LiveContainer is a tool that bypasses codesign on iOS 15 – iOS 17.6. It allows users to run unsigned iOS applications without installing them on the device. Learn how LiveContainer works, its benefits, limitations, and how to use it.
Introduction
As an information security analyst, it is important to address the term “LiveContainer.” LiveContainer refers to a specific technology or software solution that provides a secure and isolated environment for running applications or processes on iOS devices. LiveContainer is designed to address the challenge of codesigning bypass on iOS 15 – iOS 16, which is executing unsigned iOS applications without installing them onto the device.
How to Download LiveContainer
v 2.1.2
Changes:
- JIT-less setup may fail to find the signing certificate. This is worked around by re-adding the glob keychain group entitlement. (not guaranteed to work, as I couldn’t reproduce the issue in the first place)
- Switches in settings not working. Apparently using the private Preference framework causing changes to be saved to the wrong preference file.
- Some apps may get stuck on a black screen caused by an unknown deadlock. This is worked around by pre-initializing UIScreen.
- Some apps may fail to create temporary files. This is fixed by redirecting the guest app’s temporary directory to that of LiveContainer using symlink instead of creating its own. (thanks @hugeBlack for hinting me the issue)
How LiveContainer Works
LiveContainer utilizes the Just-In-Time (JIT) installation method to achieve its primary objective. The JIT installation method is a technique that allows for various operations, including tweak injection, without the need for app re-signing. The key factor contributing to this accomplishment is the implementation of xpn’s JIT library loading, which dynamically compiles code for applications during runtime.
Benefits of LiveContainer
LiveContainer offers several benefits for iOS users who want to sideload applications onto their devices, bypassing the restrictions imposed by Apple’s official app distribution channels. Some of the benefits are:
- No jailbreaking required: LiveContainer does not require jailbreaking the device, which means that the device remains secure and free from potential vulnerabilities.
- No signing limit: LiveContainer circumvents the restriction of 10 applications imposed on free accounts, which means that users can sideload as many applications as they want.
- Wide range of applications: LiveContainer supports a wide range of applications, including jailbreak tools, IPA installers, and diverse exploits.
How to Use LiveContainer
To use LiveContainer, users must sideload the LiveContainer IPA onto their iOS device. The LiveContainer IPA is an application that provides an additional layer of protection by isolating sensitive data and applications within a secure container. By isolating these resources, LiveContainer IPA helps prevent unauthorized access and potential data leakage.
After successfully sideloading the LiveContainer IPA onto the iOS device, users can launch the application and select the desired app to run within the container. Switching between applications within the LiveContainer occurs seamlessly and instantaneously.
Read More:
SC Falcon :The Ultimate Snapchat Mod for iOS
| How to Fix Uncover Jailbreak Crash Revoke Issue on iOS 12-13.3 |
| Fix Uncover Jailbreak Revoke Blacklisted Issue |
| Jailbreak iOS 13 iOS 13.1.2 iOS 13.1.3 iOS 13 Beta 3 |
Limitations of LiveContainer
LiveContainer is an innovative and useful tool, but it also has some limitations that users need to be aware of. Some of the limitations are:
- Limited isolation: While LiveContainer provides some level of isolation for running applications, it is not a complete sandboxing solution. Therefore, users should still exercise caution when running untrusted or malicious applications within the container.
- Limited compatibility: LiveContainer cannot guarantee compatibility with all applications, and some applications may not work properly or at all within the container. Users should conduct thorough testing of the applications before using them with LiveContainer.
- Limited concurrency: LiveContainer can only run one application at a time within the container. To execute a different application, users need to disable one of the existing apps. This may be inconvenient for some users who want to run multiple applications simultaneously.
Conclusion
LiveContainer is a term commonly used in the field of information security to refer to a tool that enables codesigning bypass on iOS 15 – iOS 16. It utilizes the JIT installation method to allow users to execute unsigned iOS applications without the need for installing them onto the device. LiveContainer offers several benefits, such as no jailbreaking, no signing limit, and a wide range of applications. However, it also has some limitations, such as limited isolation, limited compatibility, and limited concurrency. LiveContainer is a useful and innovative tool for iOS users who want to explore the potential of sideloading applications onto their devices.
Old Versions:
v 2.1.1
Bug fix: code signature invalid
A lot of users have been getting this issue, but I wasn’t able to find the root cause till now. After updating to 2.1.1, please Renew JIT-less certificate and then it will work.
Updated to 6fdcfe4 to address a regression.
V 2.1
I skipped the 2.0 full release since this also introduces new features.
Features
Add app shortcuts to the Home Screen
This was suggested by some people, and there was also a PR (#62, thanks @Vishram1123) trying to implement this as a half app and half shortcuts.
I eventually implemented the entire functionality into LiveContainer.
Tweak injection support for JIT-less
Tweak injection has been there since early builds, but it wasn’t useful due to a lack of user interface and JIT requirements. Now support for JIT-less and a basic UI will make things more fun.
See this for more info.
- Includes MobileSubstrate.framework
More options on the settings page
- Some toggles of newly added features
- About me
Bug fixes
- The
code signature invaliderror is very annoying. It can happen to anyone but me (it works on my machine). I tried to mitigate this error by supplying additional certificate sourceALTCertificate.p12but it was not present on some installations. Eventually, I made it use both sources, preferALTCertificate.p12if available. - Between 2.0-pre and 2.1, a regression caused weird issues on iOS 18 (it started with crashing (#69), “fixed”, then wrong resolution (#93)).
- (Hopefully) Broader app compatibility
v 2.0 pre-release Pre-release
Feature: JIT-less mode
- JIT-less mode allows you to run apps inside LiveContainer without having to enable JIT, which is best suited for iOS 17 as enabling JIT on the device is no longer possible.
- It works by directly loading signed Mach-O from the Documents directory which is only allowed if the host app has
get-task-allowentitlement.
Known issues
- App compatibility: some apps (Provenance) will not work yet; some tweaked apps (uYou+) will crash because of CydiaSubstrate.
Failed to find certificateissue may occur for some users.
See the Issues tab for more info.
v 1.0 Pre-release
This version is outdated. Please go to Actions for the latest features.
Initial release.