Permanently sign IPAs on jailbroken iDevices 14.0-14.8.1 (persists on stock)

How does it work?

In iOS 14.0-14.8.1, there is a bug where CoreTrust will allow any root certificate. Although the bug exists on iOS 15.0-15.4.1, it can not be abused (yet) since you need to be jailbroken at first to place the app in the /Applications folder. This bug does not exist on anything older than iOS 14.

This script makes a deb file for you based on an IPA. Tested only with Taurine, but should work with many others.

Based on the resign_taurine branch of CoreTrustDemo, please note that certificates are not copyrightable.

Prerequsites

1. A computer or jailbroken iDevice with Procursus
   • Mac OS X 10.5.0 (?) or later required.
   • (Basically) any Linux distro is supported.
   • A jailbroken iDevice using the Procursus bootstrap is supported.
2. Jailbroken "target" iDevice on 14.0-14.8.1
   • The device needs to be jailbroken at first to place the app in the /Applications folder. After installing it'll continue working on stock.

Tutorials

• Run Online
• Run in Docker
• Run on iOS
• Run on macOS
• Run on Linux
• Run on FreeBSD
• Run on Windows

In Progress

View the GitHub Projects board!

Credits

• Linus Henze for the bug
• zhuowei for the original Taurine script
• RexSonic for the fix and a lot of help
• superrnovae for contributing lots of fixes and features
• verygenericname for the ldid downloader and support
• the Procursus Team for the amazing bootstrap and the ldid fork

Plus, big thanks to all of the contributors that made this project possible.

License

Permasigner is licensed under the BSD-3-Clause license, and can be found here.

Other Stuff

• Reddit Post