The binary is running a proxy (fiddler?) on the windows machine. The iPhone is on the same network and accepts the proxy's self signed certificate which allows the iPhone to trust the proxy. You point the iPhone to the proxy. Start Game - End Game - Zero points. When the POST or whatever API call is sent to the server the proxy (fiddler) modifies the request to whatever _points_ you specified. Then you see the updated score on the app.
To be honest though, shining a light on this terrible company seems to be the main drive of the website and it's a very deserving cause.
Just removed the CA after.
I mean it should be pretty obvious why this is being done for this general type of attack - if you have the necessary level of expertise where it is safe to use a tool like this.
It has the ring of so much malware and exploits masquerading as cheats from my childhood of playing crappy games, and there's little information on the page.
Edit: I watched some of the video, and he wants you to add a new certificate authority... no explanation of how the 'cheating' works.
Edit 2: Looks like I jumped to conclusions too hastily about motives. Still, I found no satisfying explanation anywhere.