kiynox
-
Posts
484 -
Joined
-
Last visited
-
Days Won
15
Content Type
Profiles
Forums
Downloads
Gallery
Posts posted by kiynox
-
-
[ @_yourram ]
---Quotebruh :!
As I said earlier, the script will edit the 3rd, 6th & 9th position of the results. If your results is less than 3, 6 & 9; better just edit them all.
gg.searchNumber('140', gg.TYPE_FLOAT) results = gg.getResults(gg.getResultsCount()) if results ~= nil then edits = {} for k, v in ipairs(results) do edits[#edits + 1] = { address = v.address, value = '17', --gg.TYPE_FLOAT = 16 flags = v.flags } end gg.setValues(edits) gg.addListItems(edits) end
---
0 -
[ @_yourram ]
---
Sorry I forgot to add commas:gg.searchNumber('140', gg.TYPE_FLOAT) results = gg.getResults(gg.getResultsCount()) edits = {} for k, v in ipairs({3,6,9}) do edits[#edits + 1] = { address = results[v].address, value = '17', --gg.TYPE_FLOAT = 16 flags = gg.TYPE_FLOAT } end gg.setValues(edits) gg.addListItems(edits)
---
Should work now.0 -
[ @_yourram ]
---Quotewhat does the script wants?
You put your value after the variable instead of replacing the variable. That's wrong:
-- Wrong: value = results[v].value '17' -- Correct: value = '17'
---
This looks like my script, here, I improve it a little bit:gg.searchNumber('140', gg.TYPE_FLOAT) results = gg.getResults(gg.getResultsCount()) edits = {} for k, v in ipairs({3,6,9}) do edits[#edits + 1] ={ address = results[v].address value = '17' --gg.TYPE_FLOAT = 16 flags = gg.TYPE_FLOAT } end gg.setValues(edits) gg.addListItems(edits)
---
*Do note that the script above will only edit the 3, 6 & 9 position of the results.
*I told you to read the error message carefully.0 -
[ @_yourram ]
---Quotewhy did i get the error, what mistakes i'm doing?
You gotta be kidding me. Make sure to READ the error message and do double check to really sure the command is correct. You need to change:
gg.setVlaues -- Wrong gg.setValues -- Correct
---
0 -
[ @bue ]
---QuoteHow am I do it about what you said?
Just open your dumper datas in IDA, file -> open -> your dumped datas -> set the 'processor type' to 'ARM' -> ok. I recommend to learn assembly first.
---0 -
[ @jesty ]
---QuoteHello, can you tell me how to decompile the GG modifier to achieve b40000 elimination
What do you mean by 'b4000 elimination'? Are you refering to bytes? Also what GG modifier? doesn't make sense.
---Quoteit can scan the base address?
You can see base addresses by going into Memory viewer -> goto -> select dropdown menu (v) -> and there you go.
---0 -
[ @bue ]
---QuoteCan you send me another link?The link you gave me redirect the ads web every time I register.I can't download.Or you can send me your ida through link.
You can visit: ThePirateBays then search for IDA. Reminder that it is a torrent site, which you need: UTorrent to download the file.
---QuoteI have no credit card to register.
You dont need a credit card. It is free after all. You got the wrong site probably.
---Quote'This version can only disassemble the PE file'.
That's the limitation of using IDA Free, you need IDA Pro to do all things.
---0 -
[ @bue ]
---QuoteHey is IDA free?
IDA is a paid program. There's a free version with limited features but I would suggest using cracked/pirated version of IDA Pro. Check it on: ThePirateBay
---Quoteghidra is installed with JDK
The minimum requirement is to use JDK 17 or above. See: Ghidra Installation Guide. You can use JDK from Oracle itself: Java17
---1 -
[ @bue ]
---QuoteIs there any powerful memory editor?
Game Guardian is already really powerful. Nothing else can't beat it unless Cheat Engine.
---QuoteIt is hard to explain because necessity of language.
You're doing a good job explaining alat. It does make sense judging from your explanation. Online games partially store some values on the client, for example cache data or temporary value. In this case, the reward / item values are stored inside your game, thus making it modifiable. It is considered a workaround to hack server-sided value using client-sided value.
---
You might want to create another topic at: requests section. You can ask other people to hack your game. Hopefully, one of our Contributor can assist you.0 -
[ @bue ]
---QuoteCan I use hex editor instead ida,ghidra?
Unfortunately you can't. Your only option on the phone is to use Game Guardian. Hex editor cannot translate hex into readable assembly instruction, it is pretty much useless.
---QuoteFor example,I find 'diamond' in dump lib file by searching 'diamond' in search bar in MT manager. Am I right or worng?
You are wrong. You're only finding string/text that has nothing to do with diamond values. If you want to find diamond values using only string/text, you need to use IDA/ any dissasembler apps that can do string reference. Also, diamond values are usually server sided, meaning that you can't change it only trough memory / library.
---
I've seen alot of people trying to hack 'myid'. Looking at it, it is some kind of internet provider app isn't it? It must have been online games. If that's the case, then you can't hack it. It is the same as browser games, where the games is preloaded from server and has nothing to do with the app itself. Meaning that the values are not stored inside the app but rather server sided.0 -
[ @bue ]
---QuoteDo you have some kind of social media like telegram?
I do have: @kiynox
---QuoteI want to ask something specific
Just dm me here
---0 -
[ @bue ]
---QuoteCan Bin files I got help game hacking?I I tried everything.Dumping lib file,dex file and finding values that is so challenging
All games component is inside library (.so) or OBB, not dex file.
---QuoteHi guys,I got bin files from the game by dumping memory in gg.But I don't know what next can I do
What's your point of dumping? It is just saving raw memory into a file. It is pointless if you don't know the way to read it. You can however 'try' to read it by dissasembling the dumped datas using some tools like: IDA Pro, Ghidra, x64dbg, etc; but you need to have some experience in reading assembly (architectural language: ARM, x86, RISC, etc)
---QuoteMy mission is to get offset.
Offset is not obtained by dumping. Did you know what "offset" is? Offset is just basically a diplacement from base address, it is just the way to get our final address, it is like: base + offset = final (1 + 2 = 3). If you're talking about libil2cpp dumper / ue4 dumper, then you're missing the point by dumping raw data from memory. Those 'dumpers' tools is reading the game memory structure from metadata/pattern, read the string references, and then saving it to a file (cs/json file), thus making it readable.
---
So how to get Offset?- - Finds your hack manually using Game Guardian -> copy the 'hack' address -> find out the memory range of our address -> copy the first address of our memory range -> now calculate: hack address - first address of our memory range = offset. You can do all these inside Game Guardian or do some calculation online: Hex Calculator
- - Dissasemble our library using tools I mentioned earlier -> find strings related to our hacks (ex: emulator) -> find any references to our string (xref) -> your offset is the address of any function that referenced by our string.
I made alot of simplification here, it might sounds hard, but it is easy once you understand it.
1 -
[ @angel88888 ]
---QuoteDo u mean that it is impossible to change the game speed in a UE4 engine game by modifying memory values, and the only way to do so is through its internal speed hack
What do you mean by internal and memory? All running app lives in Memory. It is possible to modify speedhack through memory itself but there's differences between Game Guardian speedhack and in-game speedhack (player speed, stats, etc). Game Guardian speedhack needs to keep emulate the time, this cannot be done by only "changing values" as timers will keep revert to original. It is a little bit complicated, but I highly suggest to modify your player speed instead.
---0 -
[ @angel88888 ]
---QuoteTo achieve this, I attempted to modify the speed using the internal speed hack feature on my Android 11 phone
Your logic is flawed. This could work if you find common value, but it is not the case with speedhack. Even If Game Guardian shows you x2, x3, etc; it is only a modifier, which it is not the actual value. Speed value is usually in floats. So if the default speed is 1.05 and the speedhack modifier is 2, it should be = 1.05 * 2. That's why in order to find speedhack, you need to find for unknown/fuzzy value. Also remember that Game Guardian speedhack is related to OS/Kernel timers function, which make it unlikely the value stored in game's memory range.
---QuoteI don't know how to use UE4 dumper
You just need: Termux installled. Then read their documentation, you can find it at the bottom of the github page. There's 2 UE4-Dumper, use it if another fails: AndUE4Dumper - UE4Dumper. Must be noted that you need to know the GWorld & GName addresses of LibUE4 first in order for it to work. It acts like Unity, where you need: libil2cpp.so & metadata.dat, but in UE4 you need: libUE4.so & Gworld - GName address. You can find GWorld or GName trough Hex pattern:
Examples. Find the GWorld-Gname first on Game Guardian -> calculate the offset: GName - Base address of LibUE4 -> Use the tool on termux and put the address:su ./sdcard/download/ue4dumper --sdkw --gworld <address_of_gworld> --gname <address_of_gname> --ptrdec --package <you_game_pkgs_name> --output /sdcard/sdk.txt
---
Unlike Unity / libil2cpp dumper that automatically look for metada.dat, in UE4 Dumper you still need to manually find GWorld & GName.0 -
[ @angel88888 ]
---Quotebut I'm unsure about UE4 games
UE4 and Unity is game engine. Both have their own structure. You can use UE4Dumper: UE4 Dumper
---QuoteI don't know how to locate the speed value through memory
You can find the value of speed using SDK generated from UE4 Dumper. Or you can use unknown value search / fuzzy search -> Run -> Refine with changed value -> Stop running -> Refine with changed value (do this repeatedly until the result is decreased).
---0 -
[ @angel88888 ]
---Quoteis there anyone know what's the problem?
It could be caused by several factors, but it's mostly software-os related.
---
Software:
Game Guardian speedhack relies on 32-bit library. Which mean that your game must either use armeabi-v7a or x86 architecture. When you're downloading from Playstore, if the game aren't using split-apks, it will have multiple architecture variant of the game library. Most virtuals is also built on top of 32-bit architecture, including VPhoneGaGa. Even though you can use 64-bit inside the virtual, it is being emulated on 32-bit. So when you're importing the game to virtual, it will instantly use 32-bit variant, which causing speedhack to work.
---
OS:
Game Guardian speedhack is basically accelerate the entire game timing. It wokrs by manipulating time() function on kernel level, I think the explanation could be found here: How to determine why speedhack does not work.
---0 -
[ @neramino ]
---Quoteso if i want to hack any game that have this type of detection i have to hack it when i'm outside (the game on the background) ?
Pretty much but as I said, this is might not the case if it's related to LiApp.
---0 -
[ @neramino ]
---
I think what he means is: the game detects any app that draws some window on top of it, this include Game Guardian icon. That's why Game Guardian can be opened even you're on another app. Also, I think that this is not the primary cause for LiApp, it must be something else.
---0 -
[ @vaibhavi ]
---QuoteWhat apk is signature ?
Do you mean: "what is apk signature?", well it is some kind of verification process wether the apk/app is legit or not. Usually through cert located at /META-INF.
---1 -
[ @angel88888 ]
---Quoteis there any tutorial for learn about speed function selection? i don't know which box should be tick or blank
I think what @nok1a meant before is that: you shouldn't use GG inbuilt speedhack but rather change the speed properties of that player inside the game. You can modify speed stats or items that can buff your speed to higher value. Game Guardian inbuilt speed-hack is speeding up your entire game, which will cause desync as explained earlier.
---0 -
[ @Aaron-Auto ]
---Quoteis there possible that u can make it for only 1 device?
You can. You need to find the device: HWID and just do the same as above script.
---0 -
[ @Aaron-Auto ]
---Quoteis there possible u can make it username and password
As I said earlier, you just need to edit the script I gave you above. It is pretty much the same.
lookup = { ["user1"] = "password1" } function notice(message) gg.alert(message) os.exit() end function menus() notice('You have reached the main menu!') end username = gg.prompt({'Enter username :'},{[1] = nil},{[1] = 'string'}) if username == nil then notice('Username empty, exiting...') else if lookup[username[1]] == nil then notice('Username not found, exiting...') end end password = gg.prompt({'Enter password :'},{[1] = nil},{[1] = 'string'}) if password == nil then notice('Password empty, exiting...') else if lookup[username[1]] ~= password then notice('Password incorrect, exiting...') end end menus()
---
*Dont be lazy.0 -
---
[ @HEROGAMEOfficial ]Quoteshare to public = share code.
By this logic, just dont hide anything at all since it is used by yourself. The OP wants to "Hide" it, even though some knowledgable users can still get the script datas. The intention is to make it not too obvious isn't it?
---
[ @Aaron-Auto ]Quotehide my values in a server like 000webhost or something and also for only 1 device
What kind of 'hide' you want? Isnt your "000webhost" will only store your script? Then just use luaobfuscator & encrypt your script like I said above. Or you want to hide your website address?
---0 -
[ @Aaron-Auto ]
---
I can't access your recent topics about: "Auto execute Game Guardian". Perhaps you set it to private or being removed, please DM-me if you have any problems.
---0
Just like we change the address "value" can we also change the address "name" while using the script?
in Help
Posted · Edited by kiynox
[ @_yourram ]
---
Always read our documentation here: gg documentation. But yeah, I will explain the script:
---