Skip to content

Latest commit

 

History

History
13 lines (8 loc) · 678 Bytes

README.md

File metadata and controls

13 lines (8 loc) · 678 Bytes

Beatsaber quest (il2cpp) modloader/function hooking poc

This just loads mods (.so files) from /sdcard/Android/data/com.beatgames.beatsaber/files/mods/ and includes some examples for function hooking.

Uses https://github.com/ele7enxxh/Android-Inline-Hook + some macros for magic

Follow https://koz.io/using-frida-on-android-without-root/ to learn how to inject the modloader-library into the beatsaber apk (with the so built from this instead of frida) or just use BeatOn.

The function offsets (as well as infos about the structs) can be obtained with il2cppdumper

ndk-build NDK_PROJECT_PATH=. APP_BUILD_SCRIPT=./Android.mk NDK_APPLICATION_MK=./Application.mk