 iPhone: [HOW TO] Crack Most AppStore Apps with PCM/ClutchPatched (For Beginners)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Chapters

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1. Cracking: Is it Right For You?
2. Resources Required
2.1 PCM (PoedCrackMod) Tutorial
2.2 ClutchPatched Tutorial
3. Uploading the Cracked App
3.1 Deciding Where to Upload
3.2 Copy to Computer and Upload
3.3 Upload Directly From iDevice
4. Sit Back and Relax
5. [NEW] Video Tutorials

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
1. Cracking: Is it Right For You?
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Most crackers have many apps that they own. Like me. I do have many apps. And I love cracking them for people to use. But remember this:

Cracking takes up space!

So always be sure to keep at least 1 gigabyte of unused space. This will also help with speed of the cracking. I would suggest at least a 16 gigabyte iPod at the minimum. I myself own a 64 gigabyte iPod4.

It's a good idea to be very consistent with updates and such. For example, I always check for updates every morning and throughout the day. But you can check whenever you want.

Do these two requirements comply with you? If so, you are ready to be a cracker! If not, that's ok. I would just suggest improving them. But in the meantime, you can still follow this tutorial.

~~~~~~~~~~~~~~~~~~~~~~~
2. Resources Required
~~~~~~~~~~~~~~~~~~~~~~~

When first starting to crack apps, you may be a tad bit confused. I know that I sure was when I started. I used Crackulous and barely understood the blasted thing. But now, you must realize (I hope) that Hackulo, Installous, and AppTrackr are all gone. And this will always be looked upon as the time piracy hit a major bump in the road. But don't fret. There are many other applications out there! A great example is iPASTORE. I myself support the owner (WarLock) and even CrackLords support him. So I love it. It also looks like AppTrackr, so hopefully it will not confuse you much. (see more on applications below)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
2.1 PCM (PoedCrackMod) Tutorial
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

NOTE
PCM will not crack ARMv7s apps. For those apps, I suggest reading ahead to ClutchPatched. This is supposed to be able to crack the ARMv7s protection with ease.

This may be one of the most used scripts out there when it comes to cracking. The issue with this script, is that most people do not like having to install of it's dependencies. But worry not. That is why I am here. To help you get all of the required pieces to get PCM installed and cracking!

INSTALLING PCM:

1. Add the following repository to Cydia:
Quote
http://repo.cracklords.info/
2. After Cydia refreshes packages, install the following packages: GNU Debugger (be sure to use the one for your iOS version), Pod2g's ASLR Tools, and PoedCrackMod. Also search for the following if it does not install automatically with PCM: MobileTerminal and Screen. There may be other dependencies, but they will install automatically if so. (I believe that ldone is a required package, and this is also located on the CrackLords repo)
3. After installing, your device may respring. After this, open iFile (or install it from sinfuliphonerepo via Cydia)
4. Make your way to the directory /usr/bin/ (no 'var' or any of that)
5. Once in the /usr/bin/ directory, you will see many scripts. Do not touch any of these.
6. Locate r25Lr17.sh. I highly reccomend renaming this file. For example, mine is named pcm. Easy to remember. (the .sh is not required for the script to work)
7. Tap on the newly renamed 'pcm' file and press 'Text Viewer'.
8. After opening pcm, scroll down and locate 'PCMcracker=' and add your cracker name. For example, mine is IPASuperior.
9. Next, I suggest changing the 'PCMextras=' to "NO". (this will remove annoying addons)
10. Scroll down some more and look for 'PCMartistfrommeta='. I highly suggest changing this to "NO", unless you want to see the company that made that app in the final IPA.
11. This is optional, but the next option down, 'PCMrealnamemenu=', I use "YES". I do this as to make finding the proper app name is easy. Otherwise, you may be slightly confused when cracking your apps.
12. Now comes the fun part. You are going to set the compression settings. This is ESSENTIAL to having small IPA's. This makes uploading easy, and downloading also easy. You will see 'PCMcompression='. The maximum compression is "-9". That is what I use. It will take longer to crack and package the app, but the final IPA will be MUCH smaller than if you did not use "-9". (see above picture)
13. After changing these settings, you may exit iFile. You can also spend time and choose to change any other settings if you seem fit to do so.

Now that you have installed ALL of the above packages and set up your pcm file, you are ready to begin cracking!

Open the MobileTerminal app found on the springboard of the iDevice.

Type in the following command EXACTLY:

Quote
su root

This will allow you to use MobileTerminal as root, also knows as all-powerful-god mode.

Press return. It will ask for a password. Your default password is:

Quote
alpine

This can be changed later on. (google is your friend here)

After logging in under root, you will be able to crack apps perfectly.

Next, you will type in:

Quote
pcm -m

and press return. (this is why I said to rename it to pcm. That way you don't have to type in the r25Lr17.sh every time you want to crack an app, and the -m will open it menu style so you just have to find the app name and enter in a few characters)

Find the name of the app you wish to crack and look at the set of letters in front of the app's name. (for this tutorial, I will be cracking an app called Where's My Water?. But if you look on my springboard at the app's name, it just says 'Water?'. Using this advanced menu choice (when we entered "YES" at the 'PCMrealnamemenu=') you only have to look for what you remember the app name by. (please note that this will sometimes put the apps in a weird order) But, Where's My Water is a funny application, and does not follow these rules. It will come up as WheresMyWater or something like that.

Type in the letters associated with the app and press return. You are now cracking!! Some apps use ASLR protection, but this is why we installed the ASLR tools.

When you are completely done cracking the app, (may take a long time) you can find the newly made IPA in /var/root/documents/cracked/ via iFile. You will see an 'Lr17' after your cracker name. This is removable by just erasing it. (I know there is a choice somewhere in the PCM script, but I have not had the time to find it)

~~~~~~~~~~~~~~~~~~~~~~~~~~~
2.2 ClutchPatched Tutroial
~~~~~~~~~~~~~~~~~~~~~~~~~~~

ClutchPatched is a unique version of Clutch (an old cracking script) that was modified to work with ARMv7s. FaultyClones actually set out to do this, and if I remember right, ttwj is the person that made this happen.

Remember: Only really use this if you are cracking ARMv7s applications. No, there is not a jailbreak out yet for the iPhone 5, but when there is, this will be the script to use. (unless PCM is updated)

Now, before I start. I do not use ClutchPatched that much. I just know how it works. That is why I am listing it here.

INSTALLING ClutchPatched:

1. Add the following repository to Cydia:
Quote
http://apt.kjcracks.info
2. After Cydia refreshes packages, go to Manage and Sources. Look for a source titled 'FAULTYCLONES Repo'. Tap it.
3. Install a package named 'Clutch'. It may be named weird, (Like MyApplication or some weird thing like that) and I do not know why they have named some of their packages oddly. You will also need to install MobileTerminal and Screen. If there are any other dependencies, Cydia will automatically install those.
4. After installing everything, open the MobileTerminal app and type in:

Quote
su root

It will then proceed to ask you for a password. The default root password is:

Quote
alpine

You may change this at a later date. (google)

5. Now that you have root access, you can proceed with cracking. Type in:
Quote
Clutch
(it has to have the capital C, otherwise it will not load the script) and press return.
6. Clutch will list all of your installed apps. (they might have weird names. Use iFile to find the actual names of your apps)
7. You will then type:
Quote
Clutch
and press 'return'. ClutchPatched is now cracking your app.
8. After cracking, you can use iFile and go to /var/root/documents/cracked/ and find your app there. (note, it will only have the app name then -)
9. After going to the mentioned directory, add your cracker name somehow to the app's title. (I do not know how to customize ClutchPatched, I'm sorry) So, for example, mine would say 'TNT -v306 ~IPASuperior'.