it is done :) [X] Reverse the decryption - August - updated 4 days ago [X] Reverse the encryption - August - updated 4 days ago [X] Reverse the IV generation - 4 days ago [X] Find the hashing function - yesterday [X] Understand the hashing function - today [X] Use the library directly to do hashing - Done [X] Find out what the extra byte does - Done [-] Reverse the hashing function - Not mandatory [-] Need to reverse iOS hash function - Not mandatory [X] Use the iOS hashing function and get correct result - Done!!!!!!! hype hype hype hype [X] Have a successful ping - SUCK IT ITS DONE, WE CAN COME BACK NOW [ ] Integrate into FPM - 24-48H max [ ] See if it works - Right after [ ] ??? [ ] Profit

(edited) elfin got a successful scan, i head home and i start integrating his solution to FPM. so now it's not about bypassing security, it's about applying the new algorithm to FPM's old code. which can be a bit tricky. which is why i'm not saying tonight, I actually have to repay for all the servers and bring everything back online too, zzzzzzzzzzz my wallet gonna hurt haha so now it's just captcha left and htat is "easy" to bypass :smiley: