How to add extra playback speed for YouTube iOS?
In this post, we will reverse the Youtube app to know how to add custom playback speed and understand why it does not work straight forward. Disclaimer This post is for educational purposes only...
Apps RE
Reverse engineering and find out hidden backdoor in iOS app
In this post, we will reverse an app using the StoreKit framework and bypass In-app purchases (IAP) features. This case’s quite special as the app will force the user to purchase the app as a free ...
How to tweak existing Medium iOS app features with Theos & Logos - part 2
In this post we will continue to enhance Medium tweak. We will learn how to create a preference bundle and hook into Settings.app to configure default claps. If you have not read part 1 yet, I sugg...
How to tweak existing Medium iOS app features with Theos & Logos - part 1
Today we will reverse engineering Medium iOS app and modify existing claps feature. We will also learn about how to create your own Cydia tweak using theos platform, hook into a method, and change ...
Bypass StoreKit In-app purchases of iOS apps using LLDB
In this post, we will reverse engineering an app using StoreKit framework and bypass In-app purchase features. StoreKit is an iOS framework that supports in-app purchases and interactions with the ...
Bypass SSL Pinning with LLDB in iOS app
Imagine that you want to inspect the app to see what’s information exchange between mobile app and server, you can think about using simple proxy tools to sniff requests and responses or more advan...
Bypass In-app purchases of react native iOS app
Today we will reverse engineering a react native iOS app and bypass in-app purchase to use locked features. Below is an example of purchase screen whenever tap on premium content. Figure 1: Sample...
Bypass in-app purchase content in iOS apps by modifying local configuration!
In this post, we will reverse engineering and unlock in-app purchase contents by modifying local configuration on device. Below is an example of locked features and unlocked ones. Disclaimer This ...
Bypass locked features on iOS apps with Burp Suite!
In this post I will share some steps to enable blocked or hidden features on iOS app using Burp Suite tool. I will use EWA, a language learning app on AppStore, to illustrate the whole process. Di...