iFlix is Netflix competitor in Asia. Unlike Netflix the security protection is easy to defeat. There are several ways to defeat it, by manipulating the system loop hole or by modifying the JavaScript code. I will show how to defeat the JavaScript code.
iFlix security is the same as Hooq security. The logic to decide if the system should play the video for the current user is in the client browser. So we just need to modify the flag returned by the server call and voila! We can watch free movies.
So here is the part of code that will call a server method to find out if the client browser should play or display sms verification dialog:
From the screenshot above, we just need to change the res.body.verified from false to true twice after that we can watch free movies.
