Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- This assume you have the following already done and possible:
- Have Mitmproxy setup on computer.
- Have Frida installed on device.
- SSL Unpin on Dokkan (what ever the version that the same)
- Shadow (or jailbreak hider for Dokkan japan)
- A way to handle packet yourself with mitmproxy.
- What this will do :
- Add SSH to the device (change default password for root as it will always be alpine, if that a device that never leave home and you do not care you can skip changing password but for good practice you should)
- Add few shortcuts / commands for SSH (Nimbus)
- Add AutoTouch software (ability to script things like tap here or here launch this or this app)
- Add Activator software (This one is used both by SSH command (home button/lock/unlock and power button.) and autotouch, this software be the one to trigger the script to be launched)
- You will need 3 unused app (in this example I will use 3 app included on ios 13 and more. but can be anything till you know their bundleID (don't use Dokkan as well this example will run dokkan so it would double run the script and make a nice loop ...)
- Okay so let install stuff required :
- Both Activator and OpenSSH are free and can be found on generic Cydia source.
- So install them
- For AutoTouch you need a crack app (except if you wanna pay for it that as you wish.)
- You will need to add a source into Cydia (or sileo if that even work there) to download it :
- Paid version : http://apt.bingner.com/
- Cracked version : http://www.classic.net/
- Add one of these and search for AutoTouch (blue icon with lightblue circle in it like home button icon.)
- Now the trickiest part:
- Installing Nimbus.
- To do that on Device go on that github (or send file in device with FTP or something as you prefer)
- https://github.com/ArtikusHG/nimbus/
- There you will see a file "nimbus"
- Add this file into
- ```/usr/bin/```
- now give it perm 777 (connect into device with SSH with username root and your password (default : alpine) and do chmod 777 /usr/bin/nimbus
- Now in ssh if you do
- ```nimbus help```
- it should show you list of added shortcuts.
- Now we can start the fun :
- We will create our 4 Triggers
- Detect when certain apps is launched (do use these 3 scripts)
- Open Activator.
- Select "Anywhere" menu (top)
- in Anywhere on top right menu tap "Build Events"
- Then Application Launch
- then select your apps that will trigger your script later on.
- Also for one of these App (for me Health)
- Once you have pressed Save to save the trigger get back in Anywhere list and seatch for Launch Your_app
- Assign "lock/unlock" to it
- the rest of lauch trigger will be made for AutoTouch.
- For me that :
- #Health ----> com.apple.Health -----------> lock/unlock device.
- #Shortcuts -> com.apple.shortcuts --------> Dump Dokkan GLB Tokens.
- #Files -----> com.apple.DocumentsApp -----> Dump Dokkan JPN Tokens.
- #Wallet ----> com.apple.Passbook ---------> Dump Dokkan GLB&JPN Tokens
- Now you can close Activator.
- Launch one time AutoTouch and close it
- Now drag and drop these scripts :
- https://www.baoulettes.fr/Uploads/j1jtk65q5pwh2494mhawzg25j.zip
- into your device in this path :
- ```/var/mobile/Library/AutoTouch/Scripts/```
- it should decompress 3 folders
- ```DumpDokkanToken_both.at
- DumpDokkanToken_glb.at
- DumpDokkanToken_jpn.at```
- Now you can open again AutoTouch and see it have your script.
- If you tap on the name of the script you can see it's content
- for example let see what both version do. (I brievly commented it)
- Once you tap it you see twi js files one index and one worker
- The one I modified is worker.
- tape on it to see it's content
- Change Health bundle id if you use another trigger app for Lock/Unlock and this for all 3 script.
- to test a Script go back to AutoTouch Main menu to see your 3 script.
- Press the play arrow and it should instantly launch the game you wanted.
- And do the press for you so in short it should be okay to continue.
- If that do not work properly you may need to tweak usleep delay.
- If that work fine let continue and link the script to app launch.
- in your script list press "i" in circle next to play arrow of your script.
- Select "Playing Settings"
- Then in the next menu select Custom Trigger with Activator
- Now you can select your "Launch YourApp"
- Do that for both your scripts.
- And to check if that working manually launch that app and see how it perform if that perform well you can now use SSH power to launch your app.
- Now to test everything:
- Lock you device for 30s
- Connect to it with SSH
- and send this command :
- ```nimbus powerbutton```
- it should bring it back from sleep mode. if not OpenSSH or Nimbus not properly installed.
- If that work fine you can now use two command to unlock it (I will not make it in one lione so you can see the process)
- ```nimbus powerbutton
- nimbus home```
- This should fully unlock your device from sleep (disable any passcode to do so else that too tricky but you could still make a scrippt that enter the password itself.)
- and now you can launch your app with this command :
- ```nimbus open com.apple.shortcuts```
- Now change the bundle id to what you wish.
- If everything is okay you can create a discord bot or anything to trigger these ssh command for my use I use this discord bot :
- -----------------------------------------------------------------------------------------------------------------------------------
- import os
- import time
- import discord
- import asyncio
- from pexpect import pxssh
- WebHookCID = 111111111111111 #Channel ID
- Discord_BotID = "App -> bot -> token" #something like oeruidRDSfsd.YhQwxA.sdfcc-ssd574541cvs8d <- random.
- SSH_IP = "192.168.1.36" #Device local ip to go in (in cydia both Activator/Nimbus/OpenSSH should be install
- SSH_PSW = "alpine"
- SSH_User = "root"
- #com.apple.Health -----------> Lock/Unlock.
- #com.apple.shortcuts --------> Dump Dokkan GLB Tokens.
- #com.apple.DocumentsApp -----> Dump Dokkan JPN Tokens.
- #com.apple.Passbook ---------> Dump Dokkan GLB&JPN Tokens
- class MyClient(discord.Client):
- async def on_ready(self):
- print('Logged on as', self.user)
- async def on_message(self, message):
- # don't respond to ourselves
- if message.author == self.user:
- return
- if (message.channel.id == WebHookCID):
- if message.content == 'glb':
- await message.channel.send("Loading Dokkan GLB for Token")
- s = pxssh.pxssh()
- s.login (SSH_IP, SSH_User, SSH_PSW)
- s.sendline ('nimbus powerbutton')
- s.sendline ('nimbus home')
- s.sendline ('nimbus open com.apple.shortcuts')
- s.logout()
- s.close()
- await message.channel.send("Your tokens should be there in some seconds. (sleeping for 5 minutes.)")
- time.sleep(300)
- if message.content == 'jpn':
- await message.channel.send("Loading Dokkan JPN for Token")
- s = pxssh.pxssh()
- s.login (SSH_IP, SSH_User, SSH_PSW)
- s.sendline ('nimbus powerbutton')
- s.sendline ('nimbus home')
- s.sendline ('nimbus open com.apple.DocumentsApp')
- s.logout()
- s.close()
- await message.channel.send("Your tokens should be there in some seconds. (sleeping for 5 minutes.)")
- time.sleep(300)
- if message.content == 'both':
- await message.channel.send("Loading Dokkan both version for Token")
- s = pxssh.pxssh()
- s.login (SSH_IP, SSH_User, SSH_PSW)
- s.sendline ('nimbus powerbutton')
- s.sendline ('nimbus home')
- s.sendline ('nimbus open com.apple.Passbook')
- s.logout()
- s.close()
- await message.channel.send("Your tokens should be there in some seconds. (if you need only GLB or JPN token use corresponding commands (glb for Global version and jpn for Japanese version.)) (sleeping for 5 minutes.)")
- time.sleep(300)
- if message.content == 'usage':
- await message.channel.send('Type "glb", "jpn" or "both" to have corresponding Token (Please do not spam, only one request per 5min. if you need both use both else you will have to wait 5 minutes.)')
- print('Starting Dokkan Token Discord Bot')
- client = MyClient()
- client.run(Discord_BotID)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement