Search code examples
iosinstallationhookjailbreak

Install ipa from my server in a jailbroken device with out user interaction

I need to install my application(.ipa) in a jailbroken device with out user interaction.

  • This installation has to be triggered by an other application which is already installed in that device.
  • My .ipa is in a sever, So is it possible to install through itms:// or is there any jailbroken alternative available
  • I want to install this app silently (with out MDM), there should not be "Install" "Cancel" alert popping for the user to select.
  • Let me know if there is a possibility of achieving this through %hook.
Solution

  • Solution to my above question

    Each step below has literally 100 more steps internally. If you are not familiarized with jailbroken apps/tools development, this is going to be a nightmare. Sorry, I cannot share code since I did it for a client. but stack overflow has answers for how to do the various components i mentioned below separately. once you do a little POC on separate components, my answer will help you to put them together.

    This will work only in jailbroken devices and cracked ipa files

    1. Create a daemon application.
    2. make sure it runs 24/7 in background.
    3. To trigger installation from server, add socket.io(or any other similar framework) to the app (since daemon app is running always, make sure the socket connection to the server is also always alive)
    4. Send the URL of zipped ipa file to daemon app via socket.io server.
    5. In the daemon app, unzip the .zip to .ipa
    6. once it is unzipped there are two ways you can install the app.
    7. easy way is to unzip .ipa further to .app and move .app folder to the applications folder in iPhone.
    8. There is a private springboard api, which takes ipa file path as input and installs it

    If you cannot crack the ipa

    This is way more complex than above :) you have to run a code which opens AppStore, Search for the application and install it.

    1. same as above upto step 3
    2. Manually(for POC) record the coordinates of all the button clicks inside AppStore required to install any app in general. like click on search tab at the bottom, select the search bar, insert text in search bar, click on search button, click get/install button from result....
    3. create a dynamic library which takes those coordinates as an input and do a uiautomation. inject this dynamic library into AppStore.
    4. from the server, send this coordinates to your daemon application, which will pass on this coordinates to dynamic library and open AppStore from background.
    5. once AppStore is opened, beauty of dynamic library is, it will kick in automatically and start you ui automation.