Tutoriales Apk
Ir al canal en Telegram
Sin datos
Suscriptores
-1524 horas
+137 días
+12330 días
Archivo de publicaciones
+7
App Name: Sofascore
Version: 25.03.26
⚙️Tool: MT Manager
🔐Keyword:
remove_ads
sorry it's just screenshotby:@sazzzngendah
Application Name:
Note AI v1.0.4
Package Name:
com.hubx.noteai
Link:
https://play.google.com/store/apps/details?id=com.hubx.noteai
[0x00500000]> 0x00c45fd8
[0x00c45fd8]> wa add x0, x22, 0x20
INFO: Written 4 byte(s) (add x0, x22, 0x20) = wx c0820091 @ 0x00c45fd8
[0x00c45fd8]> 0x00b8c798
[0x00b8c798]> wa add x0, x22, 0x20
INFO: Written 4 byte(s) (add x0, x22, 0x20) = wx c0820091 @ 0x00b8c798
[0x00b8c798]>
Hermes type application
https://play.google.com/store/apps/details?id=cc.relive.reliveapp
search
GetById.*(Reg8:\d+), Reg8:\d+, UInt8:\d+, UInt16:\d+\n.*'isPremium'
replace
LoadConstTrue $1\nLoadConstTrue $1\nLoadConstTrue $1\n
by @MoralesM6614Repost from Tech Modding
App name - https://play.google.com/store/apps/details?id=dev.jacklillie.speak_notes
Entitlementinfo
Flutter
Function - checkispro
By @Suryanshlegend
【Rkpairip remove google pairip full tutorial】by matek.
Root/Non-root, I'm using a non-rooted phone here.
Please allow all file access permission for dualspace/multiapp
//Install RK_Pairip Command (Only need to use this for the first time)
pkg update -y && pkg upgrade -y && pkg install python git && pip install git+https://github.com/TechnoIndian/RK_Pairip.git
//Remove Googlepairip Command (Change '1.apk' to your apk name if you did not name it to 1.apk)
RKPairip -i /storage/emulated/0/MT2/apks/1.apk
I set it to 1.apk to save time, so I don't have to copy the name each time.
Tool list:
Mt manager
Dualspace
*For the lastest google pairip , Rkpairip crash at startup apk , so we have to use Pairip_utility.py manual remove google pairip , Please follow @null44 tutorial to bypass crash
Link:https://t.me/c/2491114515/3992
*I have simplified the install and remove commands to just two commands.
Enjoy and happy modding!☺️How to install HBC-TOOL
➡️ First download the file.
➡️ Go to download location and copy the file path. Ex:
/storage/emulated/0/Download/
➡️ Open Termux and paste the file path there. Ex: cd /storage/emulated/0/Download/
➡️ Now copy the install command and paste it in Termux. Ex: build/install this or install the wheel provided:
pip install --force-reinstall hbctool-0.1.5-96-py3-none-any.whl
🌿 Website: https://github.com/Kirlif/HBC-ToolHermes:
Application Name:
AnonChat v5.27.4
Link:
https://play.google.com/store/apps/details?id=io.anonchat
Package Name:
io.anonchat
ⓘ Search: (Regex)
GetById.*(Reg8:\d+), Reg8:\d+, UInt8:\d+, UInt16:\d+\n.*'hasPremium'
ⓘ Replace:
LoadConstTrue $1\nLoadConstTrue $1\nLoadConstTrue $1\n
Hermes:
Application Name:
AnonChat v5.27.4
Link:
https://play.google.com/store/apps/details?id=io.anonchat
Package Name:
io.anonchat
ⓘ Search: (Regex)
GetById.*(Reg8:\d+), Reg8:\d+, UInt8:\d+, UInt16:\d+\n.*'hasPremium'ⓘ Replace:
LoadConstTrue $1\nLoadConstTrue $1\nLoadConstTrue $1\n
Repost from Dimension of TDO
Bypassing Predefined SSL Pins for Specific Hosts in Android (okhttp3)
We covered detailed steps to bypass SSL pinning in Android apps in our last two posts.
👉 How to Bypass SSL Pinning on Non-Rooted Devices
https://t.me/TDOhex/478
👉 How to Bypass SSL Pinning on Non-Rooted Devices Using VPhoneOS
https://t.me/TDOhex/477
However, custom implementations often require manual handling, so in this post we’ll discuss those very techniques.
How okhttp3 Pins Certificate
There are several ways to configure pins, but here we’ll use an okhttp3 example. In okhttp3, pins for specific hosts are set up like this:
CertificatePinner pinner = new CertificatePinner.Builder()
// SHA‑256 hashes for example.com (current + backup)
.add("example.com",
"sha256/YLh1dUR9y6Kja30RrAn7JKnbQG/uEtLMkBgFF2Fuihg=",
"sha256/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=")
// Wildcard pin for subdomains (SHA‑256 only)
.add("*.api.example.com",
"sha256/BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB=")
.build();
OkHttpClient client = new OkHttpClient.Builder()
.certificatePinner(pinner)
.build();
Here, the CertificatePinner.Builder class is used to configure domain‑specific pins.
Point 1: CertificatePinner.Builder is an inner class of CertificatePinner.
Point 2: The .add() method takes two parameters: first, the host (or wildcard pattern) as a String. Second, one or more pin hashes as an array of Strings.
Point 3: During the TLS handshake, the check() and check$okhttp() methods of CertificatePinner validate the server’s certificate chain. If validation fails, an SSLPeerUnverifiedException is thrown—you’ll recognize it in Smali as Ljavax/net/ssl/SSLPeerUnverifiedException;.
Point 4:
* check() takes two parameters: a String and a List.
* check$okhttp() also takes two parameters: a String and a kotlin.jvm.functions.Function0 (Smali signature: Ljava/lang/String;Lkotlin/jvm/functions/Function0;).
Hooking Pins Validation
If you remove or patch out the code in these methods (check,check$okhttp), pinning validation is effectively disabled—a simple workaround.
If the app is obfuscated, first identify the host that’s causing the TLS handshake error. Then apply the points above to locate the correct classes and methods. Once you find the inner class for CertificatePinner, you’ll also find its enclosing class—and thus the obfuscated check() and check$okhttp() methods.
Overriding Pins with ProxyPin
Rather than just disable pinning, you can override the existing pins by adding your own (e.g. ProxyPin). The .add() method’s documentation lists four requirements for pins:
1. They must encode the certificate’s public key information.
2. They must be in SHA‑1 or SHA‑256 digest form.
3. They must be Base64‑encoded.
4. They must be prefixed with sha1/ or sha256/.
Keeping these rules in mind, we extract both the SHA‑1 and SHA‑256 hashes from the ProxyPin certificate. We choose ProxyPin because it’s free, open‑source, and works on non‑rooted Android devices.
Command to extract SHA‑256:
openssl x509 -in /storage/emulated/0/Download/ProxyPinCA.crt -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64
Result (with prefix):
sha256/GfB6ZlY1jVATHuHD9H9FW/NYhPoHU1QGg0rGV/C+2u4=SHA‑1 extraction:
openssl x509 -in /storage/emulated/0/Download/ProxyPinCA.crt -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha1 -binary | openssl enc -base64
Result (with prefix):
sha1/k1B+6mxfEO7tDT8N+e3ddHi/S0g=Once you have these hashes, you can analyze and override the existing pins—wherever they reside (libraries, resources, or DEX files). Note: We have used these methods on many banking, OTT, and other apps. However, apologies, due to Telegram's rules, we cannot provide practical examples for this. If you become familiar with Matrix, let us know. We can have open discussions there. ━━━━━━━━━━━━━━━ 📣 Main Channel: @TDOhex 📱Second Channel: @Android_Patches 💬 Discussion Group: @TDOhex_Discussion ━━━━━━━━━━━━━━━
☛ How To Change String In Flutter
Sting To Hex Converter
☍ Language: Sasta Hindi
모 Tutorial By: ⏤͟͟͞͞ 𝐌ʀ. 𝐍ᴏ𝐎𝐁 🥀
<\> How To add online device based password dialog
<\>Tutorial By: @alii_0x1
<\> Source: @AdvanceMT
<\> Required Files: Click Her @Modding_Resource Channel
<\> GIVE REACTION GUYS
♡ ㅤ ⎙ㅤ ⌲
Picasso OTT Mod 🔥 #LATEST
GP Link - https://play.google.com/store/apps/details?id=com.offshore.picasso
Keyword:-
issubscribe
Credit:- ⏤͟͟͞͞ 𝐌ʀ. 𝐍ᴏ𝐎𝐁 🥀GLITTER WALLPAPER 🔥 #LATEST
GP Link - https://play.google.com/store/apps/details?id=com.glitter.sparkle.diamond.wallpapers.backgrounds.uhd4k
Keyword:-
key_subs_remove_ads
Credit:- ⏤͟͟͞͞ 𝐌ʀ. 𝐍ᴏ𝐎𝐁 🥀WPS WPA TESTER 🔥 #LATEST
GP Link - https://play.google.com/store/apps/details?id=com.tester.wpswpatester
ClassDex:-
SettingsNewActivity
Credit:- ⏤͟͟͞͞ 𝐌ʀ. 𝐍ᴏ𝐎𝐁 🥀AZ SCREEN RECORDER 🔥 #LATEST
GP Link - https://play.google.com/store/apps/details?id=com.hecorat.screenrecorder.free
Keyword:-
fragment_code
Credit:- ⏤͟͟͞͞ 𝐌ʀ. 𝐍ᴏ𝐎𝐁 🥀App:ChatBox AI 1.55.8
Link:https://play.google.com/store/apps/details?id=chatgpt.ai.chatbot.open.chat.gpt.bot.writer.assistant
Type:Smali
Keyword:premium
Tips:Enum replace
First, compare whether the fields for writing and reading in the free plan and premium plan are the same. If they are the same, we just need to modify that specific letter.
All we need to do is locate the place where the free plan is being read and assign it to the premium plan. That way, it's done!
Modded by Matek.
has_active_purchase
METHODO / STRINGS
.registers 4
iget-object v0, p0, Lt5/c;->a:Landroid/content/SharedPreferences;
const-string v1, "has_active_purchase"
const/4 v2, 0x0
invoke-interface {v0, v1, v2}, Landroid/content/SharedPreferences;->getBoolean(Ljava/lang/String;Z)Z
Const/4 v0, 0x1
return v0
.end method
https://play.google.com/store/apps/details?id=phone.speedup.cleanup+1
All apps from this developer share the same keyword:
key_subscription_status_new
Keep in mind that other apps from this developer are protected with Google加固, so it's important to consider this when modifying them.