Jump to content

10 posts in this topic

Recommended Posts

Posted (edited)

Hi guys,

So here we go. I installed SW FA from itunes and did the following
 

su
Password  
rc.sh -m
Chose the binary

//No errors,  all good

Go to /var/root/, get the cracked binary thin it with

lipo starwars -thin armv7 -o starwars2

Took the output file, used armconverter.com to remove aslr, signed with
 

ldid -s starwars2

Renamed and replaced in the app, permissions set to 777. App works fine.

Connect to Mac (and windows), open terminal, start app, find offset in iGG (and GP)
 

gdb
att pid
watch *0xOffsetfromGP/iGG

When i set a watchpoint it shows a very huge value as compared to the value which im hacking (shows something like 40880308 or so and value should be at max 10)

In iGG it still shows the same value


Checked for ASLR with
 

info address _mh_execute_header

Which returns 0x4000. According to @fahadxmb (as far as i remember) that meant aslr was gone.

I did get a warning about

Possible section anti debug trick detected at segment_Dirty or so (a few hundred times) but thats also fine apparently.

Any ideas what the error is?

Btw, when i use LLDB (debugserver was thinned for arm64) i get the correct value but when i search in IDA the code isnt there (something entirely different is there)

 

Added log from PuTTy

 

http://pastebin.com/gZ1HCRNW

Updated by Archangel04
Posted

did u remove syscall?

 

if not u have to

Theres no syscall but I did find sysctl. I checked imports, strings but no syscall.

 

When i NOP any BLX _sysctl, it crashes the game. If i BX LR or NOP the branch it kills the game. What should i do then

don't know about lldb~ pass by~

The post is about gdb and if you cant contribute there is no need to comment on this. If you want to increase your post count please dont do so here. Do it in spam city or something

Posted (edited)

Theres no syscall but I did find sysctl. I checked imports, strings but no syscall.

When i NOP any BLX _sysctl, it crashes the game. If i BX LR or NOP the branch it kills the game. What should i do then

 

The post is about gdb and if you cant contribute there is no need to comment on this. If you want to increase your post count please dont do so here. Do it in spam city or something

Chill he was just trying to help

Updated by Naeemjr
Posted

Chill he was just trying to help

 

TBH, Doesnt seem so. Anyways, moving on,

 

According to another post (multiple posts), I need to find a place where there is _sysctl, _getpid and _memset. I didnt find that, but i did get _getpid and _sysctl

 

 

                 PUSH              {R4,R7,LR}
                 ADD                 R7, SP, #4
                 SUB.W            SP, SP, #0x20C ; void *
                 MOVW             R4, #(:lower16:(___stack_chk_guard_ptr - 0x173AD7A))
                 MOV.W            R0, #0x1EC
                 MOVT.W          R4, #(:upper16:(___stack_chk_guard_ptr - 0x173AD7A))
                 MOVS             R1, #0xE
                 ADD                R4, PC ; ___stack_chk_guard_ptr
                 LDR                R4, [R4] ; ___stack_chk_guard
                 LDR                R4, [R4]
                 STR                R4, [SP,#0x210+var_8]
                 STR                R0, [SP,#0x210+var_208]
                 MOVS             R0, #1
                 STR                R0, [SP,#0x210+var_204]
                 STRD.W         R1, R0, [SP,#0x10]
                 BLX                _getpid
                 STR               R0, [SP,#0x210+var_1F8]
                 MOVS            R0, #0
                 STRD.W        R0, R0, [SP]
                 ADD               R0, SP, #0x210+var_204 ; int *
                 ADD               R2, SP, #0x210+var_1F4 ; void *
                 ADD               R3, SP, #0x210+var_208 ; size_t *
                MOVS             R1, #4  ; u_int
                 BLX                _sysctl
                 CMP.W           R0, #0xFFFFFFFF
                 BEQ               loc_173ADB6
                 MOV              R0, #(byte_1FCB108 - 0x173ADB2)
                 ADD               R0, PC ; byte_1FCB108
                LDRB              R0, [R0]
                CBNZ              R0, loc_173AE0E
                B                     loc_173ADF6

If I NOP, then it crashes (as far as i remember, il have to check later)

Posted

NOPed sysctl and the function below it. I can getbin if I use a slow net otherwise it crashes. Debugging witj gdb still gives wrong value

Have u tired adding repo.xarold repo in Cydia

And installing ptrace pwner it will automatically disable syscall

Posted

Have u tired adding repo.xarold repo in Cydia

And installing ptrace pwner it will automatically disable syscall

Il try. I did want to learn how to do so though
Posted

Done

 

Have u tired adding repo.xarold repo in Cydia
And installing ptrace pwner it will automatically disable syscall

 

It still shows a super huge value (and yes my iGG offset is correct, i checked)

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • Family Island — Farm game v2025148.1.76088 Jailed Cheats +1
      Modded/Hacked App: Family Island™ — Farm game by Melsoft
      Bundle ID: com.MelsoftGames.FamilyIsland
      iTunes Store Link: https://apps.apple.com/us/app/family-island-farm-game/id1464689103?uo=4&at=1010lce4


      Hack Features:
      - Cheat Engine Enabled


      iOS Hack Download Link: https://iosgods.com/topic/115337-arm64-family-island-%E2%80%94-farm-game-v20190824862-jailed-cheats-1/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 2,312 replies
    • Eternium Cheats v1.38.22 +11
      Modded/Hacked App: Eternium By Making Fun, Inc.
      Bundle ID: com.makingfun.mageandminions
      iTunes Store Link: https://apps.apple.com/us/app/eternium/id579931356?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - 5K Gems When Completed Stage
      - Infinite Gold
      - Infinite Cosmetic
      - Infinite Yellow Stone
      - Multiply Attack (Linked with Enemy)
      - No Skills Cooldown
      - No Consumable Cooldown
      - Multiply Attack Speed
      - Instant Regen Health
      - Always Crit
      - Material Drops (When you killed an Enemy it will drop materials for crafts)



      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/194526-eternium-cheats-v13355-6/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 85 replies
    • Bloody Bastards Cheats v4.2.2 +2
      Modded/Hacked App: Bloody Bastards By Tibith Ltd
      Bundle ID: com.tibith.badboxing2
      iTunes Store Link: https://apps.apple.com/us/app/bloody-bastards/id1593430099?uo=4


      Hack Features:
      - Infinite Coins
      - Dumb Enemy (Single Player)


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/158327-bloody-bastards-v315-jailed-cheats-1/


      iOS Hack Download Link: https://iosgods.com/topic/158325-bloody-bastards-cheats-v315-2/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 159 replies
    • Westland Survival - Cowboy RPG v10.0 +7 [ Items Cheat ]
      Modded/Hacked App: Westland Survival - Cowboy RPG By HELIO LTD
      Bundle ID: com.heliogames.a1
      iTunes Store Link: https://apps.apple.com/us/app/westland-survival-cowboy-rpg/id1339238576?uo=4


      Hack Features:
      - Unlimited Energy / Instant Energy Refills
      - Unlock All Blueprints
      - Items Duplicate When Split / Items Hack
      - Unlimited Consumable Items
      - Unlimited Item Durability
      - God Mode / Never Die -> Linked with enemies. Useful for looting.
      - One Hit Kill / High Damage -> Linked with enemies. Use with caution.


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/forum/79-no-jailbreak-section/
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 421 replies
    • Grand Mountain Adventure 2 v1.0405 Jailed Cheats +1
      Modded/Hacked App: Grand Mountain Adventure 2 By Toppluva AB
      Bundle ID: com.toppluva.grandmountain2
      iTunes Store Link: https://apps.apple.com/us/app/grand-mountain-adventure-2/id6475040075?uo=4

       

      📌 Mod Requirements

      - Non-Jailbroken/Jailed or Jailbroken iPhone or iPad.
      - Sideloadly or alternatives.
      - Computer running Windows/macOS/Linux with iTunes installed.

       

      🤩 Hack Features

      - Free iAP (Press cancel when Buy) -- Turn on cheat option inside iOSGods Menu first

       

      ⬇️ iOS Hack Download IPA Link: https://iosgods.com/topic/192158-grand-mountain-adventure-2-v1018-jailed-cheats-1/
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 53 replies
    • Jurassic World Alive v3.14.66 - [ Dino Don't Move & More ]
      Modded/Hacked App: Jurassic World Alive By Ludia
      Bundle ID: com.ludia.jw2
      iTunes Store Link: https://apps.apple.com/us/app/jurassic-world-alive/id1231085864


      Hack Features:
      - Dino Don't Move
      - Inf. Battery
      - VIP Enabled

      This hack is an In-Game Mod Menu (iGMM). In order to activate the Mod Menu, tap on the iOSGods button found inside the app. This hack works on the latest x64 or ARM64 iDevices: iPhone 5s, 6, 6 Plus, 6s, 6s Plus, 7, 7 Plus, 8, 8 Plus, X, Xr, Xs, Xs Max, SE, iPod Touch 6G, iPad Air, Air 2, Pro & iPad Mini 2, 3, 4 and later.
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 1,692 replies
    • Car Match - Traffic Puzzle v2.61 +4 Jailed Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Car Match - Traffic Puzzle By GRAND GAMES OYUN VE YAZILIM ANONIM SIRKETI
      Bundle ID: com.grandgames.carmatch
      App Store Link: https://apps.apple.com/us/app/car-match-traffic-puzzle/id6504421808?uo=4

       
       

      🤩 Hack Features

      - Freeze Currencies
      - Unlimited Currencies -> Will increase instead of decrease.
      - Auto Win -> Quit the level.
      - Level Modifier
        • Thanks
      • 1 reply
    • Car Match - Traffic Puzzle v2.61 +4 Cheats [ Unlimited Currencies ]
      Modded/Hacked App: Car Match - Traffic Puzzle By GRAND GAMES OYUN VE YAZILIM ANONIM SIRKETI
      Bundle ID: com.grandgames.carmatch
      App Store Link: https://apps.apple.com/us/app/car-match-traffic-puzzle/id6504421808?uo=4

       
       

      🤩 Hack Features

      - Freeze Currencies
      - Unlimited Currencies -> Will increase instead of decrease.
      - Auto Win -> Quit the level.
      - Level Modifier
        • Like
      • 0 replies
    • Last War:Survival v1.0.300 [+1 Jailed Cheats]
      Modded/Hacked App: Last War:Survival By FUNFLY PTE. LTD.
      Bundle ID: com.lastwar.ios
      App Store Link: https://apps.apple.com/us/app/last-war-survival/id6448786147?uo=4



      Important


      Only work on Pve contents

      Enable on loading screen!

       

      🤩 Hack Features

      - Never Die
       
        • Informative
        • Agree
        • Thanks
        • Winner
        • Like
      • 17 replies
    • Last War:Survival v1.0.300 [+1 Cheats]
      Modded/Hacked App: Last War:Survival By FUNFLY PTE. LTD.
      Bundle ID: com.lastwar.ios
      App Store Link: https://apps.apple.com/us/app/last-war-survival/id6448786147?uo=4



      Important


      Only work on Pve contents

      Enable on loading screen!

       

       

      🤩 Hack Features

      - Never Die
       
        • Agree
        • Thanks
        • Winner
        • Like
      • 23 replies
    • Dawn of Ages: Medieval Games v2.0.7 +5 Jailed Cheats [ Damage & Defence ]
      Modded/Hacked App: Dawn of Ages: total war battle By BoomBit, Inc.
      Bundle ID: com.stratospheregames.dawnofages
      App Store Link: https://apps.apple.com/us/app/dawn-of-ages-total-war-battle/id6477473268?uo=4

       


      🤩 Hack Features

      - Damage Multiplier
      - Defence Multiplier
      - God Mode
      - Dumb Enemy
      - Premium Enabled
        • Agree
        • Winner
        • Like
      • 8 replies
    • Disney Speedstorm v1.13.0 +1 Jailed Cheat [ Unlimited Nitro ]
      Modded/Hacked App: Disney Speedstorm By Gameloft
      Bundle ID: com.gameloft.disneyspeedstorm
      iTunes Store Link: https://apps.apple.com/us/app/disney-speedstorm/id6449708682?uo=4


      Hack Features:
      - Unlimited Nitro -> Will not decrease.
      - Instant Nitro Max


      Jailbreak required hack(s): [Mod Menu Hack] Disney Speedstorm v1.5.0 +2 Cheats [ Unlimited Nitro ] - Free Jailbroken Cydia Cheats - iOSGods
      Modded Android APK(s): https://iosgods.com/forum/68-android-section/
      For more fun, check out the Club(s): https://iosgods.com/clubs/
        • Informative
        • Agree
        • Haha
        • Thanks
        • Winner
        • Like
      • 85 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines