
Guest

how much mc5 kids show here after that :smoke:

they'll think its a hack :rofl:

Share this post


Link to post
Share on other sites
Guest

Thanks for sharing ! ;)

One question.

when the app do not use _syscall what it could be ?

i searched for all methods that check if they had Cydia or etc.

 

Thanks.

 

It's ptrace. Try searching imports for ptrace

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic... Posting Guidelines

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Our picks

    • [ARM64] Enlight Pixaloop Modded (All Versions) +1
      Modded/Hacked App: Enlight Pixaloop - Move Photos by Lightricks Ltd.
      Bundle ID: com.lightricks.Enlight-Phoenix
      iTunes Store Link: https://apps.apple.com/us/app/enlight-pixaloop-move-photos/id1381206010?uo=4&at=1010lce4


      Hack Features:
      - PREMIUM
       
      Hack Download Link: https://iosgods.com/topic/77434-arm64-enlight-pixaloop-modded-v137-1/
      • 1,023 replies
    • [ARM64] The Greedy Cave Cheats (All Versions) +4
      Modded/Hacked App: The Greedy Cave by AvalonGames
      Bundle ID: com.avalon.cave
      iTunes Store Link: https://itunes.apple.com/us/app/the-greedy-cave/id1028950091?mt=8&uo=4&at=1010lce4


      Hack Features:
      - Infinite Coins (Spend some)
      - Infinite Gems (Spend some)
      - God Mode
      - One Hit Kill


      Hack Download Link: https://iosgods.com/topic/72846-arm64-the-greedy-cave-cheats-all-versions-4/
      • 361 replies
    • [ARM64] Juicy Realm Cheats v3.0.8 +6
      Modded/Hacked App: Juicy Realm by X.D. Network Inc.
      Bundle ID: com.spacecangames.juicyrealm
      iTunes Store Link: https://apps.apple.com/us/app/juicy-realm/id1453808408?uo=4&at=1010lce4


      Hack Features:
      - God Mode
      - OHK
      - Infinite Ammo
      - Instant Skill
      - Infinite Currencies
      - All Characters Unlocked


      iOS Hack Download Link: https://iosgods.com/topic/125481-arm64-juicy-realm-cheats-v304-6/
      • 36 replies
    • [ARM64] Car Parking Multiplayer v2.2.3 Jailed Cheats +1
      Modded/Hacked App: Car Parking Multiplayer by Aidana Kengbeiil
      Bundle ID: com.aidana.cardriving.ios
      iTunes Store Link: https://apps.apple.com/us/app/car-parking-multiplayer/id1374868881?uo=4&at=1010lce4



      Hack Features:
      - Free iAP (Turn on inside iOSGods Mod Menu first)


      iOS Hack Download Link: https://iosgods.com/topic/126935-arm64-car-parking-multiplayer-v223-jailed-cheats-1/
      • 2 replies
    • [ARM64] Beat the Boss 4 Cheats (All Versions) +2
      Modded/Hacked App: Beat the Boss 4 by Game Hive Corporation
      Bundle ID: com.gamehivecorp.beattheboss4
      iTunes Store Link: https://itunes.apple.com/us/app/beat-the-boss-4/id1034018838?mt=8&uo=4&at=1010lce4



      Hack Features:
      - Infinite Currencies (Coins, Gems)


      Hack Download Link: https://iosgods.com/topic/84106-arm64-beat-the-boss-4-cheats-v1112-2/
      • 72 replies
    • [ARM64] Restaurant DASH: Gordon Ramsay Cheats v2.7.12 +3
      Modded/Hacked App: Restaurant DASH: Gordon Ramsay By Glu Games Inc
      Bundle ID: com.glu.gordondashx
      iTunes Store Link: https://itunes.apple.com/us/app/restaurant-dash-gordon-ramsay/id1089048531?mt=8&uo=4&at=1010lce4



      Hack Features:
      - Infinite Coins
      - Infinite Golds
      - Infinite Energy
       


      Hack Download Link: https://iosgods.com/topic/79776-arm64-restaurant-dash-gordon-ramsay-cheats-v269-3/
      • 48 replies
    • [ARM64] Idle Life Sim - Simulator Game Cheats (All Versions) +1
      Modded/Hacked App: Idle Life Sim - Simulator Game by Digital Things Sociedad Limitada
      Bundle ID: com.codigames.idle.game.tycoon.life.sims
      iTunes Store Link: https://apps.apple.com/us/app/idle-life-sim-simulator-game/id1501361660?uo=4&at=1010lce4


      Hack Features:
      - Infinite Cash


      iOS Hack Download Link: https://iosgods.com/topic/123735-arm64-idle-life-sim-simulator-game-cheats-all-versions-1/
      • 237 replies
    • [ARM64] Hotel Empire Tycoon-Idle Game Cheats (All Versions) +1
      Modded/Hacked App: Hotel Empire Tycoon-Idle Game by Digital Things Sociedad Limitada
      Bundle ID: com.codigames.hotel.empire.tycoon.idle.game
      iTunes Store Link: https://apps.apple.com/us/app/hotel-empire-tycoon-idle-game/id1485552989?uo=4&at=1010lce4


      Hack Features:
      - Infinite Cash



      iOS Hack Download Link: https://iosgods.com/topic/116094-arm64-hotel-empire-tycoon%EF%BC%8Didle-game-cheats-all-versions-1/
      • 473 replies
    • [ARM64] Cooking Diary Restaurant Game Cheats v1.25.1 +2
      Modded/Hacked App: Cooking Diary® Restaurant Game by MyTona Pte Ltd
      Bundle ID: com.mytonallc.cookingdiary
      iTunes Store Link: https://apps.apple.com/us/app/cooking-diary-restaurant-game/id1214763610?uo=4&at=1010lce4


      Hack Features:
      - Infinite Currencies (Get some)
      - Freeze Boosters


      iOS Hack Download Link: https://iosgods.com/topic/110310-arm64-cooking-diary-restaurant-game-v1160-3/
      • 278 replies
    • [ARM64] From Zero to Hero: Communist v1.0.7 Jailed Cheats +1
      Modded/Hacked App: From Zero to Hero: Communist by Heatherglade Publishing Korlatolt Felelossegu Tarsasag
      Bundle ID: com.heatherglade.communist
      iTunes Store Link: https://apps.apple.com/us/app/from-zero-to-hero-communist/id1497106614?uo=4&at=1010lce4


      Hack Features:
      - Free iAP


      iOS Hack Download Link: https://iosgods.com/topic/120912-arm64-from-zero-to-hero-communist-v103-jailed-cheats-1/
      • 7 replies
    • [ARM64] From Zero to Hero: Cityman v1.4.36 Jailed Cheats +1
      Modded/Hacked App: From Zero to Hero: Cityman by Heatherglade Publishing Korlatolt Felelossegu Tarsasag
      Bundle ID: game.zerotohero.app
      iTunes Store Link: https://apps.apple.com/us/app/from-zero-to-hero-cityman/id1321606577?uo=4&at=1010lce4


      Hack Features:
      - Free iAP


      iOS Hack Download Link: https://iosgods.com/topic/120909-arm64-from-zero-to-hero-cityman-v1431-jailed-cheats-1/
      • 16 replies
    • [ARM64] Galaxy Attack: Alien Shooter Cheats (All Versions) +1
      Modded/Hacked App: Galaxy Attack: Alien Shooter by ABIGAMES PTE. LTD
      Bundle ID: com.alien.shooter.galaxy.attack
      iTunes Store Link: https://apps.apple.com/us/app/galaxy-attack-alien-shooter/id1176011642?uo=4&at=1010lce4


      Hack Features:
      - Free Store (Let you buy stuffs even you don't have enough money)


      iOS Hack Download Link: https://iosgods.com/topic/100858-arm64-galaxy-attack-alien-shooter-cheats-v4135-1/
      • 360 replies
  • Recently Browsing   0 members

    No registered users viewing this page.


    • Administrator |
    • Special Rank |
    • ViP Plus |
    • ViP Jailed |
    • ViP |
    • Cheater  |
    • Modder  |
    • Novice Cheater |
    • Rookie Modder |
    • Contributor |
    • Senior Member |
    • Member |
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue. Privacy Policy - Guidelines