Jump to content

Help with disabling _syscall


Guest

36 posts in this topic

Recommended Posts

  • Replies 35
  • Created
  • Last Reply

I know that already, this is one of the first forums I've signed up with. I know how to use GDB to find offsets in IDA and I know how to patch a binary. My first hack was a savegame for COD: BOZ for v1.3.3, I already learned MS, MSHook, and I'm doing IDA and code inject (writeData) right now and I'm working on Dead Trigger 2 but decided to take a break and do this because I get angry very easily lol

 

so im not really a beginner ;)

 

@ 

@

sorry u were new thats why i thought that! ok then keep it up bro

haha worked for me in bia3 too :p

hack it or i will :p

I'm using a 5S by the way

 

I've never worked with disabling _syscall and _dlsym before so this is pretty hard, and I can't figure this out. I know that NOP'ing a BLX or any branch would result in a crash, so I stayed away from that. I xref'ed to operand for _dlsym and it gave me this:

 

__text:00648B04 loc_648B04                              ; CODE XREF: sub_648A04+D8j

__text:00648B04                 LDR             R0, [sP,#0x70+var_1C]
__text:00648B06                 BL              sub_649168
__text:00648B0A                 MOVS            R2, #1
__text:00648B10                 MOV             R1, #(_objc_msgSend_ptr - 0x648B1C)
__text:00648B18                 ADD             R1, PC ; _objc_msgSend_ptr
__text:00648B1A                 LDR             R1, [R1] ; __imp__objc_msgSend
__text:00648B1C                 MOV             R3, #(selRef_cStringUsingEncoding_ - 0x648B28)
__text:00648B24                 ADD             R3, PC ; selRef_cStringUsingEncoding_
__text:00648B26                 STR             R0, [sP,#0x70+var_2C]
__text:00648B28                 LDR             R0, [sP,#0x70+var_2C]
__text:00648B2A                 LDR.W           R9, [sP,#0x70+var_20]
__text:00648B2E                 LDR             R3, [R3] ; "cStringUsingEncoding:"
__text:00648B30                 STR             R0, [sP,#0x70+handle]
__text:00648B32                 MOV             R0, R9
__text:00648B34                 STR             R1, [sP,#0x70+var_50]
__text:00648B36                 MOV             R1, R3
__text:00648B38                 LDR             R3, [sP,#0x70+var_50]
__text:00648B3A                 BLX             R3
__text:00648B3C                 LDR             R1, [sP,#0x70+handle]
__text:00648B3E                 STR             R0, [sP,#0x70+symbol]
__text:00648B40                 MOV             R0, R1  ; handle 
__text:00648B42                 LDR             R1, [sP,#0x70+symbol] ; symbol
__text:00648B44                 BLX             _dlsym
__text:00648B48                 MOV             R1, #(_objc_msgSend_ptr - 0x648B54)
__text:00648B50                 ADD             R1, PC ; _objc_msgSend_ptr
__text:00648B52                 LDR             R1, [R1] ; __imp__objc_msgSend
__text:00648B54                 MOV             R2, R1
__text:00648B56                 MOV             R3, #(selRef_setObject_forKey_ - 0x648B62)
__text:00648B5E                 ADD             R3, PC ; selRef_setObject_forKey_
__text:00648B60                 MOV             R9, #(selRef_valueWithPointer_ - 0x648B6C)
__text:00648B68                 ADD             R9, PC ; selRef_valueWithPointer_
__text:00648B6A                 MOV             R12, #(classRef_NSValue - 0x648B76)
__text:00648B72                 ADD             R12, PC ; classRef_NSValue
__text:00648B74                 MOV             LR, #(dword_B062A4 - 0x648B80)
__text:00648B7C                 ADD             LR, PC ; dword_B062A4
__text:00648B7E                 STR             R0, [sP,#0x70+var_30]
__text:00648B80                 LDR.W           R0, [LR]
__text:00648B84                 LDR.W           R12, [R12] ; _OBJC_CLASS_$_NSValue
__text:00648B88                 LDR.W           LR, [sP,#0x70+var_30]
__text:00648B8C                 LDR.W           R9, [R9] ; "valueWithPointer:"
__text:00648B90                 STR             R0, [sP,#0x70+var_58]
__text:00648B92                 MOV             R0, R12
__text:00648B94                 STR             R1, [sP,#0x70+var_5C]
__text:00648B96                 MOV             R1, R9
__text:00648B98                 STR             R2, [sP,#0x70+var_60]
__text:00648B9A                 MOV             R2, LR
__text:00648B9C                 LDR.W           R9, [sP,#0x70+var_5C]
__text:00648BA0                 STR             R3, [sP,#0x70+var_64]
__text:00648BA2                 BLX             R9
__text:00648BA4                 LDR             R1, [sP,#0x70+var_24]
__text:00648BA6                 LDR             R2, [sP,#0x70+var_64]
__text:00648BA8                 LDR             R3, [R2]
__text:00648BAA                 LDR.W           R9, [sP,#0x70+var_58]
__text:00648BAE                 STR             R0, [sP,#0x70+var_68]
__text:00648BB0                 MOV             R0, R9
__text:00648BB2                 STR             R1, [sP,#0x70+var_6C]
__text:00648BB4                 MOV             R1, R3
__text:00648BB6                 LDR             R2, [sP,#0x70+var_68]
__text:00648BB8                 LDR             R3, [sP,#0x70+var_6C]
__text:00648BBA                 LDR.W           R9, [sP,#0x70+var_60]
__text:00648BBE                 BLX             R9
__text:00648BC0                 LDR             R0, [sP,#0x70+var_30]
__text:00648BC2                 STR             R0, [sP,#0x70+var_18]
 
And I was not really sure about what to do with any of this. I feel like changing these four lines would do the trick, but I really have no idea what to change them to.
 
__text:00648B3C                 LDR             R1, [sP,#0x70+handle]
__text:00648B3E                 STR             R0, [sP,#0x70+symbol]
__text:00648B40                 MOV             R0, R1  ; handle 
__text:00648B42                 LDR             R1, [sP,#0x70+symbol] ; symbol
__text:00648B44                 BLX             _dlsym ----> I wouldn't change this, I just put it there for clarity.
 
So, not knowing really what to do there I xref'ed to operand loc_648B04 and got this:
 
__text:00648A50 loc_648A50                              ; CODE XREF: sub_648A04+1Ej
__text:00648A50                                         ; sub_648A04:loc_648A4Ej
__text:00648A50                 MOVS            R0, #0
__text:00648A56                 MOV             R1, #(_objc_msgSend_ptr - 0x648A62)
__text:00648A5E                 ADD             R1, PC ; _objc_msgSend_ptr
__text:00648A60                 LDR             R1, [R1] ; __imp__objc_msgSend
__text:00648A62                 MOV             R2, R1
__text:00648A64                 MOV             R3, #(selRef_objectForKey_ - 0x648A70)
__text:00648A6C                 ADD             R3, PC ; selRef_objectForKey_
__text:00648A6E                 MOV             R9, #(dword_B062A4 - 0x648A7A)
__text:00648A76                 ADD             R9, PC ; dword_B062A4
__text:00648A78                 MOV             R12, #(stru_AE58E0 - 0x648A84) ; "%@:%@"
__text:00648A80                 ADD             R12, PC ; "%@:%@"
__text:00648A82                 MOV             LR, #(selRef_stringWithFormat_ - 0x648A8E)
__text:00648A8A                 ADD             LR, PC ; selRef_stringWithFormat_
__text:00648A8C                 MOV             R4, #(classRef_NSString - 0x648A98)
__text:00648A94                 ADD             R4, PC ; classRef_NSString
__text:00648A96                 LDR             R4, [R4] ; _OBJC_CLASS_$_NSString
__text:00648A98                 LDR             R5, [sP,#0x70+var_1C]
__text:00648A9A                 LDR             R6, [sP,#0x70+var_20]
__text:00648A9C                 LDR.W           LR, [LR] ; "stringWithFormat:"
__text:00648AA0                 STR             R0, [sP,#0x70+var_34]
__text:00648AA2                 MOV             R0, R4
__text:00648AA4                 STR             R1, [sP,#0x70+var_38]
__text:00648AA6                 MOV             R1, LR
__text:00648AA8                 STR             R2, [sP,#0x70+var_3C]
__text:00648AAA                 MOV             R2, R12
__text:00648AAC                 STR             R3, [sP,#0x70+var_40]
__text:00648AAE                 MOV             R3, R5
__text:00648AB0                 STR             R6, [sP,#0x70+var_70]
__text:00648AB2                 LDR.W           R12, [sP,#0x70+var_38]
__text:00648AB6                 STR.W           R9, [sP,#0x70+var_44]
__text:00648ABA                 BLX             R12
__text:00648ABC                 STR             R0, [sP,#0x70+var_24]
__text:00648ABE                 LDR             R0, [sP,#0x70+var_44]
__text:00648AC0                 LDR             R1, [R0]
__text:00648AC2                 LDR             R2, [sP,#0x70+var_24]
__text:00648AC4                 LDR             R3, [sP,#0x70+var_40]
__text:00648AC6                 LDR.W           R9, [R3]
__text:00648ACA                 MOV             R0, R1
__text:00648ACC                 MOV             R1, R9
__text:00648ACE                 LDR.W           R9, [sP,#0x70+var_3C]
__text:00648AD2                 BLX             R9
__text:00648AD4                 STR             R0, [sP,#0x70+var_28]
__text:00648AD6                 LDR             R0, [sP,#0x70+var_28]
__text:00648AD8                 LDR             R1, [sP,#0x70+var_34]
__text:00648ADA                 CMP             R0, R1
__text:00648ADC                 BEQ             loc_648B04
__text:00648ADE                 MOV             R0, #(_objc_msgSend_ptr - 0x648AEA)
__text:00648AE6                 ADD             R0, PC ; _objc_msgSend_ptr
__text:00648AE8                 LDR             R0, [R0] ; __imp__objc_msgSend
__text:00648AEA                 MOV             R1, #(selRef_pointerValue - 0x648AF6)
__text:00648AF2                 ADD             R1, PC ; selRef_pointerValue
__text:00648AF4                 LDR             R2, [sP,#0x70+var_28]
__text:00648AF6                 LDR             R1, [R1] ; "pointerValue"
__text:00648AF8                 STR             R0, [sP,#0x70+var_48]
__text:00648AFA                 MOV             R0, R2
__text:00648AFC                 LDR             R2, [sP,#0x70+var_48]
__text:00648AFE                 BLX             R2
__text:00648B00                 STR             R0, [sP,#0x70+var_18]
__text:00648B02                 B               loc_648BC4
 

I'm pretty sure that these lines mean to

 

__text:00648AD4                 STR             R0, [sP,#0x70+var_28] ----> store the value of R0 into SP+70+var_28

__text:00648AD6                 LDR             R0, [sP,#0x70+var_28] ----> load SP+70+var_28 into R0
__text:00648AD8                 LDR             R1, [sP,#0x70+var_34] ----> load SP+70+var_34 into R1
__text:00648ADA                 CMP             R0, R1 ----> compare R1 with R0
__text:00648ADC                 BEQ             loc_648B04 ----> branch if equal to loc_648B04
 
I changed CMP R0, R1 to CMP R0, #0 to at least try to make it false and CMP R0, R7 because I know it would never be equal to 800 million. I'm used to having to set MOVS R1, #0x1F to MOVS R1, #0x00 to make this work, not all of this stuff.
 
@@Laxus you said that you got it to work, would you be able to send me a binary with all of this stuff disabled? And I have a 5S, would that affect anything?
 
Thanks everyone for trying to help, I really appreciate it :)

 

I'm using a 5S by the way

 

I've never worked with disabling _syscall and _dlsym before so this is pretty hard, and I can't figure this out. I know that NOP'ing a BLX or any branch would result in a crash, so I stayed away from that. I xref'ed to operand for _dlsym and it gave me this:

 

__text:00648B04 loc_648B04 ; CODE XREF: sub_648A04+D8j

__text:00648B04 LDR R0, [sP,#0x70+var_1C]

__text:00648B06 BL sub_649168

__text:00648B0A MOVS R2, #1

__text:00648B10 MOV R1, #(_objc_msgSend_ptr - 0x648B1C)

__text:00648B18 ADD R1, PC ; _objc_msgSend_ptr

__text:00648B1A LDR R1, [R1] ; __imp__objc_msgSend

__text:00648B1C MOV R3, #(selRef_cStringUsingEncoding_ - 0x648B28)

__text:00648B24 ADD R3, PC ; selRef_cStringUsingEncoding_

__text:00648B26 STR R0, [sP,#0x70+var_2C]

__text:00648B28 LDR R0, [sP,#0x70+var_2C]

__text:00648B2A LDR.W R9, [sP,#0x70+var_20]

__text:00648B2E LDR R3, [R3] ; "cStringUsingEncoding:"

__text:00648B30 STR R0, [sP,#0x70+handle]

__text:00648B32 MOV R0, R9

__text:00648B34 STR R1, [sP,#0x70+var_50]

__text:00648B36 MOV R1, R3

__text:00648B38 LDR R3, [sP,#0x70+var_50]

__text:00648B3A BLX R3

__text:00648B3C LDR R1, [sP,#0x70+handle]

__text:00648B3E STR R0, [sP,#0x70+symbol]

__text:00648B40 MOV R0, R1 ; handle

__text:00648B42 LDR R1, [sP,#0x70+symbol] ; symbol

__text:00648B44 BLX _dlsym

__text:00648B48 MOV R1, #(_objc_msgSend_ptr - 0x648B54)

__text:00648B50 ADD R1, PC ; _objc_msgSend_ptr

__text:00648B52 LDR R1, [R1] ; __imp__objc_msgSend

__text:00648B54 MOV R2, R1

__text:00648B56 MOV R3, #(selRef_setObject_forKey_ - 0x648B62)

__text:00648B5E ADD R3, PC ; selRef_setObject_forKey_

__text:00648B60 MOV R9, #(selRef_valueWithPointer_ - 0x648B6C)

__text:00648B68 ADD R9, PC ; selRef_valueWithPointer_

__text:00648B6A MOV R12, #(classRef_NSValue - 0x648B76)

__text:00648B72 ADD R12, PC ; classRef_NSValue

__text:00648B74 MOV LR, #(dword_B062A4 - 0x648B80)

__text:00648B7C ADD LR, PC ; dword_B062A4

__text:00648B7E STR R0, [sP,#0x70+var_30]

__text:00648B80 LDR.W R0, [LR]

__text:00648B84 LDR.W R12, [R12] ; _OBJC_CLASS_$_NSValue

__text:00648B88 LDR.W LR, [sP,#0x70+var_30]

__text:00648B8C LDR.W R9, [R9] ; "valueWithPointer:"

__text:00648B90 STR R0, [sP,#0x70+var_58]

__text:00648B92 MOV R0, R12

__text:00648B94 STR R1, [sP,#0x70+var_5C]

__text:00648B96 MOV R1, R9

__text:00648B98 STR R2, [sP,#0x70+var_60]

__text:00648B9A MOV R2, LR

__text:00648B9C LDR.W R9, [sP,#0x70+var_5C]

__text:00648BA0 STR R3, [sP,#0x70+var_64]

__text:00648BA2 BLX R9

__text:00648BA4 LDR R1, [sP,#0x70+var_24]

__text:00648BA6 LDR R2, [sP,#0x70+var_64]

__text:00648BA8 LDR R3, [R2]

__text:00648BAA LDR.W R9, [sP,#0x70+var_58]

__text:00648BAE STR R0, [sP,#0x70+var_68]

__text:00648BB0 MOV R0, R9

__text:00648BB2 STR R1, [sP,#0x70+var_6C]

__text:00648BB4 MOV R1, R3

__text:00648BB6 LDR R2, [sP,#0x70+var_68]

__text:00648BB8 LDR R3, [sP,#0x70+var_6C]

__text:00648BBA LDR.W R9, [sP,#0x70+var_60]

__text:00648BBE BLX R9

__text:00648BC0 LDR R0, [sP,#0x70+var_30]

__text:00648BC2 STR R0, [sP,#0x70+var_18]

 

And I was not really sure about what to do with any of this. I feel like changing these four lines would do the trick, but I really have no idea what to change them to.

 

__text:00648B3C LDR R1, [sP,#0x70+handle]

__text:00648B3E STR R0, [sP,#0x70+symbol]

__text:00648B40 MOV R0, R1 ; handle

__text:00648B42 LDR R1, [sP,#0x70+symbol] ; symbol

__text:00648B44 BLX _dlsym ----> I wouldn't change this, I just put it there for clarity.

 

So, not knowing really what to do there I xref'ed to operand loc_648B04 and got this:

 

__text:00648A50 loc_648A50 ; CODE XREF: sub_648A04+1Ej

__text:00648A50 ; sub_648A04:loc_648A4Ej

__text:00648A50 MOVS R0, #0

__text:00648A56 MOV R1, #(_objc_msgSend_ptr - 0x648A62)

__text:00648A5E ADD R1, PC ; _objc_msgSend_ptr

__text:00648A60 LDR R1, [R1] ; __imp__objc_msgSend

__text:00648A62 MOV R2, R1

__text:00648A64 MOV R3, #(selRef_objectForKey_ - 0x648A70)

__text:00648A6C ADD R3, PC ; selRef_objectForKey_

__text:00648A6E MOV R9, #(dword_B062A4 - 0x648A7A)

__text:00648A76 ADD R9, PC ; dword_B062A4

__text:00648A78 MOV R12, #(stru_AE58E0 - 0x648A84) ; "%@:%@"

__text:00648A80 ADD R12, PC ; "%@:%@"

__text:00648A82 MOV LR, #(selRef_stringWithFormat_ - 0x648A8E)

__text:00648A8A ADD LR, PC ; selRef_stringWithFormat_

__text:00648A8C MOV R4, #(classRef_NSString - 0x648A98)

__text:00648A94 ADD R4, PC ; classRef_NSString

__text:00648A96 LDR R4, [R4] ; _OBJC_CLASS_$_NSString

__text:00648A98 LDR R5, [sP,#0x70+var_1C]

__text:00648A9A LDR R6, [sP,#0x70+var_20]

__text:00648A9C LDR.W LR, [LR] ; "stringWithFormat:"

__text:00648AA0 STR R0, [sP,#0x70+var_34]

__text:00648AA2 MOV R0, R4

__text:00648AA4 STR R1, [sP,#0x70+var_38]

__text:00648AA6 MOV R1, LR

__text:00648AA8 STR R2, [sP,#0x70+var_3C]

__text:00648AAA MOV R2, R12

__text:00648AAC STR R3, [sP,#0x70+var_40]

__text:00648AAE MOV R3, R5

__text:00648AB0 STR R6, [sP,#0x70+var_70]

__text:00648AB2 LDR.W R12, [sP,#0x70+var_38]

__text:00648AB6 STR.W R9, [sP,#0x70+var_44]

__text:00648ABA BLX R12

__text:00648ABC STR R0, [sP,#0x70+var_24]

__text:00648ABE LDR R0, [sP,#0x70+var_44]

__text:00648AC0 LDR R1, [R0]

__text:00648AC2 LDR R2, [sP,#0x70+var_24]

__text:00648AC4 LDR R3, [sP,#0x70+var_40]

__text:00648AC6 LDR.W R9, [R3]

__text:00648ACA MOV R0, R1

__text:00648ACC MOV R1, R9

__text:00648ACE LDR.W R9, [sP,#0x70+var_3C]

__text:00648AD2 BLX R9

__text:00648AD4 STR R0, [sP,#0x70+var_28]

__text:00648AD6 LDR R0, [sP,#0x70+var_28]

__text:00648AD8 LDR R1, [sP,#0x70+var_34]

__text:00648ADA CMP R0, R1

__text:00648ADC BEQ loc_648B04

__text:00648ADE MOV R0, #(_objc_msgSend_ptr - 0x648AEA)

__text:00648AE6 ADD R0, PC ; _objc_msgSend_ptr

__text:00648AE8 LDR R0, [R0] ; __imp__objc_msgSend

__text:00648AEA MOV R1, #(selRef_pointerValue - 0x648AF6)

__text:00648AF2 ADD R1, PC ; selRef_pointerValue

__text:00648AF4 LDR R2, [sP,#0x70+var_28]

__text:00648AF6 LDR R1, [R1] ; "pointerValue"

__text:00648AF8 STR R0, [sP,#0x70+var_48]

__text:00648AFA MOV R0, R2

__text:00648AFC LDR R2, [sP,#0x70+var_48]

__text:00648AFE BLX R2

__text:00648B00 STR R0, [sP,#0x70+var_18]

__text:00648B02 B loc_648BC4

 

I'm pretty sure that these lines mean to

 

__text:00648AD4 STR R0, [sP,#0x70+var_28] ----> store the value of R0 into SP+70+var_28

__text:00648AD6 LDR R0, [sP,#0x70+var_28] ----> load SP+70+var_28 into R0

__text:00648AD8 LDR R1, [sP,#0x70+var_34] ----> load SP+70+var_34 into R1

__text:00648ADA CMP R0, R1 ----> compare R1 with R0

__text:00648ADC BEQ loc_648B04 ----> branch if equal to loc_648B04

 

I changed CMP R0, R1 to CMP R0, #0 to at least try to make it false and CMP R0, R7 because I know it would never be equal to 800 million. I'm used to having to set MOVS R1, #0x1F to MOVS R1, #0x00 to make this work, not all of this stuff.

 

@@Laxus you said that you got it to work, would you be able to send me a binary with all of this stuff disabled? And I have a 5S, would that affect anything?

 

Thanks everyone for trying to help, I really appreciate it :)

Nop try this C046C046 done :)

Archived

This topic is now archived and is closed to further replies.

  • Our picks

    • Fishdom v8.6.4 Jailed Cheats +3
      Modded/Hacked App: Fishdom By PLR Worldwide Sales Limited
      Bundle ID: com.playrix.fishdom-freeplay
      iTunes Store Link: https://apps.apple.com/us/app/fishdom/id664575829?uo=4


      Hack Features:
      - Infinite Moves
      - Infinite Boosters
      - Infinite Lives

      NOTE: Play until you reached level 31 on non-hacked version before using this hack - Make sure you connected with GameCenter and Facebook to save your progress


      iOS Hack Download Link: https://iosgods.com/topic/116586-arm64-fishdom-v683-jailed-cheats-3/
        • Agree
        • Like
      • 719 replies
    • RollerCoaster Tycoon Touch Cheats v3.41.2 +5
      Modded/Hacked App: RollerCoaster Tycoon® Touch™ by Atari, Interactive
      Bundle ID: com.atari.mobile.rctempire
      iTunes Store Link: https://apps.apple.com/us/app/rollercoaster-tycoon-touch/id1164507836?uo=4&at=1010lce4


      Hack Features:
      - Infinite Coins (Spend some)
      - Infinite Tickets (Spend some)
      - Instant Max Level (Complete some task - Only use when you finished Tutorial and get to Level 8 at least)
      - VIP Member
      - Card only need 1 to be upgraded


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/74948-arm64-rollercoaster-tycoon-touch-v312-jailed-cheats-4/


      Hack Download Link: https://iosgods.com/topic/73710-arm64-rollercoaster-tycoon-touch-cheats-all-versions-5/
        • Agree
        • Winner
        • Like
      • 1,097 replies
    • Soul Strike Cheats v2.0.0 +7
      Modded/Hacked App: Soul Strike X Max-Level Newbie By Com2uS Holdings Corporation
      Bundle ID: com.com2usholdings.soulstrike.ios.apple.global.normal
      iTunes Store Link: https://apps.apple.com/us/app/soul-strike-x-max-level-newbie/id6458981827?uo=4


      Hack Features:
      - Multiply Attack
      - Multiply Defense
      - God Mode

      DO NOT BUY VIP FOR JUST THIS CHEAT. REMOVE ANY JB BYPASS FOR THE GAME

      THIS CHEAT HAS BEEN TESTED ON IPX 16.7.5 PALERA1N ROOTLESS, IPAD PRO M2 16.0 DOPAMINE


      iOS Hack Download Link: https://iosgods.com/topic/186316-exclusive-soul-strike-cheats-v158-3/
        • Agree
        • Like
      • 156 replies
    • Boxing Star: Real Boxing Fight Cheats v6.4.1 +4
      Modded/Hacked App: Boxing Star: Real Boxing Fight By THUMBAGE Co., Ltd
      Bundle ID: com.ftt.boxingstar.gl.ios
      iTunes Store Link: https://apps.apple.com/us/app/boxing-star-real-boxing-fight/id1241887528?uo=4


      Hack Features:
      - Multiply Attack
      - Multiply Defense
      - God Mode
      - One Touch & Win

      Free Non-Jailbroken Hack: https://iosgods.com/topic/92347-boxing-star-real-boxing-fight-v620-jailed-cheats-4/


      Hack Download Link: https://iosgods.com/topic/72805-boxing-star-real-boxing-fight-cheats-v620-4/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,663 replies
    • Disney Magic Kingdoms Cheats v10.0.1 +1
      Modded/Hacked App: Disney Magic Kingdoms By Gameloft
      Bundle ID: com.gameloft.disneykingdom
      iTunes Store Link: https://apps.apple.com/us/app/disney-magic-kingdoms/id731592936?uo=4


      Hack Features:
      - Free Store ( not Free iAP )
      * Will let you purchase even you don't have enough


      iOS Hack Download Link: https://iosgods.com/topic/147877-disney-magic-kingdoms-cheats-v610-1/
        • Informative
        • Like
      • 375 replies
    • Minion Rush Cheats v10.5.0 +2 [ Free Store & Infinite Cards ]
      Modded/Hacked App: Minion Rush By Gameloft
      Bundle ID: com.gameloft.despicableme2
      iTunes Store Link: https://apps.apple.com/us/app/minion-rush/id596402997?uo=4


      Hack Features:
      - Free Store ( not Free iAP )
      * Allow purchase stuffs without having enough bananas or tokens


      iOS Hack Download Link: https://iosgods.com/topic/147752-minion-rush-cheats-v791-1/
        • Agree
        • Thanks
        • Winner
        • Like
      • 579 replies
    • Real Racing 3 Cheats v13.1.1 +4
      Modded/Hacked App: Real Racing 3 By Electronic Arts Inc.
      Bundle ID: com.ea.realracing3.inc
      iTunes Store Link: https://apps.apple.com/us/app/real-racing-3/id556164008?uo=4


      Hack Features:
      - Free Store
      - Freeze M$
      - Freeze R$
      - Freeze Gold


      iOS Hack Download Link: https://iosgods.com/topic/147926-real-racing-3-cheats-all-versions-4/
        • Informative
        • Agree
        • Haha
        • Winner
        • Like
      • 959 replies
    • Dead Ahead: Zombie Warfare Cheats v4.1.6 +4
      Modded/Hacked App: Dead Ahead: Zombie Warfare By Mobirate Studio Ltd
      Bundle ID: com.mobirate.DeadAheadTactics
      iTunes Store Link: https://itunes.apple.com/us/app/dead-ahead-zombie-warfare/id1017311881?mt=8&uo=4&at=1010lce4


      Hack Features:
      - Freeze Coins
      - Freeze Fuels
      - Infinite Mana
      - Instant Warrior Spawn (Show timer but works)

      *NOTE: COULD CAUSE YOU BANNED FROM ONLINE TOURNAMENT, I'M NOT TAKING ANY RESPONSIBILITY. USE WISELY


      Hack Download Link:
      https://iosgods.com/topic/70815-arm64-dead-ahead-zombie-warfare-cheats-v211-4/
      #Hack #Jailbreak #Cydia #Cheat #Apple #Android #iOSGods
        • Informative
        • Thanks
        • Winner
        • Like
      • 765 replies
    • Candy Crush Solitaire v0.3.5204 +18 Cheats [ Game Breaking ]
      Modded/Hacked App: Candy Crush Solitaire By King.com Limited
      Bundle ID: com.midasplayer.apps.candysolitaire
      iTunes Store Link: https://apps.apple.com/us/app/candy-crush-solitaire/id6474685626?uo=4


      Hack Features:
      - Unlimited Free Gifts -> Head into the Shop to claim the free gift over & over.
      - Season Pass Purchased

      VIP
      - Add Coins*
      - Add Energy*
      - Add Colour Bomb Boosters*
      - Add UFO Boosters*
      - Add Wildcards*
      - Add Undo's*
      - Add Extra Moves*
      - Add Free Entries*
      - Add Lollipops*
      - Add Streak Slot Booster*
      - Next Level*
      - Complete Postcard*
      - Add Stars To Leaderboard*
      - Add Album Card*
      - Complete Season Pass*
      - Add Digging Spoons*

      * Only enable 1 feature at a time.


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 6 replies
    • Devil May Cry: Peak of Combat v2.9.0 Cheats +6
      Modded/Hacked App: Devil May Cry: Peak of Combat By YUNCHANG
      Bundle ID: com.nebulajoy.act.dmcpoc
      iTunes Store Link: https://apps.apple.com/us/app/devil-may-cry-peak-of-combat/id6449589065?uo=4


      Mod Requirements:
      - Non-Jailbroken/Jailed or Jailbroken iPhone/iPad/iPod Touch.
      - Sideloadly / Cydia Impactor or alternatives.
      - A Computer Running Windows/macOS/Linux with iTunes installed.


      Hack Features:
      - Unlimited jump
      - Stupid enemies
        • Agree
        • Haha
        • Thanks
        • Like
      • 198 replies
    • Devil May Cry: Peak of Combat v2.9.0 Cheats +7
      Modded/Hacked App: Devil May Cry: Peak of Combat By YUNCHANG
      Bundle ID: com.nebulajoy.act.dmcpoc
      iTunes Store Link: https://apps.apple.com/us/app/devil-may-cry-peak-of-combat/id6449589065?uo=4

       


      Mod Requirements:
      - Jailbroken iPhone/iPad/iPod Touch.
      - iGameGod / Filza / iMazing or any other file managers for iOS.
      - Cydia Substrate, Substitute or libhooker depending on your jailbreak.
      - PreferenceLoader (from Cydia, Sileo or Zebra).


      Hack Features:
      - Speed move
      - Unlimited jump
      - Stupid enemies
        • Like
      • 214 replies
    • Hitman Sniper v1.12 +12 Jailed Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Hitman Sniper By Deca Live Operations GmbH
      Bundle ID: com.squareenixmontreal.hitmansniper
      iTunes Store Link: https://apps.apple.com/us/app/hitman-sniper/id904278510?uo=4


      Hack Features:
      - Unlimited Currencies -> Earn or spend some.
      - One-Hit Kill
      - Unlimited Ammo -> Will not decrease.
      - No Recoil
      - No Sway
      - Shoot Through Walls
      - Score Multiplier
      - Bullet Speed Multiplier
      - Bullet Gravity Multiplier
      - All Weapons Unlocked
      - All Weapons Assembled
      - No Skill Cooldown


      Jailbreak required hack(s): [Mod Menu Hack] Hitman Sniper v1.12 +12 Cheats [ Unlimited Currencies ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Like
      • 12 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines