A Russian developer has published a hack which enables iOS users to get in-app purchases for free, the trick makes use of a "man-in-the-middle" type of attack making the target app believe it is communicating with the real Apple Appstore server instead of the fake appstore.

The hack is working on all devices running iOS 3.0 to 6.0, to get this working all a user needs to do is to install a root certificate and change DNS servers on their devices. A video demonstration of this working is posted after the jump.