TrollStore is a IPA installer for iOS 14 - 15

Kuba Pawlakqbap | iOS Apps
TrollStore

When Linus Henze discovered the CoreTrust bug that allows to install IPA files permanently on iOS the jailbreak community released a few tools to make it happen. Now with TrollStore utility by Lars Fröder,you can also sing permanently apps on stock iOS.

Download TrollStore for iOS

What is TrollStore?

TrollStore is an iOS app designed to sign and install IPA files without revokes on iOS 14 and iOS 15. It uses the CoreTrust bypass by Linus Henze and it supports all iDevices running on 14.0 up to 14.8.1 and iOS 15 up to iOS 15.1.1. TrollStore doesn't require jailbreak like PermasigneriOS.

Using the TrollStore for iOS you can install any app permasigned. What's more, it is possible to install apps with otherwise illegal entitlements or ones that bundle a root helper binary, all thanks to the CoreTrust bug discovered by Linus Henze. All features work on stock iOS.

TrollStore future updates should work up to iOS 15.4., but the Installer currently only supports iOS up to 15.1.1 as it uses multicast_bytecopy. When the Fugu15 install method is public, it should be possible to implement it and use it by TrollStore to support iOS 15 up to iOS 15.4.1.

Two iPhone screens showing the TrollStore app interface and Settings page on iOS 14.

To install unsigned IPA files in the background TrollStore uses the ldid package. From App Settings, the developer included two utilities. One to respring the device and one to rebuild the icon cache. There is also an option to uninstall TrollStore app from the system.

When iOS rebuilds the icon cache, all apps installed through TrollStore including itself will disappear from the Home Screen. The only way to have persistence in a rootless environment is to replace a system app. TrollStore allows you to select a system app to replace it with a persistence helper that can be used to refresh icons of the registrations of all TrollStore apps.

To use Persistence Helper go to TrollStore Settings and tap on Install Persistence Helper. Next, select a system app you don't need to use (e.g. Tips) in the list that appears.

Apps installed via the CoreTrust bypass bug will stay signed permanently on your iPhone even after 7-days or after restarting the device. TrollStore delivers for iOS 15 the long-awaited feature to install custom IPA files with ++ hacks without revokes or any free certificate limitations.

Installing IPA files without revokes next to tweaks is one of the most appreciated jailbreak features and now it's available without jailbreak for iOS 14 and iOS 15.

Will opa334 deliver? Yes, he is known in the jailbreak community for various tweaks such as SafariPlus, AltList, Choicy, or CCSupport. The TrollStore tool for iOS will be released before any iOS 15 jailbreaks, including the mythical Cheyote for iOS 15 - iOS 15.1.1.

TrollStore should work to install permanently all kinds of iOS 14 and iOS 15 apps including iPogo, SpooferX, uYou, AppStore++, Delta, Filza, and many others. Delta Emulator installation progress was included in the final TrollStore tease before release.

TrollStore is packed with an OTA update mechanism. When a new version is released you can download the update directly from the app Settings screen. The app will update everything (including the persistence helper) and automatically respring your iPhone.

For jailbroken devices, you can try IPA Permasigner from Nebula. It's an open-source script based on the original scripts created by zhuowei and CoreTrust bypass by Linus Henze. It's super easy to use and it can also run on macOS, Windows, and Linux thanks to the ldid support.

Unlike Bullfrog Assistant for iOS 16 and jailed devices, TrollStore signs apps permanently on jailbroken devices without using your 7-day revoke-free certificate or the 3 apps limit. This way you can install as many apps as you like on your stock iPhone without limitations.

TrollStore was released as an open-source project with all files published through the official GitHub Repository. The source code is licensed under MIT and you can freely distribute it and modify the code as long as you are familiar with C and Objective-C languages.

How to install on iOS 15

TrollStore can be installed on your iOS 15 device by sideloading the TrollStore Helper IPA. You can do it by using one of your favorite IPA installers such as Sideloadly or AltStore.

Note: A9 devices are not supported by multicast_bytecopy.

Screenshot of Sideloadly app with configuration option to install TrollStore Installer for iOS.

Step 1. Download the TrollStore Installer IPA (link on top of this page).

Step 2. Open Sideloadly application.

Step 3. Connect your iPhone to the computer via USB.

Step 4. Click on the IPA icon to select the app to install.

Step 5. Enter your Apple ID to sign TrollStore Installer IPA file.

Step 6. Click the Start button to install the IPA file on your device.

Step 7. Provide the password for your Apple ID.

Step 8. Open the Settings app and navigate to General → VPN & Device Management.

Step 9. Click on the developer app with your e-mail.

Step 10. Tap on Trust to allow the application to run.

Two iPhone screens showing the TroleStore Helper installed on iOS and app interface.

Step 11. Open the TrollStore Installer app from Home Screen.

Step 12. Tap on the Install TrollStore button.

Step 13. An alert should pop up when TrollStore is installed successfully.

Step 14. Tap on "Install ldid" from app Settings to allow TrollStore to install unsigned apps.

If TrollStore app is not available on the Home Screen reboot the device and it should appear afterward. If installed on a jailbroken device respring and the app icon will be available. From TrollStore Settings install the Persistence Helper to refresh icon cache for apps.

Installation on iOS 15.2 up to iOS 15.5b4

It's also possible to install the TrollStore app on iOS 15.2 up to iOS 15.5b4 using the checkm8 exploit. This method is for advanced users only and it requires Linux or macOS. It will create and boot an SSH ramdisk on checkm8 supported devices (A7-A11) and install the TrollStore app.

Screenshot of installation process of TrollStore for iOS 15.2 up to iOS 15.4.1.

This is an unofficial way to install TrollStore on iOS 15.2 up to iOS 15.5b4 which is not supported by the developer. It's probably used also to install the Fugu15 Jailbreak.

Step 1. Install libimobiledevice on your Linux or Mac through brew. This library is required to connect your iPhone through USB to the computer.

brew install libimobiledevice

or on Linux distribution:

sudo apt install libimobiledevice-utils libusbmuxd-tools

Step 2. Clone the SSHRD_Script repo from GitHub. It is used to exploit iOS system and install the TrollStore app. Next cd into this repository.

git clone https://github.com/verygenericname/SSHRD_Script --recursive && cd SSHRD_Script

Step 4. Execute the script from the command line including a URL to the latest iOS firmware for your device. After the IPSW URL insert the extra argument "TrollStore" to install the app and provide an uninstallable system app to use such as "Tips".

./sshrd.sh https://updates.cdn-apple.com/2022SummerFCS/fullrestores/012-53076/DAD300FD-EA55-4458-AA3 E-6BA875C4B3A1/iPhone_4.0_64bit_15.6.1_19G82_Restore.ipsw TrollStore Tips

Step 5. Now it's required to put your iDevice connected through USB to your computer into DFU mode. You must do it manually and the method depends on your device type.

Step 6. After the script SSHRD execution is complete, the device is stopped with a pitch-black screen. Use this command to boot the device.

./sshrd.sh boot

Step 7. When the device boots open from the Home Screen the Tips app. It is used as a placeholder for the TrollStore Installer and once opened it will allow you to install the TrollStore IPA Installer on iOS 15.2 up to iOS 15.5b4. On those versions, the CoreTrust vulnerability exists.

How to install on iOS 14

As for now, the TrollStore app can be installed on iOS 14 only in a jailbroken environment. A future update should allow you to install the permanent IPA installer also for stock iOS 14.

Note: Jailbreak required.

Step 1. Download the TrollHelper DEB package (link on top of this page).

Step 2. Install the DEB file via Filza.

Step 3. Run uicache or respring your iPhone.

Step 4. Open TrollHelper Installer from the Home Screen.

Step 5. Tap the "Install TrollStore" button.

Step 6. After respring the TrollStore app should be on your Home Screen.

Step 7. Open the app and tap on "Install ldid" from TrollStore Settings.

Repository

For making the installation process even easier the developer released TrollStore Installer through the Havoc Repository. Add the official TrollStore Repo to your package manager and install the IPA signing tool on jailbroken iOS 14.0 - 14.8.1. This repo isn't frequently updated.

  1. Open the Cydia app from Home Screen and tap on the Sources tab.
  2. Tap on Edit → Add buttons and enter https://havoc.app Repo URL.
  3. Install the TrollStore package from the newly added repository.
  4. To apply all changes respiring your iPhone.
  5. Access the TrollStore Installer from the Home Screen.

Alternatively, please use the quick links available at the top of this page to add the repository with just one tap to your favorite package manager (Cydia, Sileo, Installer, Zebra).

How to permanently install IPAs

Installing IPA files on iOS through the TrollStore app is pretty straightforward. Once an IPA is loaded into the TrollStore App List it is automatically installed with a permanent certificate.

Screenshot of Finder app on macOS displaying how to upload an IPA on the device.

  1. Download an IPA file you like to install.
  2. Open the Finder app on macOS or iTunes on Windows.
  3. Connect your iPhone to the computer.
  4. Select the new device and open the Files tab.
  5. Drag and drop an IPA file to one of the available apps.
  6. Open Files app on your iPhone and navigate to "On your device".
  7. Select the IPA and send it to the TrollStore app.
  8. Respring your device to apply changes.

Two iPhone screens showing how to install IPA file through TrollStore on iOS.

TrollStore doesn't support the option to import files from iCloud. Instead, you must place the IPA file on your device in the section "On your device" in the Files app. It seems also that iCloud and IPA files above 100 MB may be installed with version 1.0.1 correctly on your iDevice.

AirDrop support with TIPA

When you own a Mac computer it offers the AirDrop feature allowing you to quickly send files between nearby and within Bluetooth and Wi-Fi range devices. Unfortunately, IPA files are not supported by AirDrop but since version 1.1.2 TrollStore offers a workaround with .tipa files.

TIPA is a renamed IPA file extension (e.g. unc0ver.IPA to unc0ver.TIPA),that can be sent through AirDrop on your device and automatically installed by TrollStore.

  1. Open the Finder app on macOS.
  2. Tap the AirDrop button from the favorites section.
  3. Drag and drop the .tipa file on the device you want to share with.
  4. Your iPhone will automatically download the file.

What's new

  • Support opening/installing .tipa files, these are just .ipa files but renamed, unlike .ipa files they can be airdropped to your device.
  • Work around some connectivity issues in TrollHelper and TrollStore on Chinese devices.
  • Fix a bug where an app could not be uninstalled if it doesn't have an Info.plist.
  • Improve app borders, even more, they should look like the ones in App Store now.
  • Fix an issue where apps with wrong icon sizes would appear incorrectly in TrollStore.
  • Fix incorrect icon sizes on iPads.
  • Improve uicache implementation a bit (should not bring any notable improvements though).
  • When a new update is available, it will now show in app settings.
  • Improve app list in apps tab (icons, versions, bundle identifiers).
  • Don't resign an app when the main binary is already signed with a fake root certificate.
  • Improve entitlement dumping by using a system API.
  • Installed apps should now get notification permissions.
  • Fix (un)installation of apps with weird file permissions (e.g. unc0ver).
  • Fix installing IPAs that are on iCloud Drive.
  • Entitlement dumping no longer needs ldid installed.
  • Use ldid -s flag instead of -S -M.
  • Add "Uninstall TrollStore" option to persistence helper.
  • Support for more iPads.
  • Added support for large IPA files (100 MB+).
  • Show detailed errors when an app install fails.
  • Updated TrollInstaller to support non-A15 devices.
  • Fixed installation issue for iOS 14.

Post a comment