Jump to content

Need help creating tweak or patching jailbreak detection IDA Pro and Theos


5 posts in this topic

Recommended Posts

Posted (edited)

Hey guys,

I have tried every anti jailbreak detection tweak in Cydia and nothing works for either Optik on the Go or Virgin TV Anywhere


Back in the days these 2 apps could be patched with Flex for jailbreak detection but now nothing works. Flex cannot see a lot of values that I can see with IDA Pro.

In fact I can clearly see that Optik on the Go checks for apps installed and some specific folders. However it seems that IDA itself cannot patch the binary, everything is done through a Hex Editor and it gets very confusing trying to figure out which value to patch at what address.

Then I found this post 

http://kolbi.cz/blog/?p=286

It seems that the best way to patch it is creating a Cydia tweak with Theos. Now I do have Theos installed and working. And if anyone takes a loo at the binary for Optik on the Go in IDA you will see the method use is very similar to the one used for the Citrix App that gets patched on that link that I provided above. However it has some other files it looks for.

However this is where I need help.

I do need to hook to the class object that has the jailbreak detection right?

Also if I'm trying to create a bool to reurn false, does that mean that the bool value has to exist in that section or I can just create it? because if the bool actually existed I would be able to find it with Flex right? But I cannot find it and that's why these 2 apps are impossible to patch with Flex.


If anyone has time. I can provide the decripted executable for both of these apps. I need help creating the tweak.xm file, then I think I can probbaly build the deb file once I have the propper tweak.xm file.

Here is the ipa I created with Clutch2

https://www.dropbox.com/s/ru23fx3pttczuam/com.telus.nscreen-iOS7.0-(Clutch-2.0.4).ipa?dl=0

I whish I could just change bools and other values in IDA and save the changes back to the executable and replace the executable but it seems that IDA is not able to do that. Every guide I have checked shows how to find values, but then you need to convert some code to hex and patch it with a hex editor; and that's where it gets complicated because no one explains how they actually got the hex values to patch.

That's the nice thing about Flex that you can void stuff and change bool values so easy but it just doesn't work for jailbreak detection in  a few apps.

 

Updated by saulin
  • Like 1
Posted (edited)

maybe downgrade them to version you can bypass,i dont know what are these apps.

not on my appstore cant help

Updated by Th3nop
Posted

If anyone wants to help I can provide login information for the apps as well.

They are Cable Providers apps that allow you to stream live TV or episodes and movies.

Much like Comcast Xfinity Stream or the DirecTV app. Downgrading does not help because the versions that are hackable by Flex are not longer supported and not compatible with IOS 9/10

 

Posted (edited)
6 hours ago, saulin said:

 

However this is where I need help.

 

Also if I'm trying to create a bool to reurn false, does that mean that the bool value has to exist in that section or I can just create it? because if the bool actually existed I would be able to find it with Flex right? But I cannot find it and that's why these 2 apps are impossible to patch with Flex.....

 I whish I could just change bools and other values in IDA and save the changes back to the executable and replace the executable but it seems that IDA is not able to do that. Every guide I have checked shows how to find values, but then you need to convert some code to hex and patch it with a hex editor; and that's where it gets complicated because no one explains how they actually got the hex values to patch.

That's the nice thing about Flex that you can void stuff and change bool values so easy but it just doesn't work for jailbreak detection in  a few apps.

 

There aren't any simple bool variables in Flex to change, and ya can't just make them up because the code is still being executed, you just don't see it in Flex.  

 Flex just shows the headers,  not the implementation logic, or specific function(s)/ subfunctions that need modified.  That's where IDA comes in.

If you find where it has the jailbreak check, you'll find a branch to a dead end one way, or back to the main flow the other way. 

Basically you need to find the address of the correct subfunction, then tell it to jump to the address where the sub-function branches to if it's not jailbroken, ( to the main flow) and then void the rest of the subfunction, so it never has a chance to branch to the dead end that having a jailbreak would send ya to.

With the right offsets/addresses, and instructions, you can patch the binary, and with armconverter.com get what you need to make a tweak.

It takes some patience (and a nice learning curve) tho to get there. There's some good tutorials on here for using IDA. Good luck. 

Updated by i0s_tweak3r
  • Like 1
Posted (edited)

I wish someone would post a tut on any of these 2 apps. I can find lots of references to jailbreak and jailbroken but what to patch is the big question. Also since there is no true of false values to change makes it a lot harder than altering the money value on a game lol

I swear these 2 apps are more protected than bank apps. They have some crazy jailbreak protection, nothing seems to work

Oh well back to smali code hacking on Android for me. I was able to patch the Android version of Optik on the Go but the Virgin TV Anywhere App is showing to be a real challenge as well.

 

***EDIT**

 

Watching this video

 

It looks like this guy is able to NOP the values that send the jailbreak message right in the program and then he's able to save a new executable?

At  around 10:30 on the video he starts explaining how the jailbreak is called

Can IDA in Windows do the same?

Otherwise do I just need a virtual machine with Mac software to install that Hopper software he's using?

This is exactly what I was hopping I would be able to do with IDA

The patch function does nothing in IDA for me. I can seem to be able to remove stuff but the changes are not reflected in the Hex area and also, I'm not able to save any changes or the difference of the changes for ARM64 IOS games and apps anyways.

Also I was trying to patch a game to get the items for free. I thought I had found the correct subs entry and I tried to NOP it with a hex editor in Windows. After I made the changes and transferred the modified executable back to the game.app folder on the device, the app just crashes, even though the permissions were set exactly the same as the other files in the folder. What is the proper way to to transferred the modified files back to the app or game?

However if I modify the hex values right on the phone itself with the Hex Editor built into Filza File Manager, the app doesn't crash but it looks like I got the wrong entry or I was not supposed to NOP it anyways because the app crashes when I try to make the purchase.

 

 

 

 

 

 

 

Updated by saulin

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Our picks

    • [ The Battle Cats JP ] にゃんこ大戦争 Cheats v14.5.0 +3
      Modded/Hacked App: にゃんこ大戦争 By ponos corporation
      Bundle ID: jp.co.ponos.battlecats
      iTunes Store Link: https://apps.apple.com/jp/app/%E3%81%AB%E3%82%83%E3%82%93%E3%81%93%E5%A4%A7%E6%88%A6%E4%BA%89/id547145938?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Infinite Cash
      - OHK Linked w/ Enemy
      - Infinite Cat Foods & EXP*

       

      Non-Jailbroken Hack: https://iosgods.com/topic/194335-the-battle-cats-jp-%E3%81%AB%E3%82%83%E3%82%93%E3%81%93%E5%A4%A7%E6%88%A6%E4%BA%89-v1432-jailed-cheats-4/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/194334-the-battle-cats-jp-%E3%81%AB%E3%82%83%E3%82%93%E3%81%93%E5%A4%A7%E6%88%A6%E4%BA%89-cheats-v1432-3/
      • 20 replies
    • [ Reinforced Wooden Stick Lv99 ] 99강화 나무몽둥이 : 키우기 Cheats v99.1.19 +2
      Modded/Hacked App: 99강화 나무몽둥이 : 키우기 By STUDIO LICO Corp.
      Bundle ID: com.studiolico.woodenstick
      iTunes Store Link: https://apps.apple.com/kr/app/99%EA%B0%95%ED%99%94-%EB%82%98%EB%AC%B4%EB%AA%BD%EB%91%A5%EC%9D%B4-%ED%82%A4%EC%9A%B0%EA%B8%B0/id6737379268?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - God Mode
      - Multiply Attack

       

      Non-Jailbroken Hack: https://iosgods.com/topic/193094-reinforced-wooden-stick-lv99-99%EA%B0%95%ED%99%94-%EB%82%98%EB%AC%B4%EB%AA%BD%EB%91%A5%EC%9D%B4-%ED%82%A4%EC%9A%B0%EA%B8%B0-v9916-jailed-cheats-2/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/193095-reinforced-wooden-stick-lv99-99%EA%B0%95%ED%99%94-%EB%82%98%EB%AC%B4%EB%AA%BD%EB%91%A5%EC%9D%B4-%ED%82%A4%EC%9A%B0%EA%B8%B0-cheats-v9916-2/
      • 20 replies
    • Raising Beast Friends Cheats v1.2.9 +3
      Modded/Hacked App: 짐승친구들 키우기 By Bigpicture Team Inc.
      Bundle ID: com.bigpictureteam.raisingbeastfriends
      iTunes Store Link: https://apps.apple.com/kr/app/%EC%A7%90%EC%8A%B9%EC%B9%9C%EA%B5%AC%EB%93%A4-%ED%82%A4%EC%9A%B0%EA%B8%B0/id6503225529?uo=4


      Hack Features:
      - God Mode
      - Multiply Attack
      - Multiply Defense


      Non-Jailbroken & No Jailbreak required hack(s): https://iosgods.com/topic/187879-raising-beast-friends-%EC%A7%90%EC%8A%B9%EC%B9%9C%EA%B5%AC%EB%93%A4-%ED%82%A4%EC%9A%B0%EA%B8%B0-v114-jailed-cheats-3/


      iOS Hack Download Link: https://iosgods.com/topic/187878-raising-beast-friends-%EC%A7%90%EC%8A%B9%EC%B9%9C%EA%B5%AC%EB%93%A4-%ED%82%A4%EC%9A%B0%EA%B8%B0-cheats-v114-3/
      • 6 replies
    • Otherworld Three Kingdoms Cheats v1.0.32 +4
      Modded/Hacked App: Otherworld Three Kingdoms By SuperPlanet corp.
      Bundle ID: com.superplanet.samworld
      iTunes Store Link: https://apps.apple.com/us/app/otherworld-three-kingdoms/id6496345383?uo=4


      Hack Features:
      - Multiply Attack
      - Multiply Defense
      - Instant Skills


      iOS Hack Download Link: https://iosgods.com/topic/183743-otherworld-three-kingdoms-cheats-v103-3/
        • Like
      • 130 replies
    • Tap Tap Fish - AbyssRium Cheats v1.85.0 +1
      Modded/Hacked App: Tap Tap Fish - AbyssRium By SangHeon Kim
      Bundle ID: com.idleif.abyssrium
      iTunes Store Link: https://itunes.apple.com/us/app/tap-tap-fish-abyssrium/id1068366937?mt=8&uo=4&at=1010lce4



      Hack Features:
      - Infinite Vitality, Gem, etc ... (Increase When Used) / Untested with Pearl
       

      Hack Download Link: https://iosgods.com/topic/81337-arm64-tap-tap-fish-abyssrium-cheats-v179-1/
        • Like
      • 369 replies
    • Cooking Craze: Restaurant Game Cheats v2.6.1 +1
      Modded/Hacked App: Cooking Craze: Restaurant Game By Big Fish Games, Inc
      Bundle ID: com.bigfishgames.cookingempireuniversalf2p
      iTunes Store Link: https://apps.apple.com/us/app/cooking-craze-restaurant-game/id1029094059?uo=4

       

      🔧 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Cydia, Sileo or Zebra).

       

      🚀 Hack Features

      - Free Store (not Free iAP)


      🍏 For Non-Jailbroken & No Jailbreak required hacks: https://iosgods.com/topic/191693-cooking-craze-restaurant-game-v240-jailed-cheats-1/

       

      📥 iOS Hack Download Link: https://iosgods.com/topic/191694-cooking-craze-restaurant-game-cheats-v250-1/
      • 6 replies
    • Chef & Friends: Cooking Game Cheats v1.32.5 +1
      Modded/Hacked App: Chef & Friends: Cooking Game By MYTONA Ltd.
      Bundle ID: com.mytona.cheftales
      iTunes Store Link: https://apps.apple.com/us/app/chef-friends-cooking-game/id1586951898?uo=4


      Hack Features:
      - Infinite Currencies (Hats, Coins, Gems)

      NOTE: May bug out the game so better try on your throw away account first 


      iOS Hack Download Link: https://iosgods.com/topic/178904-chef-friends-cooking-game-cheats-v141-1/
      • 28 replies
    • Cats & Soup Cheats v2.72.0 +2
      Modded/Hacked App: Cats & Soup By HIDEA Co.,Ltd
      Bundle ID: com.hidea.cat
      iTunes Store Link: https://apps.apple.com/us/app/cats-soup/id1581431235?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Infinite Currencies
      - Unlocked All Specials and No Ads

       

      Non-Jailbroken Hack: https://iosgods.com/topic/157486-cats-soup-v2630-jailed-cheats-2/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/157484-cats-soup-cheats-v2640-2/
        • Winner
      • 305 replies
    • AdVenture Communist v6.47.0 +2 Cheats
      Modded/Hacked App: AdVenture Communist By Hyper Hippo Publishing Ltd.
      Bundle ID: com.kongregate.mobile.adventurecommunist
      iTunes Store Link: https://apps.apple.com/us/app/adventure-communist/id1225683141?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Freeze Currencies
      - Unlimited Cards [Get Some]

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/149902-adventure-communist-v6430-2-cheats/
      • 131 replies
    • Choices: Stories You Play Cheats v4.3.0 +4
      Modded/Hacked App: Choices: Stories You Play By Pixelberry Studios
      Bundle ID: com.pixelberrystudios.choices
      iTunes Store Link: https://apps.apple.com/us/app/choices-stories-you-play/id1071310449?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - Free Premium Choices
      - Free Outfits
      - Free Hairstyles
      - Free Looks

      Note: able to purchase without having enough gems.

       

      Non-Jailbroken Hack: https://iosgods.com/topic/147462-choices-stories-you-play-v410-4-cheats-for-jailed-idevices/

       

      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/147155-choices-stories-you-play-cheats-v412-4/
        • Agree
        • Haha
        • Thanks
        • Like
      • 360 replies
    • Family Island — Farm game v2025148.1.76088 Jailed Cheats +1
      Modded/Hacked App: Family Island™ — Farm game by Melsoft
      Bundle ID: com.MelsoftGames.FamilyIsland
      iTunes Store Link: https://apps.apple.com/us/app/family-island-farm-game/id1464689103?uo=4&at=1010lce4


      Hack Features:
      - Cheat Engine Enabled


      iOS Hack Download Link: https://iosgods.com/topic/115337-arm64-family-island-%E2%80%94-farm-game-v20190824862-jailed-cheats-1/
        • Agree
      • 2,312 replies
    • Eternium Cheats v1.38.22 +11
      Modded/Hacked App: Eternium By Making Fun, Inc.
      Bundle ID: com.makingfun.mageandminions
      iTunes Store Link: https://apps.apple.com/us/app/eternium/id579931356?uo=4

       

      📌 Mod Requirements

      - Jailbroken iPhone or iPad.
      - iGameGod / Filza / iMazing.
      - Cydia Substrate, ElleKit, Substitute or libhooker depending on your jailbreak (from Sileo, Cydia or Zebra).

       

      🤩 Hack Features

      - 5K Gems When Completed Stage
      - Infinite Gold
      - Infinite Cosmetic
      - Infinite Yellow Stone
      - Multiply Attack (Linked with Enemy)
      - No Skills Cooldown
      - No Consumable Cooldown
      - Multiply Attack Speed
      - Instant Regen Health
      - Always Crit
      - Material Drops (When you killed an Enemy it will drop materials for crafts)



      ⬇️ iOS Hack Download Link: https://iosgods.com/topic/194526-eternium-cheats-v13355-6/
      • 85 replies
×
  • Create New...

Important Information

We would like to place cookies on your device to help make this website better. The website cannot give you the best user experience without cookies. You can accept or decline our cookies. You may also adjust your cookie settings. Privacy Policy - Guidelines