esselunga

I don't know the ban risk either... But there are some functions that could possibly send some telemetry (eg. how many frenzies you got in a race, how much you paid for an item in the shop and so on) that could be manipulated too, but I don't have much time rigth now to check them out (I don't even know if those functions are actually called).

Yeah I did this funny thing in the freetime :S

You have to work on `libil2cpp.so`, you don't need anything else, but frida and a disassembler/decompiler. Unfortunately it's not an easy task if it's your first time, as you need to understand the logic behind it. But you can find everything on the web (not much, really, but there is). I can't reveal anything else at the moment, sorry.

That's basically what badcase script does I don't think there is much left to do... Any item becomes a top tier item for every race? Have the possibility to use the gold mario / gold kart / other assets in normal races? Change the camera angle?

Yeah I meant top tier. And nah, I didn't use gameguardian, but frida. It can be done with gameguardian too, I guess.

Managed to always get frenzy (tier 1 driver needed btw)

The modded apk would be useless, because it wouldn't use the actual (real) firebase database.

@NoFear did you get banned, too?

I got banned too in both accounts. 1st account: hacked coins to 99'999'999 (reverted back to "normality" - 50k- last day), every ticktet to ~50s, and I used speedhack to finish races faster. 2nd account: edited coins to ~30k, only ticket to ~40 and I used speedhack too.

Well done! It has been difficult?

I'm looking for unlock any racer/kart/glider manually, it's hard but I'll give it a try. Has someone managed to achieve this task?

You are right, but I wasn't editing the correct address. Meanwhile, I solved the problem!

Hmm, I'm feeling a bit dumb here. I'm trying to edit coins again. 1- I inserted the right amount of coins and did a XOR encrypted research. After some refines, I got only 1 result. 2- I found the XOR key and managed to change it in order to have 2700 coins (from 1439). 3- The value changes, but after I enter a race, finish it or exit from it, the value gets restored to 1439. I've tried this many times, but nothing has changed. The "strange" thing is that this value isn't truly encrypted, because its dword format matches the actual amount of coins (this is not true for tickets). PS: I did the exact same thing one week ago and it worked just fine.

I did an unknown value search. I bought an item in the shop and filtered by "value has canged", and then repeated for evey item in the shop. Then, I did few races as well. That allowed me to find the right value. The problem was I couldn't edit it (same problem with a new account - without 99'999'999 coins).

Nope, I couldn't do it (I've found the correct value to edit, but it kept "restoring" its original value immediately after). I've also tried with a new account (1'500 coins -> 20'000 coins), but I had the same problem. I truly don't know what the problem was, a friend of mine could change it easily today.

Tip: if you want to quickly switch account (root needed): Go to /data/data/com.nintendo.zaka/shared_prefs; Create a folder for each account (ex: account1, account2...); Copy /deviceAccount:.xml to /account1 and delete the original one; Open the game, you'll have to log with another account; Copy the new generated /deviceAccount:.xml to /account2; Now you can just copy /shared_prefs/accountX/deviceAccount:.xml to /shared_prefs in order to sign in with another account.

@NoFear it is possible to filter values by their Thumb op codes?

It's quite complicated to explain, sorry... It's around 50 now.

I managed to manipulate tickets even if I had 0 of them, it's not impossible.

You can't add a random value. x = the long encrypted value for something (ex. 1582938292); y = your actual value (ex. 3); key = x ^ y; value to write = key ^ your desired value. ^ is XOR operation.

Things I've found: Each value has its own XOR key (usually in this format -in decimal value- 1'8xx'*****'*****). Keys are generated on game startup. It's possible to set any value even after the (+/-) 99999999 mistake, even after game re-launch.

You can't use Mario Kart with parallel space, so you'll need a rooted device in order to use gg. You can easily root your device using magisk, without losing any data (please see https://magiskmanager.com/). And here is what XOR means: https://en.wikipedia.org/wiki/Exclusive_or (a very basic level of encryption in this case).

It was just a matter of time lol

Percentages (as 1st) are 3.1% 150cc and 4.2% 200cc, level 24