Help/Support Do Sideloadly exported IPAs only work with Sideloadly?

saulin · July 21, 2022

Hey Guys. Here is an example

Subway Surfers with the iGameGod! Cheat Engine deb. I can Inject the iGameGod! deb to the ipa and sideload it with a free apple id to my phone and it works.

However if I export the modified ipa and try to sign it with a developer cert+profile through a signing service it fails every time to sign it.

I have tried 2 signing tools. SignTools and AppDB and both fail signing the modified ipa. They will sign the unmodified ipa no problem. Does anyone know what causes this and if there is a fix?

I can also include iGameGod! deb to the original IPA with SignTools but it will not load the iGameGod! Cheat Engine. Just the game

Updated July 22, 2022 by saulin

Rook · July 21, 2022

Hey!

Do the services you use say anything? Any error or any additional messages that may help figure out what could be happening?

Additionally, you can also contact them to see if there's something they may need to do on their end to get it working.

saulin · July 21, 2022

The error appdb gives is that the IPA is invalid or something like that. It fails to pass some check

I will post the exact error later, I checked with them and they said. The ipa is corrupted, try another IPA lol

But like I said, it works fine in Sideloadly, but then I'm limited to 3 apps and 7 days using sideloadly

Update. Here is the log I get from appdb

==================================

Command Type
2022-07-21, 3:00:24 PM
Information about device
Command result
2022-07-21, 3:00:26 PM
Failed
Purpose
Installation of Subway Surf via custom developer identity with compatibility checks
Details
Signing error: unable to sign, Application binary is broken
unable to sign, Application binary is broken
Command Type
2022-07-21, 3:00:23 PM
Provisioning installation
Command result
2022-07-21, 3:00:24 PM
Success
Purpose
App installation preflight
Command Type
2022-07-21, 3:00:21 PM
Protection validation
Command result
2022-07-21, 3:00:23 PM
not applicable
Purpose
Revocation protection validation

Also here is their explanation of why it fails lol

As appdb uses official tools to sign files, your app binary is broken and can not be signed with official tools

https://libreddit.domain.glass/r/sideloaded/comments/uhoovp/appdb_invalid_upload_with_ipa_exported_from/

Updated July 21, 2022 by saulin

Hodo · July 22, 2022

It works with anything and I’ve tested that (using apps to codesign ipas from iosgods)

saulin · July 22, 2022

On 7/22/2022 at 6:04 PM, Hodo said:

It works with anything and I’ve tested that (using apps to codesign ipas from iosgods)

Expand

Can You test with Subway Surfers? Inject the iGameGod! Cheat Engine deb and export the ipa with Sideloadly. Then try to sideload it not using Sideloadly. Let me know if it works

Specially if you have a signing service. Try to sideload it with whatever app they use. I tried with AppDB and SignTools and it fails on both. I'm using a cert and provisioning profile from udidregistrations

Updated July 22, 2022 by saulin

Hodo · July 22, 2022

On 7/22/2022 at 6:45 PM, saulin said:

Can You test with Subway Surfers? Inject the iGameGod! Cheat Engine deb and export the ipa with Sideloadly. Then try to sideload it not using Sideloadly. Let me know if it works

Specially if you have a signing service. Try to sidelaod it with whatever app they use. I tried with AppDB and SignTools and it fails on both. I'm using a cert and provisioning profile from udidregistrations

Expand

I used scarlet to codesign. On my iPhone 5c I have the current p12 and mobile provision along with password if you need it. I’m currently away and I don’t have a laptop to test anything on. There already is a pre injected IGG ipa of subway surfers on the jailed app anyways.

Updated July 22, 2022 by Hodo

saulin · July 22, 2022

On 7/22/2022 at 6:48 PM, Hodo said:

I used scarlet to codesign. On my iPhone 5c I have the current p12 and mobile provision along with password if you need it. I’m currently away and I don’t have a laptop to test anything on. There already is a pre injected IGG ipa of subway surfers on the jailed app anyways.

Expand

Scarlet? is that a tool or signing service? So You did use your own profile and it signed and installed fine and the game runs and loads IGG with the app?

For me it only works using sideloadly and I want to sue my provisioning profile as with sideloadly I'm limited to 3 apps

Updated July 22, 2022 by saulin

Hodo · July 22, 2022

On 7/22/2022 at 6:51 PM, saulin said:

Scarlet? is that a tool or signing service? So You did use your own profile and it signed and installed fine and the game runs and loads IGG with the app?

Expand

The website is https://usescarlet.com and it signs through the certificate it is currently signed with. It’s also a 3rd party AppStore tho. I installed stuff like iosgods ipa files and they worked fine with the exception of bundle id’s not being the same (this gives issues with connecting to paid stores). Beware of the ads in scarlet though as it has a lot. Act quick while installing as it has a lot of ads

Updated July 22, 2022 by Hodo

saulin · July 22, 2022

On 7/22/2022 at 6:54 PM, Hodo said:

The website is https://usescarlet.com and it signs through the certificate it is currently signed with. It’s also a 3rd party AppStore tho. I installed stuff like iosgods ipa files and they worked fine with the exception of bundle id’s not being the same (this gives issues with connecting to paid stores). Beware of the ads in scarlet though as it has a lot. Act quick while installing as it has a lot of ads

Expand

Oh Ok well I also have installed another ipas that have pre injected tweaks no problem. My question was why sideloadly can inject a tweak and install the app without problems but if you export the ipa then it won't sign and install with other signing services.

Hodo · July 22, 2022

On 7/22/2022 at 6:58 PM, saulin said:

Oh Ok well I also have installed another ipas that have pre injected tweaks no problem. My question was why sideloadly can inject a tweak and install the app without problems but if you export the ipa then it won't sign and install with other signing services.

Expand

It’s probably an issue with the original ipa itself. It could also be sideloadly being bugged though

Updated July 22, 2022 by Hodo