w00dl3cs / pogo-tweak

Mobile Substrate tweak to intercept, handle and tamper Pokemon GO data on-the-fly, directly on the device.

PoGO-Tweak

This repository contains a proof-of-concept of a Man-in-the-Middle attack over the official Pokemon GO iOS client: it's a Mobile Substrate tweak which can be used to intercept, handle and tamper data on-the-fly, directly on the device.

Everything is packed inside an XCode project, so you can work from the IDE without additional setups.

Requires a jailbroken iDevice (~~~~unless you side-load the tweak~~~~) and THEOS installed on your machine.

Updates:

• Jan, 4th 2017: First release
• May, 6th 2017: Updated after Niantic's recent attempt to stop MITM attacks ;)
• Aug, 22nd 2017: Updated code and offsets for Pokemon GO v1.39.1

Disclaimer

All the source code on this repository is provided for educational and informational purpose only, and should not be construed as legal advice or as an offer to perform legal services on any subject matter.

The information is not guaranteed to be correct, complete or current.

The author (Alexandro Luongo) makes no warranty (expressed or implied) about the accuracy or reliability of the information at this repository or at any other website to which it is linked.

Features

The source code includes a couple of examples about request/response handling and tampering, but more features can be added inside the Tweak.xm file: follow the comments to understand the operations flow.

Messages coming from the server can be edited without additional setups... messages going to the server ~~~~require a working implementation of the latest hashing algorithm used from Niantic~~~~ too.

References

Project	Link
THEOS	https://github.com/theos/theos
POGOProtos	https://github.com/AeonLucid/POGOProtos
Google Protocol Buffers	https://github.com/google/protobuf

pogo-tweak's Issues

[Help]. Can you tell me how to setup your project

I'm using xcode open your project and click run button then build failure.
Can you tell me step by step to setup your project?

here log:

d: warning: directory not found for option '-L/Users/hoanghung/Library/Developer/Xcode/DerivedData/PoGO-Tweak-aikvinpurxkelfcpnlcgaeksulpm/Build/Products/Debug-iphoneos'
ld: warning: directory not found for option '-F/Users/hoanghung/Library/Developer/Xcode/DerivedData/PoGO-Tweak-aikvinpurxkelfcpnlcgaeksulpm/Build/Products/Debug-iphoneos'
ld: -ios_version_min argument is missing period as second character
clang: error: linker command failed with exit code 1 (use -v to see invocation)

TOUCHR crack not working

Hey man. So I downloaded your crack for the touchr app and it's not working on iOS 10, I went and purchased the developers license, but I can't find a way to get rid of the crack. Tried uninstalling and reinstalling multiple times, tried looking in the file system and cleaned with icleaner. Still says your name next to the license. If you could let me know how to delete it that'd be amazing. Here is my email [email protected]

Obtaining new offsets

Hi, Just wanted to say that this is a very interesting PoC so nice work!

Could you give some details on how one could obtain the updated offsets for the original functions after every new Pokémon GO update?

I'm a newbie . Can you help me fix this issue?

I'm using ios 8.3. I cannot build success on iphone 8.3
Please help me?
Thanks

Here picture.