Jump to content

[Tutorial] How to hack iOS games and apps! [Hex Editing/IDA]


7 posts in this topic

Recommended Posts

Updated

Hex editing

 

 

Requirements:

winSCP or i-funbox or simalar
(most of you already know how to hex edit clear.png )

your save files are located in /var/mobile/applications/**your app folder**/Documents
I will show you how to transfer the files only, i am not teaching people to hex edit. if enough people want me to teach you all i will. 
in cydia install openSSH and respring.
download winSCP
 here
winscp%20tut1.PNG


winscp%20tut3.PNG

winscp%20tut4.PNG

winscp%20tut5.PNG

winscp%20tut6.PNG

winscp%20tut7.PNG

winscp%20tut8.PNG

winscp%20tut9.PNG

this is an example of fruit ninja folders.
 

just transfer the file anto your PC and edit in a hex editor.

 

 

IDA Method

Requirements:
-IDA pro 6.1+ i recommend 6.4 (the demo works fine but you may also get a cracked one)
-winSCP or similar
-logical thinking
-Ldone (from the repo cydia.hackulo.us) EDIT: If you are on iOS6 this is no longer needed


transfer the game you want to hacks binary, it is located in the yourApp.app folder and has no extention (i.e the file BloonsTD4 would be the bloonsTD4 binary)
(in this tut we are hacking PvZ 1.9.1)


IDA0.PNG


Open IDA (idaq.exe not idau.exe if you have that)
IDA1.PNG

IDA2.PNG

IDA3.PNG

IDA4.PNG


IDA5.PNG


IDA6.PNG

IDA7.PNG

IDA8.PNG

IDA9.PNG


IDA10.PNG

IDA11.PNG

IDA12.PNG

IDA13v.PNG

(please note, i say 1 but i mean 01 clear.png)
IDA13v2.PNG

IDA14.PNG

IDA15.PNG

IDA16.PNG

IDA17.PNG

IDA18.PNG


IDA19.PNG

IDA20.PNG

IDA21.PNG

save the file and transfer it back to your iDevice
once back in the PvZ app folder do this:

IDA22.PNG

IDA23.PNG

 

 

 

Useful information/FAQ
 
useful codes and hexes:
BX LR (skips entire function, useful for infinite ammo. i.e put bx lr at the start of a function like weapon::removeAmmo(int) )
2 byte code: 70 47
4 byte code: 1E FF 2F E1
NOP (cheat engine users may be familiar with this) skips the code it is placed on ( for example put a NOP instead of mov r0 #2 and it skips the mov r0 #2)
2 byte code: C0 46
4 byte code: 0000A0E1
Branches (branch to another part of the function or a different function)
B (normal branch)
2 byte: ends in E0
4 byte: ends in EA
BEQ (branch if equal, usually a CMP command above it and it branches if EQUAL)
4 byte: ends in 0A
BNE (branch if not equal, again usually a CMP command above)
4 byte: ends in 1A
BGT (branch if greater than, another CMP above it)
4 byte: ends in CA
BLT: (branch less than, CMP above)
4 byte: ends in BA
BL (branch link. branches to another function)
these are really hard to calculate as the hex is different each time. if you can calculate it though the pay-off is great. you can have rocket bullets, always have full health etc
FAQ:
Q: what if my binary only has an ARMv6 option?
A: use ARMv6, they still run on ARMv7 devices
Q: how do i know if my binary is 2 byte or 4 byte?
A: highlight any code and see if 2 bytes or 4 bytes are highlighted in Hex view in IDA
Q: my app crashes, what should I do?
A: you may not have signed properly, sign again and respring. or you may have edited a wrong function causing your app to be unstable
Q: are there any other methods to IDA hacking?
A: hell yeah, I only showed you basic IDA hacking today, there are way more advanced methods which i MAY make a tut for too at some point
Q: My binary's functions are all sub_xxxxx commands, what do I do now?
 
A: this is where the compiler throws out function names as they are not needed. in IDA press shift+f12 to open the strings window, search for gold or something here instead and double click on one and press ctrl+X to jump to the function (hard to explain in text but i will include this in my more advanced tutorial) 
  • Like 6
  • Thanks 2
  • Agree 2
Posted (edited)

thank yoou for posting  :)

now i really need a PC :3

Updated by D3vlisH
Posted (edited)

Good topic! :)

 

Edit:

 

This isn't yours and you had no permission to share it. Topic locked.

Updated by DiDA
Guest
This topic is now closed to further replies.
  • Our picks

    • Conquer Countries v9.30 +5 Jailed Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Conquer Countries By SUPERSONIC STUDIOS LTD
      Bundle ID: com.ridgge.conquercountries
      iTunes Store Link: https://apps.apple.com/us/app/conquer-countries/id6480472116?uo=4

       
       

      Hack Features

      - Add Money*
      - Add People*
      - Add Knowledge*
      - Unlimited Gems -> Earn some.
      -- Gold Pass Purchased

      * - Head into Settings and toggle the Sound button. Only enable 1 feature at a time.


      Jailbreak required iOS hacks: [Mod Menu Hack] Conquer Countries v9.0 +5 Cheats [ Unlimited Currencies ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APKs: https://iosgods.com/forum/68-android-section/
      • 36 replies
    • Conquer Countries v9.30 +5 Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Conquer Countries By SUPERSONIC STUDIOS LTD
      Bundle ID: com.ridgge.conquercountries
      iTunes Store Link: https://apps.apple.com/us/app/conquer-countries/id6480472116?uo=4

       
       

      Hack Features

      - Add Money*
      - Add People*
      - Add Knowledge*
      - Unlimited Gems -> Earn some.
      -- Gold Pass Purchased

      * - Head into Settings and toggle the Sound button. Only enable 1 feature at a time.


      For Non-Jailbroken & No Jailbreak required hacks: [IPA Mod Menu] Conquer Countries v9.0 +5 Jailed Cheats [ Unlimited Currencies ] - Free Non-Jailbroken IPA Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      • 18 replies
    • Idle Zombie Miner: Gold Tycoon v2.243.1940 +1++ Jailed Cheat [ Currencies ]
      Modded/Hacked App: Idle Zombie Miner: Gold Tycoon By VISTREX LIMITED
      Bundle ID: com.zombie.idleminertycoon
      iTunes Store Link: https://apps.apple.com/us/app/idle-zombie-miner-gold-tycoon/id6471983323?uo=4


      Hack Features:
      - Unlimited Currencies -> Will increase instead of decrease.


      Jailbreak required hack(s): [Mod Menu Hack] Idle Zombie Miner: Gold Tycoon v2.53.1001 +1++ Cheat [ Unlimited Currencies ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 109 replies
    • Idle Zombie Miner: Gold Tycoon v2.243.1940 +1++ Cheat [ Currencies ]
      Modded/Hacked App: Idle Zombie Miner: Gold Tycoon By VISTREX LIMITED
      Bundle ID: com.zombie.idleminertycoon
      iTunes Store Link: https://apps.apple.com/us/app/idle-zombie-miner-gold-tycoon/id6471983323?uo=4


      Hack Features:
      - Unlimited Currencies -> Will increase instead of decrease.


      Non-Jailbroken & No Jailbreak required hack(s): [Non-Jailbroken Hack] Idle Zombie Miner: Gold Tycoon v2.53.1001 +1++ Jailed Cheat [ Unlimited Currencies ] - Free Non-Jailbroken IPA Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 72 replies
    • Disney Emoji Blitz Game v70.2.1 +1++ Jailed Cheat [ Unlimited Currencies ]
      Modded/Hacked App: Disney Emoji Blitz Game By Jam City, Inc.
      Bundle ID: com.disney.emojimatch
      iTunes Store Link: https://apps.apple.com/us/app/disney-emoji-blitz-game/id1017551780
       

      Hack Features:
      - Unlimited Currencies -> Earn some.


      Jailbreak required hack(s): https://iosgods.com/topic/168886-disney-emoji-blitz-game-all-versions-1-cheats-unlimited-currencies/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Like
      • 182 replies
    • Eterspire - Fantasy MMORPG v55.0 +2 Jailed Cheats [ Damage & Defence ]
      Modded/Hacked App: Eterspire - Fantasy MMORPG By Stonehollow Workshop LLC
      Bundle ID: com.stonehollow-workshop.Eterspire
      iTunes Store Link: https://apps.apple.com/us/app/eterspire-fantasy-mmorpg/id1658183817?uo=4

       
       

      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      • 26 replies
    • Eterspire - Fantasy MMORPG v55.0 +2 Cheats [ Damage & Defence ]
      Modded/Hacked App: Eterspire - Fantasy MMORPG By Stonehollow Workshop LLC
      Bundle ID: com.stonehollow-workshop.Eterspire
      iTunes Store Link: https://apps.apple.com/us/app/eterspire-fantasy-mmorpg/id1658183817?uo=4

       
       

      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      • 106 replies
    • Love Sparks: Make Me Blush v2.46.0 +2++ Jailed Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Love Sparks: Make Me Blush By SVEG MASHA, OOO
      Bundle ID: com.swagmasha.lovespark
      iTunes Store Link: https://apps.apple.com/us/app/love-sparks-make-me-blush/id1580105392?uo=4
       

      Hack Features:
      - Unlimited Gems -> Earn some.
      - VIP Enabled


      Jailbreak required hack(s): [Mod Menu Hack] Love Sparks: My Secret Fantasy v2.17.0 +2 Cheats [ Unlimited Gems ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 911 replies
    • Love Sparks: Make Me Blush v2.46.0 +2++ Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Love Sparks: Make Me Blush By SVEG MASHA, OOO
      Bundle ID: com.swagmasha.lovespark
      iTunes Store Link: https://apps.apple.com/us/app/love-sparks-make-me-blush/id1580105392?uo=4
       

      Hack Features:
      - Unlimited Gems -> Earn some.
      - VIP Enabled


      Non-Jailbroken & No Jailbreak required hack(s): [Non-Jailbroken Hack] Love Sparks: My Secret Fantasy v2.17.0 +3 Jailed Cheats [ Unlimited Gems ] - Free Non-Jailbroken IPA Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 393 replies
    • Disney Emoji Blitz Game v70.2.1 +1++ Cheat [ Unlimited Currencies ]
      Modded/Hacked App: Disney Emoji Blitz Game By Jam City, Inc.
      Bundle ID: com.disney.emojimatch
      iTunes Store Link: https://apps.apple.com/us/app/disney-emoji-blitz-game/id1017551780
       

      Hack Features:
      - Unlimited Currencies -> Earn some.


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/168888-disney-emoji-blitz-game-v5320-1-jailed-cheat-unlimited-currencies/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
      • 60 replies
    • Train Attack: Merge War v1.0.5 [+4 Jailed Cheats]
      Modded/Hacked App: Train Attack: Merge War By MAD PIXEL GAMES LTD
      Bundle ID: adventure.train.battle.survive
      App Store Link: https://apps.apple.com/us/app/train-attack-merge-war/id6747774853?uo=4



      🤩 Hack Features

      - Remove Ads (Can crash game open again)
      - Activate Vip
      - Add Currency
      - Never Die
      • 2 replies
    • Train Attack: Merge War v1.0.5 [+4 Cheats]
      Modded/Hacked App: Train Attack: Merge War By MAD PIXEL GAMES LTD
      Bundle ID: adventure.train.battle.survive
      App Store Link: https://apps.apple.com/us/app/train-attack-merge-war/id6747774853?uo=4



      🤩 Hack Features

      - Remove Ads (Can crash game open again)
      - Activate Vip
      - Add Currency
      - Never Die
      • 4 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines