Jump to content

6 posts in this topic

Recommended Posts

Posted

Intro:
There's a bunch of tries to to decrypting lua but none of it isnt clear enough how to do it. I'm aware that this approach isnt good enough, because too much step that you'll not need to do but i'm still write it instead. Code in this tutorial ofcourse just bunch of copy-pasta stackoverflow.

Prerequisites
1. Frida (optional)
2. Disassembler (IDA, r2, ..)
3. Python (optional) (I'll use python in this tutorial)
4. A little knowledge about this

What will you need to do?
1. Get the KEY for decryption,
2. Write a script for decryption,
3. Edit the lua (Self explanation),
4. Encrypt back the file (Self explaination) (Same as step 2, but you'll encrypt instead of decrypt),
5. PROFIT.

---- Step by step ----

Get the KEY for decryption
There's bunch of way to do it, some of them:
1. XREFS for XXTeaLuaLoader::setXXTeaKey(string), and you can see it clearly. Most used methods among many games.
nJX33Yr.png
2. Use Frida. I'll explain it on 2nd post.
3. http://forum.xda-developers.com/showthread.php?p=12853986#post12853986
4. etc.. You get the idea.

Write a script for decryption
This is an example of use for XXTEA encryption, requirements(xxtea-py)

 
Code (Text):





#!/usr/bin/env python
import xxtea

chiper = open("assets/script/fund.lua", "rb").read()

out = open("out.lua", "wb")

key = b'mrgj'

out.write(xxtea.encrypt(chiper, key))

out.close()END

Example of use of frida (https://github.com/antojoseph/frida-android-hooks)

As described here, 

Opening the lua files with hex editor reveals that they use XXTEA block cipher.

Analyze libjinqu.so and it blatantly shows the following decryption subroutines:
xxtea_decrypt
cocos2d::extra::CCCrypto::decryptXXTEA

Get a pseudocode generator and copy the program in C++.

. We need to put a hook either at xxtea_decrypt or cocos2d::extra::CCCrypto::decryptXXTEA. Then prints out the arguments passed.
We know that args[2] is the one holding the pointer to key from decompile xxtea_decrypt lib.so
Oh5SCFC.png 
Explaination, v9 is the one holding the chiper text, v30 chipertext len(?), v13 pointer to key, v14 is key.length.
Its obvious if we want to leak the key we need to print args[3] bytes at args[2]. This is an example of use for it.

 

#!/usr/bin/env python
import frida
import sys

package_name = "com.gamebau.pq"

def get_messages_from_js(message, data):
            print(message)

jsc = """
Interceptor.attach (Module.findExportByName( "libgame.so", "xxtea_decrypt"), {
    onEnter: function (args) {
        console.log("----------------BEGIN----------------");
        console.log(hexdump(Memory.readByteArray(args[2], 12),{
         offset: 0,
         length: 12,
         header: true,
         ansi: true
        }));
    },
    onLeave: function (retval) {
        console.log("Decrypt:");
        console.log(hexdump(Memory.readByteArray(retval, 16),{
         offset: 0,
         length: 16,
         header: true,
         ansi: true
        }));
        console.log("-----------------END-----------------");   
    }
});
"""

process = frida.get_usb_device().attach(package_name)
script = process.create_script(jsc)
script.on('message',get_messages_from_js)
script.load()
sys.stdin.read()

profit,
gohBm09.png
 
--Update, forgot to mention about this. Another note, some games tries to pack the assets with common file compressor. While loading it, it tries to unpack the assets on stream. As you can see on the image, its PK file header. With simple google search you can deduce its a zip alike compression. Try to extract the decrypted file with 7zip/Winrar/etc.. and you could see the unpacked file.

Image:
gohBm09.png
 
 
Credits: Wobm And Stack Overflow

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • SimCity BuildIt Cheats v1.69.1 +1 [ Freeze Currencies ]
      Modded/Hacked App: SimCity BuildIt By EA Swiss Sarl
      Bundle ID: com.ea.simcitymobile.bv
      iTunes Store Link: https://apps.apple.com/us/app/simcity-buildit/id913292932?uo=4


      Hack Features:
      - Infinite Currencies


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/124792-arm64-simcity-buildit-v1412-jailed-cheats-1/


      iOS Hack Download Link: https://iosgods.com/topic/157687-simcity-buildit-cheats-v1415-1/
      • 695 replies
    • WorldBox - God Sandbox v0.51.2 Jailed Cheats +1
      Modded/Hacked App: WorldBox - God Sandbox By Maxim Karpenko
      Bundle ID: com.mkarpenko.worldbox
      iTunes Store Link: https://apps.apple.com/us/app/worldbox-god-sandbox/id1450941371?uo=4


      Hack Features:
      - PREMIUM


      Jailbreak required hack(s):  https://iosgods.com/topic/176685-worldbox-god-sandbox-cheats-all-versions-1/#


      iOS Hack Download IPA Link: https://iosgods.com/topic/176686-worldbox-god-sandbox-v02217-jailed-cheats-1/
      • 432 replies
    • PGA TOUR Golf Shootout Cheats v5.4.0 +4
      Modded/Hacked App: PGA TOUR Golf Shootout by Concrete Software, Inc.
      Bundle ID: com.concretesoftware.golf
      iTunes Store Link: https://apps.apple.com/us/app/pga-tour-golf-shootout/id1446458226?uo=4&at=1010lce4


      Hack Features:
      - Infinite Coin
      - Infinite Gold


      iOS Hack Download Link: https://iosgods.com/topic/129508-arm64-pga-tour-golf-shootout-cheats-all-versions-2/
      • 201 replies
    • Super Stylist Fashion Makeover Cheats v3.6.8 +1
      Modded/Hacked App: Super Stylist Fashion Makeover By CRAZY STYLE LTD
      Bundle ID: com.babyeducationtoys.fashionstyle
      iTunes Store Link: https://apps.apple.com/us/app/super-stylist-fashion-makeover/id1441648201?uo=4


      Hack Features:
      - Free Store (not iAP)


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/112404-super-stylist-fashion-makeover-v352-jailed-cheats-1/


      iOS Hack Download Link: https://iosgods.com/topic/190368-super-stylist-fashion-makeover-cheats-v352-1/
      • 21 replies
    • Raising Beast Friends Cheats v1.3.2 +3
      Modded/Hacked App: 짐승친구들 키우기 By Bigpicture Team Inc.
      Bundle ID: com.bigpictureteam.raisingbeastfriends
      iTunes Store Link: https://apps.apple.com/kr/app/%EC%A7%90%EC%8A%B9%EC%B9%9C%EA%B5%AC%EB%93%A4-%ED%82%A4%EC%9A%B0%EA%B8%B0/id6503225529?uo=4


      Hack Features:
      - God Mode
      - Multiply Attack
      - Multiply Defense


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/187879-raising-beast-friends-%EC%A7%90%EC%8A%B9%EC%B9%9C%EA%B5%AC%EB%93%A4-%ED%82%A4%EC%9A%B0%EA%B8%B0-v114-jailed-cheats-3/


      iOS Hack Download Link: https://iosgods.com/topic/187878-raising-beast-friends-%EC%A7%90%EC%8A%B9%EC%B9%9C%EA%B5%AC%EB%93%A4-%ED%82%A4%EC%9A%B0%EA%B8%B0-cheats-v114-3/
      • 8 replies
    • Super Stylist Fashion Makeover v3.6.8 Jailed Cheats +1
      Modded/Hacked App: Super Stylist by Baby Education Animal Weather Toys LTD.
      Bundle ID: com.babyeducationtoys.fashionstyle
      iTunes Store Link: https://apps.apple.com/us/app/super-stylist/id1441648201?uo=4&at=1010lce4



      Hack Features:
      - Free iAP (Turn on inside iOSGods Mod Menu first)


      iOS Hack Download Link: https://iosgods.com/topic/112404-arm64-super-stylist-v129-jailed-cheats-1/
        • Agree
        • Like
      • 139 replies
    • PewDiePie's Tuber Simulator Cheats v2.60.0 +3
      Modded/Hacked App: PewDiePie's Tuber Simulator By Outerminds Inc.
      Bundle ID: com.outerminds.tubular
      iTunes Store Link: https://apps.apple.com/us/app/pewdiepies-tuber-simulator/id1093190533?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Infinite Subscriber
      - Infinite Views
      - Infinite Bux

      NOTE: Please complete tutorial first before enabling the hacks otherwise it won't work

      NOTe 2: Please make a youtube video to get some views first (without hack) then before enable infinite views

       

      Non-Jailbroken Hack: https://iosgods.com/topic/86411-pewdiepies-tuber-simulator-v2450-jailed-cheats-3/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/86366-pewdiepies-tuber-simulator-cheats-v2460-3/
      • 1,159 replies
    • Sniper 3D: Gun Shooting Games Cheats v6.0.1 +7
      Modded/Hacked App: Sniper 3D Assassin: FPS Battle By Fun Games For Free
      Bundle ID: com.fungames.sniper3d
      iTunes Store Link: https://itunes.apple.com/us/app/sniper-3d-assassin-fps-battle/id930574573?mt=8&uo=4&at=1010lce4



      Hack Features:
      - Infinite Coins Only (Upgrade Weapon and Speed up Delivery with Coins)
      - Infinite Energy
      - Infinite Ammo / No Reload
      - No Spread
      - Unlock Premium Weapon - Semi

      NOTE: The game diamond currency is completely server-sided so do not request


      Hack Download Link: https://iosgods.com/topic/74114-arm64-sniper-3d-fps-battle-shoot-to-kill-2018-cheats-all-versions-7/

      Credits:
      - @Laxus
      • 3,919 replies
    • Fun Run 3 - Multiplayer Games Cheats v4.53.0 +1
      Modded/Hacked App: Fun Run 3: Arena Running Game By Dirtybit
      Bundle ID: com.dirtybit.fra
      iTunes Store Link: https://itunes.apple.com/us/app/fun-run-3-arena-running-game/id1118878857?mt=8&uo=4&at=1010lce4


      Hack Features:
      - God Mode
       

      Hack Download Link: https://iosgods.com/topic/75790-arm64-fun-run-3-arena-running-game-cheats-v210-1/
      • 1,288 replies
    • Candy Crush Friends Saga v4.16.0 Jailed Cheats +3
      Modded/Hacked App: Candy Crush Friends Saga By King.com Limited
      Bundle ID: com.midasplayer.apps.candycrush4
      iTunes Store Link: https://apps.apple.com/us/app/candy-crush-friends-saga/id1225867923?uo=4

       

      🔧 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🚀 Hack Features

      - Freeze Moves
      - Freeze Lives
      - Freeze Boosters
       


      🍏 Jailbreak iOS hacks: https://iosgods.com/topic/198853-candy-crush-friends-saga-cheats-v4160-3/

       

      📥 iOS Hack Download IPA Link: https://iosgods.com/topic/80354-candy-crush-friends-saga-v4160-jailed-cheats-3/
      • 429 replies
    • Dummynation Cheats v3.4.4 +3
      Modded/Hacked App: Dummynation By ALEJANDRO HERNANDEZ FERRERO
      Bundle ID: ahf.dummynation
      iTunes Store Link: https://apps.apple.com/us/app/dummynation/id6444295551?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Cydia, Sileo or Zebra).

       

      🤩 Hack Features

      - Premium + No Ads
      - Infinite Research Point
      - Infinite Liquidity (Gold)


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/topic/191828-dummynation-v313-jailed-cheats-3/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/191829-dummynation-cheats-v313-3/
      • 21 replies
    • Cats & Soup Cheats v4.1.0 +2
      Modded/Hacked App: Cats & Soup By HIDEA Co.,Ltd
      Bundle ID: com.hidea.cat
      iTunes Store Link: https://apps.apple.com/us/app/cats-soup/id1581431235?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Infinite Currencies
      - Unlocked All Specials and No Ads

       

      Non-Jailbroken Hack: https://iosgods.com/topic/157486-cats-soup-v2630-jailed-cheats-2/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/157484-cats-soup-cheats-v2640-2/
      • 318 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines