iammanpreetsingh / permasigner

🖊 Permanently signs IPAs on jailbroken iDevices (persists on stock).

Permanently sign IPAs on jailbroken iDevices 14.0-14.8.1 (persists on stock)

---

How does it work?

In iOS 14.0-14.8.1, there is a bug where CoreTrust will allow any root certificate. Although the bug exists on iOS 15.0-15.4.1, it can not be abused (yet) since you need to be jailbroken at first to place the app in the /Applications folder. This bug does not exist on anything older than iOS 14.

This script makes a deb file for you based on an IPA. Tested only with Taurine, but should work with many others.

Based on the resign_taurine branch of CoreTrustDemo, please note that certificates are not copyrightable.

Note: unc0ver will probably fail to jailbreak. It works for some people but not everyone.

Prerequsites

1. A computer or jailbroken iDevice with Procursus
   • Mac OS X 10.5.0 (?) or later required.
   • (Basically) any Linux distro is supported.
   • A jailbroken iDevice using the Procursus bootstrap is supported.
2. Jailbroken "target" iDevice on 14.0-14.8.1
   • The device needs to be jailbroken at first to place the app in the /Applications folder. After installing it'll continue working on stock.

Tutorials

• Run Online
• Run in Docker
• Run on iOS
• Run on macOS
• Run on Linux
• Run on Windows

In Progress

View the GitHub Projects board!

Credits

• Linus Henze for the bug
• zhuowei for the original Taurine script
• RexSonic for the fix and a lot of help
• verygenericname for the ldid downloader and support
• superrnovae for contributing lots of fixes and features
• the Procursus Team for the amazing bootstrap and the ldid fork
• Amy for the Procursus with cache GitHub action from the Sileo Git repository
• anyone who sent a pull request or issue! Your contribution helps a lot!

Other Stuff

• Reddit Post