Dimension of TDO

Sorry guys, for posting 7 messages at once. Please don't consider it spam. In fact, we have re-indexed all important resources and categorized each post to make it easier for users to access. This task took us more than 4 hours. So, please don't consider it spam. Sub Table: https://t.me/TDOhex/454 Please support us and help users by forwarding this sub table post as much as possible. Thank you. ❤️

Table of Contents: 👉 Index for Starting Lib Patching with radare2 https://t.me/TDOhex/453 👉 Index for In-Depth Smali Analysis https://t.me/TDOhex/452 👉 Index for Flutter Reverse Engineering https://t.me/TDOhex/451 👉 Index for Reverse Engineering of Hermes bytecode (HBC) https://t.me/TDOhex/450 👉 Index for Useful Patches, Tutorials and Guidelines https://t.me/TDOhex/449 --Share with Your Friends-- 💥💥💥💥💥💥💥💥💥💥💥 📣 Main Channel: @TDOhex 📱Second Channel: @Android_Patches 💬 Discussion Group: @TDOhex_Discussion 💥💥💥💥💥💥💥💥💥💥💥

Index for Starting Lib Patching with radare2 ━━━━━━━━━━━━━━━━━━━ 👉 For Installation of readare2 https://t.me/TDOhex/280 👉 For radare2 course https://t.me/TDOhex/281 ━━━━━━━━━━━━━━━━━━━ 🎥 Tutorials on Lib Patching 🎥 👉 For Patching Mini Militia https://t.me/TDOhex/284 👉 For Patching Hunter Assassin 2 https://t.me/TDOhex/301 👉 For Patching Piano Fire https://t.me/TDOhex/327 👉 For Patching PK XD https://t.me/TDOhex/343 👉 For Patching AltLife https://t.me/TDOhex/344 👉 For Killing Signatures of StarMaker https://t.me/TDOhex/348 👉 For Premium Tutorial on InShot https://t.me/TDOhex/356 👉 For Premium Tutorial on Polaris Office https://t.me/TDOhex/367 👉 For Patching Magic Tiles 3 https://t.me/TDOhex/362 👉 How to Mod WormsZone.io https://t.me/TDOhex/372 👉 3 in 1 Tutorial on lib Patching https://t.me/TDOhex/396 👉 Premium Tutorial on Polish https://t.me/TDOhex/409 ━━━━━━━━━━━━━━━━━━━ 💡 Patches and Hints 💡 👉 Hint for Lumber Inc https://t.me/TDOhex/304 👉 Hint for Dino Hunter King https://t.me/TDOhex/307?single 👉 Hint for Brain it On! https://t.me/TDOhex/311 👉 Hint for Brain Wars https://t.me/TDOhex/312 👉 Hint for Bomber Friends https://t.me/TDOhex/314 👉 Hint for PX XD https://t.me/TDOhex/317 👉 Hint for Piano Fire https://t.me/TDOhex/326 👉 Custom Patches: https://t.me/TDOhex_Discussion/11608 ━━━━━━━━━━━━━━━━━━━ #radare2 #lib #patching #libpatching 💥💥💥💥💥💥💥💥💥💥💥 📣 Main Channel: @TDOhex 📱Second Channel: @Android_Patches 💬 Discussion Group: @TDOhex_Discussion 💥💥💥💥💥💥💥💥💥💥💥

Index for In-Depth Smali Analysis ━━━━━━━━━━━━━━━━━━━ 👉 Simple Process to Unlock Soul Browser https://t.me/TDOhex/342 👉 Simple Process to Unlock Elevate https://t.me/TDOhex/345 👉 Silent Explanation to Mod Epic! https://t.me/TDOhex/347 👉 Premium Tutorial on Inshot Video Editor by TDOhex https://t.me/TDOhex/356 👉 Premium Tutorial on Polaris Office https://t.me/TDOhex/367 👉 Simple Process to Unlock Ginger Keyboard https://t.me/TDOhex/368 👉 Simple Process to Mod Picsart https://t.me/TDOhex/369 👉 Basic steps to Unlock Investing.com https://t.me/TDOhex/373 👉 Smali Digging From Zero to Hero https://t.me/TDOhex/378 👉 How to dig through skuDetails https://t.me/TDOhex/384 👉 How to Dig Through Index Value https://t.me/TDOhex/386 👉 How to Patch App from resources https://t.me/TDOhex/393 👉 How to Mod Photoleap Through Billing Process https://t.me/TDOhex/407 👉 Premium Tutorial on Polish https://t.me/TDOhex/409 👉 Practical Examples to Reach Place to Patch Through revenuecat https://t.me/TDOhex/415 👉 6th Example to Reach Place to Patch Through revenuecat https://t.me/TDOhex/417 ━━━━━━━━━━━━━━━━━━━ #dex #smali #patching #dexpatching #smalipatching 💥💥💥💥💥💥💥💥💥💥💥 📣 Main Channel: @TDOhex 📱Second Channel: @Android_Patches 💬 Discussion Group: @TDOhex_Discussion 💥💥💥💥💥💥💥💥💥💥💥

Index for Flutter Reverse Engineering ━━━━━━━━━━━━━━━━━━━ 👉 blutter-termux https://github.com/dedshit/blutter-termux.git 👉 Guidelines to Install blutter-termux https://t.me/AbhiTheM0dder/1128 ━━━━━━━━━━━━━━━━━━━ 👉 Flutter Examples to Reach Place to Patch Through revenuecat https://t.me/TDOhex/439 👉 Flutter Reverse Engineering: Boolean Mystery in Dart VM https://t.me/TDOhex/440 👉 Flutter Reverse Engineering: Object Pool Analysis https://t.me/TDOhex/444 👉 Reverse Engineering Obfuscated Flutter Apps: Analyzing with pptool https://t.me/TDOhex_Discussion/35710 👉 Reverse Engineering Flutter: Patching armeabi-v7a https://t.me/TDOhex/442 👉 Guidelines to Install and Usage of pptool https://t.me/TDOhex/445 👉 How to use the '-p' patch option in pptool https://t.me/TDOhex_Discussion/35794 👉 The Impact of Boolean Values on tbz and tbnz Instructions https://t.me/TDOhex_Discussion/34194 👉 Patches for Boolean Function of DartVM https://t.me/TDOhex_Discussion/19429 👉 How to Bypass SSL Pinning in Flutter Apps https://t.me/TDOhex_Discussion/36590 👉 How Patch F1 Rockets VPN Fast & Private https://t.me/TDOhex_Discussion/20713 👉 Tutorials on Flutter from Group Members https://t.me/TDOhex_Discussion/38598 ━━━━━━━━━━━━━━━━━━━ #flutter #dart #blutter #pptool #lib #patching #libpatching 💥💥💥💥💥💥💥💥💥💥💥 📣 Main Channel: @TDOhex 📱Second Channel: @Android_Patches 💬 Discussion Group: @TDOhex_Discussion 💥💥💥💥💥💥💥💥💥💥💥

Index for Reverse Engineering of Hermes bytecode (HBC) ━━━━━━━━━━━━━━━━━━━ 👉 Basic Practice to Reverse Hermes ByteCode HBC https://t.me/TDOhex/435 👉 To Install hbctool https://t.me/TDOhex/436 👉 To Install hermes-dec https://t.me/TDOhex/434 👉 How to Patch El Comercio Perú https://t.me/TDOhex_Discussion/33376 👉 How to Patch Time Since: Multi time counter https://t.me/TDOhex_Discussion/34673 👉 How to Patch HeyAI - AI Chatbot Assistant https://t.me/TDOhex_Discussion/26947 👉 How to Patch Tarteel App (iPhoneOS) https://t.me/TDOhex_Discussion/23276 👉 How to Patch Tarteel App (Android) https://t.me/TDOhex_Discussion/21421 👉 Example to set coins in Hermes ByteCode https://t.me/TDOhex_Discussion/20399 ━━━━━━━━━━━━━━━━━━━ 💥💥💥💥💥💥💥💥💥💥💥 📣 Main Channel: @TDOhex 📱Second Channel: @Android_Patches 💬 Discussion Group: @TDOhex_Discussion 💥💥💥💥💥💥💥💥💥💥💥

Index for Useful Patches, Tutorials and Guidelines ━━━━━━━━━━━━━━━━━━━ 👉 Useful Notes On Data types With Patches of arm32/64 https://t.me/TDOhex/371 👉 Patch for Disabling Ads from Android Apps and Games https://t.me/TDOhex/383 👉 How to Override SharedPreferences https://t.me/TDOhex/387 👉 How to Fix Google Maps in Mod Apps https://t.me/TDOhex/389 👉 Patch to Inject Fake Build Prop into Any App/Game https://t.me/TDOhex/391 👉 Notes on android.view setVisibility https://t.me/TDOhex/374 👉 Powerful Android APKEditor https://t.me/TDOhex/425 👉 How to Run Frida Hooks Through JsHook Without Root https://t.me/TDOhex/432 👉 How to Bypass SSLPinning and Inspect & rewrite HTTP(S) traffic Without Root https://t.me/TDOhex/437 👉 How to Bypass Mock Detection https://t.me/TDOhex_Discussion/6280 👉 How to Bypass VPN Detection https://t.me/TDOhex_Discussion/35471 👉 For Fixing Package Installer https://t.me/TDOhex_Discussion/15407 👉 To optimize video file sizes using ffmpeg, follow these instructions https://t.me/TDOhex_Discussion/26196 👉 Macros in radare2 https://t.me/TDOhex_Discussion/35890 👉 How To Create Custom Patches for LuckyPatcher 1. https://t.me/TDOhex/396 2. https://t.me/TDOhex_Discussion/12509 3. https://t.me/ApkEditorPr00/820 👉 Useful Hints and Guidelines https://t.me/TDOhex_Discussion/38620 ━━━━━━━━━━━━━━━━━━━ 💥💥💥💥💥💥💥💥💥💥💥 📣 Main Channel: @TDOhex 📱Second Channel: @Android_Patches 💬 Discussion Group: @TDOhex_Discussion 💥💥💥💥💥💥💥💥💥💥💥

Hello guys, as you all know, we were facing some challenges in our discussion group @TDOhex_Discussion, such as: 1. Spamming by a few troublemakers. 2. Scamming by members involved in crypto. 3. Disrespecting group rules and members using fake accounts. To address these challenges, we have made some changes to the group rules for new members: 1. Only group members will be able to send messages in the group. Unknown persons will be restricted from messaging. 2. New members will have to request to join the group. Group admins will verify the age of the new members' IDs. 3. To approve a request, your account must be at least 6-7 months old. Requests from accounts younger than this will not be accepted. 4. Even if your account is old, you will need to wait 1-3 days for the request to be accepted. This waiting period depends on the availability and analysis of the admins. So, think carefully before leaving the group or doing something that might get you kicked out. Because of the new rules, re-entry has become strict. If someone wants, they can silently access the group's content without participating actively. We have taken these strict measures to prevent the aforementioned challenges, maintain the group's importance, and avoid the group getting banned. We hope for your support. If anyone has any objections, they can contact us through our bot @TDOhexSupportBot. A new book on Flutter Reverse Engineering will be published soon. Stay tuned with us. Thank you all for your love and support. ❤️

Guidelines to Install and Usage of pptool ━━━━━━━━━━━━━━━━━━━ How Install pptool 1. Download pptool from here. https://t.me/SaltSoupGarageGroup/8429 2. Verify path of archive. My path is /storage/emulated/0/Download/pptool_v1.0-termux-aarch64-p311.zip. 3. Execute these commands.

unzip /storage/emulated/0/Download/pptool_v1.0-termux-aarch64-p311.zip pptool -d $PREFIX/bin && chmod +x $PREFIX/bin/pptool

4. Run, pptool -h to verify. ━━━━━━━━━━━━━━━━━━━ Example of pp.txt: [pp+0x12345] String: "false" [pp+0x23456] String: "true" ━━━━━━━━━━━━━━━━━━━ Usages of pptool 1. Finding Pool Pointer Addresses: To find all addresses in libapp.so where the pool pointer 0x12345 is stored, use the following command:

pptool /path/to/libapp.so 0x12345

Replace /path/to/libapp.so with the actual path to libapp.so. Offsets refer to the pool pointer offsets. 2. Replacing Pool Pointers: To replace the pool pointer 0x12345 with 0x23456 at all addresses where 0x12345 is stored, use:

pptool /path/to/libapp.so 0x12345 -p 0x23456

This command will replace the pool pointer 0x12345 with 0x23456 at all addresses in libapp.so. 3. Targeted Patch Option at Specific Address: To apply the patch option only at a specific address (e.g., 0x00000001), use:

pptool /path/to/libapp.so 0x12345 -p 0x23456 -t 0x00000001

Here, the parameter (0x23456) passed to the -p option is the offset of the replacement pool pointer and the offset (0x00000001) passed to the -t option is the address to apply the change to. 4. Targeted Patch Option at Multiple Addresses: To apply the patch option only at specific addresses (e.g., 0x00000001 and 0x00000002), use:

pptool /path/to/libapp.so 0x12345 -p 0x23456 -t 0x00000001 0x00000002

The patch will only be applied at addresses 0x00000001 and 0x00000002. 5. Saving Changes: By default, the patched file is saved as libapp_mod.so. To override the original libapp.so file, use the -f option:

pptool /path/to/libapp.so 0x12345 -p 0x23456 -f

pptool /path/to/libapp.so 0x12345 -p 0x23456 -t 0x00000001 -f

pptool /path/to/libapp.so 0x12345 -p 0x23456 -t 0x00000001 0x00000002 -f

━━━━━━━━━━━━━━━━━━━ 👉 Reverse Engineering Obfuscated Flutter Apps: Analyzing with pptool https://t.me/TDOhex/446 ------------------------------------------------ Channel of Kirlif': @SaltSoupGarage Discussion Group of Kirlif': @SaltSoupGarageGroup Guidelines by @TDOhex

Guidelines to Install and Usage of pptool ━━━━━━━━━━━━━━━━━━━ How Install pptool 1. Download pptool from here. https://t.me/SaltSoupGarageGroup/8429 2. Verify path of archive. My path is /storage/emulated/0/Download/pptool_v1.0-termux-aarch64-p311.zip. 3. Execute these commands.

unzip /storage/emulated/0/Download/pptool_v1.0-termux-aarch64-p311.zip pptool -d $PREFIX/bin && chmod +x $PREFIX/bin/pptool

4. Run, pptool -h to verify. ━━━━━━━━━━━━━━━━━━━ Example of pp.txt: [pp+0x12345] String: "false" [pp+0x23456] String: "true" ━━━━━━━━━━━━━━━━━━━ Usages of pptool 1. Finding Pool Pointer Addresses: To find all addresses in libapp.so where the pool pointer 0x12345 is stored, use the following command:

pptool /path/to/libapp.so 0x12345

replace /path/to/libapp.so with the actual path to libapp.so. Offsets refer to the pool pointer offsets. 2. Replacing Pool Pointers: To replace the pool pointer 0x12345 with 0x23456 at all addresses where 0x12345 is stored, use:

pptool /path/to/libapp.so 0x12345 -p 0x23456

This command will replace the pool pointer 0x12345 with 0x23456 at all addresses in libapp.so. 3. Targeted Patch Option at Specific Address: To apply the patch option only at a specific address (e.g., 0x00000001), use:

pptool /path/to/libapp.so 0x12345 -p 0x23456 -t 0x00000001

Here, the parameter (0x23456) passed to the -p option is the offset of the replacement pool pointer and the offset (0x00000001) passed to the -t option is the address to apply the change to. 4. Targeted Patch Option at Multiple Addresses: To apply the patch option only at specific addresses (e.g., 0x00000001 and 0x00000002), use:

pptool /path/to/libapp.so 0x12345 -p 0x23456 -t 0x00000001 0x00000002

The patch will only be applied at addresses 0x00000001 and 0x00000002. 5. Saving Changes: By default, the patched file is saved as libapp_mod.so. To override the original libapp.so file, use the -f option:

pptool /path/to/libapp.so 0x12345 -p 0x23456 -f

pptool /path/to/libapp.so 0x12345 -p 0x23456 -t 0x00000001 -f

pptool /path/to/libapp.so 0x12345 -p 0x23456 -t 0x00000001 0x00000002 -f

━━━━━━━━━━━━━━━━━━━ 👉 Reverse Engineering Obfuscated Flutter Apps: Analyzing with pptool https://t.me/TDOhex/446 ------------------------------------------------ Channel of Kirlif': @SaltSoupGarage Discussion Group of Kirlif': @SaltSoupGarageGroup Guidelines by @TDOhex

Reverse Engineering Flutter: Patching armeabi-v7a App Name: MuscleWiki Version: 2.3.6(307) Play Store Link: https://play.google.com/store/apps/details?id=com.musclewiki.macro Step 01: Dump functions and classes using reFlutter: https://github.com/Impact-I/reFlutter 👉 You can utilize it on your Termux of non-rooted device. Step 02: Go to dump.dart and locate the method named isPremium: {"method_name":"isPremium","offset":"0x0000000000442ff4","library_url":"package:muscle_wiki\/feature\/iap\/repository\/iap_repository.dart","class_name":"IapRepository"} Step 03: Access libapp.so with radare2 and note the offset of _kDartIsolateSnapshotInstruction: 0x005428c0 _kDartIsolateSnapshotInstruction Step 04: Combine the offsets of isPremium and _kDartIsolateSnapshotInstruction: 0x5428c0 + 0x442ff4 = 0x9858b4 👉 You can use rax2. rax2 - radare base converter https://book.rada.re/tools/rax2/intro.html Step 05: Navigate to the calculated offset of the isPremium method: 0x9858b4 = isPremium Step 06: Go to offset 0x00985914 and apply the patch: Original instructions: ldr r0, [sl, 0x3c] = false Revised Instructions: ldr r0, [sl, 0x38] = true 👉 For the patch, refer to: https://t.me/TDOhex_Discussion/19429 Step 07 (Extra): Analyze xrefs of the isPremium method: aac @ 0x9858b4 axt @ 0x9858b4 Xrefs of the isPremium method: fcn.00984640 0x984694 [CALL:--x] bl fcn.009858b4 fcn.009d38dc 0x9d3e4c [CALL:--x] bl fcn.009858b4 fcn.00ada3d4 0xada44c [CALL:--x] bl fcn.009858b4 fcn.00c5dba4 0xc5dc38 [CALL:--x] bl fcn.009858b4 fcn.00ca6cd0 0xca6d24 [CALL:--x] bl fcn.009858b4 👉 Flutter Examples to Reach Place to Patch Through revenuecat https://t.me/TDOhex/439 👉 Advanced Guide to Reverse Engineering https://t.me/TDOhex/440 💥💥💥💥💥💥💥💥💥💥 📚 Guide by @TDOhex ♻️ Join us for more Info 💥💥💥💥💥💥💥💥💥💥

Hello Everyone! 👋 🚀 Don't miss out on the fascinating discussions in our group! Join @TDOhex_Discussion now to stay updated on cutting-edge topics. Such as: 1. Exploring how SkuDetails can be used to alter the billing process. Example 01: 👉 How to mod "Nice Mind Map - Mind mapping" https://t.me/TDOhex_Discussion/21441 Example 02: 👉 How to mod "Petralex Hearing Aid App" https://t.me/TDOhex_Discussion/21836 Example 03: 👉 How to mod "Gallery Vault-Hide Photo Video" https://t.me/TDOhex_Discussion/15137 2. Investigating methods to manipulate field references in Flutter. Example: 👉 How to manipulate field values in Flutter https://t.me/TDOhex_Discussion/21874 Join us for these engaging conversations and more! See you there! 🔥 📣 Main Channel: @TDOhex 📱Second Channel: @Android_Patches 💬 Discussion Group: @TDOhex_Discussion

Updated!

How to Bypass SSLPinning and Inspect & rewrite HTTP(S) traffic Without Root Recommended: 👉 How to Run Frida Hooks Through JsHook Without Root https://t.me/TDOhex/432 Requirements: 1. Install ProxyPin from official release: https://github.com/wanghongenpin/network_proxy_flutter/releases 2. Install LsPatch from official release: https://github.com/LSPosed/LSPatch/releases 3. Install JsHook from official release: https://github.com/Xposed-Modules-Repo/me.jsonet.jshook/releases 4. Install Shizuku from official release: https://github.com/RikkaApps/Shizuku/releases 5. Create frida script for SSLUnpinning or download from here: https://github.com/apkunpacker/FridaScripts/blob/main/SSLUnpinning.js Step 1: Run Shizuku. Follow the inbuilt instructions of the Shizuku app. Step 2: Patch your targeted app with module of JsHook using LsPatch. Step 3: Open JsHook, configure your hook and run it. 👉 Video on running JsHook using LsPatch: https://t.me/TDOhex_Discussion/17558 Step 4: Capture packets through ProxyPin and manage them as per your requirements.. Tested on: Crunchyroll, Zadge, Hotstar, KUKU FM, etc... Example of Zedge Premium: https://t.me/TDOhex_Discussion/19051 Telegram Groups to Discuss About ProxyPin: @proxypin_tg @proxypin_en 💥💥💥💥💥💥💥💥💥💥 💡 Tech&Info by @TDOhex ♻️ Join us for more Info 💥💥💥💥💥💥💥💥💥💥