Skip to content

Commit

Permalink
remove mentions of User app installation as those can't work
Browse files Browse the repository at this point in the history
  • Loading branch information
opa334 committed Oct 15, 2022
1 parent d922a82 commit ad00f89
Show file tree
Hide file tree
Showing 5 changed files with 3 additions and 9 deletions.
2 changes: 1 addition & 1 deletion Makefile
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ build_installer15:
@unzip ./Victim/InstallerVictim.ipa -d ./_build/tmp15
@cp ./TrollHelper/.theos/obj/TrollStorePersistenceHelper.app/TrollStorePersistenceHelper ./_build/TrollStorePersistenceHelperToInject
@pwnify set-cpusubtype ./_build/TrollStorePersistenceHelperToInject 1
@ldid -s -K./Victim/victim_gta.p12 ./_build/TrollStorePersistenceHelperToInject
@ldid -s -K./Victim/victim.p12 ./_build/TrollStorePersistenceHelperToInject
APP_PATH=$$(find ./_build/tmp15/Payload -name "*" -depth 1) ; \
APP_NAME=$$(basename $$APP_PATH) ; \
BINARY_NAME=$$(echo "$$APP_NAME" | cut -f 1 -d '.') ; \
Expand Down
10 changes: 2 additions & 8 deletions Victim/README.md
Original file line number Diff line number Diff line change
@@ -1,13 +1,7 @@
# Victim Binary and Cert
# Victim IPA and Cert

In order to support user app installations (works on anything but iOS 14 arm64), TrollStore needs a victim binary that it attaches to any binary installed by it. By default it uses the binary of "Pastebin Mobile", because the dev of that app gave me permission to use that.

In order to compile a pwned TrollInstaller2 IPA, you need to provide a dev cert with the same team ID as your target app in this directory.
In order to compile a pwned TrollHelperOTA arm64 IPA, you need to provide a dev cert with the same team ID as your victim app in this directory.

```bash
./make_cert.sh <TEAM_ID>
```

(Currently victim_gta.p12 is used by the build script, this works for GTA Car Tracker app, to use another app generate a new cert with the team ID and make sure to update the path in build script too)

((Disregard the user app stuff described above, it's not implemented yet, will be in TrollStore 2.0))
Binary file removed Victim/victim
Binary file not shown.
Binary file modified Victim/victim.p12
Binary file not shown.
Binary file removed Victim/victim_gta.p12
Binary file not shown.

0 comments on commit ad00f89

Please sign in to comment.