iOS-GPS-Spoofer README

The project's README from github.com/SegFault42/iOS-GPS-Spoofer. As one markdown file: README.md.

iosgpsspoof

Spoof the GPS location of a connected iPhone (iOS 17+) for as long as the tool runs. The fake location is cleared automatically on exit, and re-applied automatically if the device disconnects and reconnects.

Ships as two front-ends over a shared core (SpooferCore):

It drives Apple's developer location-simulation service — the same mechanism Xcode's Product ▸ Scheme ▸ Simulate Location uses. On iOS 17+ that service lives behind the encrypted CoreDevice tunnel, so the actual transport is handled by pymobiledevice3; this tool is the user-facing wrapper (CLI, device selection, the "keep it spoofed while connected" supervision loop, clean teardown).

Download

No build required — grab the DMG from the Releases page:

⬇ Download the latest release

Open the DMG, drag iOS GPS Spoofer to Applications. First launch: right-click ▸ Open (the app is ad-hoc signed, so Gatekeeper asks once). Then prepare your iPhone — see IPHONE-SETUP.md.

Want to build it yourself instead? See Setup / Package as a DMG.

Screenshots

Fixed GPS location

Click a spot on the map (or type coordinates / pick a preset) and the connected iPhone reports that exact location for as long as the tool runs.

Fixed-point mode

The spoofed position as the iPhone itself sees it — Apple Park, the mid-Atlantic, and the Eiffel Tower:

Apple Park North Atlantic Eiffel Tower

Route

Drop waypoints A → B and any points in between, set a duration (h : m : s) or a speed (km/h), and the iPhone moves along the path at constant speed. Optionally loops.

Route mode

Requirements

Setup

./setup.sh          # creates .venv with pymobiledevice3, builds release binary

The binary lands at .build/release/iosgpsspoof. Copy it onto your PATH if you like (cp .build/release/iosgpsspoof /usr/local/bin/). It looks for pymobiledevice3 in ./.venv/bin, then next to the binary, then on $PATH; use --python-path to point at a specific one.

GUI

./run-gui.sh          # or: .build/release/iosgpsspoofer-gui

Stopping is immediate, and cleanup is robust: closing the window / Cmd-Q clears the simulated location; a kill (SIGTERM/SIGINT) still kills the tunnel child; and if the app is ever kill -9'd, the next launch reaps the orphaned pymobiledevice3 process automatically.

Automation: set SPOOF_UDID=<udid> and/or SPOOF_START="lat,lon" in the environment to preselect a device and auto-start spoofing on launch.

Package as a DMG

./package-dmg.sh              # → dist/iOS-GPS-Spoofer-<version>.dmg
./package-dmg.sh --no-venv    # lean build; app expects pymobiledevice3 on PATH

Builds iOS GPS Spoofer.app (generated icon, ad-hoc signed) and a drag-to-install DMG. By default it bundles ./.venv inside the app, so the app finds pymobiledevice3 on its own — it looks for Contents/Resources/venv, then $PYMOBILEDEVICE3, then a .venv beside it, then $PATH.

The bundled venv's Python still references this machine's Homebrew Python, so the default DMG runs on this Mac and Macs with the same brew install [email protected]. For a portable build use --no-venv and have users install pymobiledevice3 themselves. First launch of an ad-hoc-signed app: right-click ▸ Open.

Publishing a release (maintainer):

VERSION=1.0.0 ./package-dmg.sh
gh release create v1.0.0 "dist/iOS-GPS-Spoofer-1.0.0.dmg" \
  --title "v1.0.0" --notes "iOS GPS Spoofer 1.0.0"

The Download link points at releases/latest, so it always resolves to the newest published release.

CLI

# list paired devices
iosgpsspoof list

# spoof to a fixed point (Eiffel Tower). Holds until Ctrl-C, then restores real GPS.
iosgpsspoof spoof 48.8584 2.2945
iosgpsspoof spoof "48.8584,2.2945"          # single-token form also works

# choose a device / link explicitly
iosgpsspoof spoof 37.3349 -122.0090 --udid 00008110-000815C10CD1801E --connection usb

# drive the device along a GPX track, looping forever
iosgpsspoof route ./drive.gpx --loop --timing-randomness 200

# manually clear a simulated location (e.g. if a previous run was killed hard)
iosgpsspoof clear

While spoof / route is running it:

Options (spoof / route)

option default meaning
--udid <id> first device target device
--connection any|usb|network any which link to use / require
--transport native|tunneld|userspace native tunnel mechanism. native = no root (macOS). tunneld needs sudo pymobiledevice3 remote tunneld running. userspace = in-process, no root, slower
--retry-interval <s> 5 delay before re-establishing after a drop
--no-clear-on-exit off keep the fake location after exit
--python-path <path> auto explicit pymobiledevice3 binary

Notes / limitations

iOS-GPS-Spoofer (SegFault42/iOS-GPS-Spoofer)

Searching Database…

What is this?A tool that makes a connected iPhone report a fake GPS location for as long as it runs, restoring the real one automatically when you stop. It drives Apple's developer location-simulation service — the same mechanism Xcode's Simulate Location uses.
Is it a Mac app or a command-line tool?Both, built on a shared core: a SwiftUI macOS app with an auto-detected device list, a click-to-drop map, presets and a live log — plus a CLI with spoof, route, list and clear commands.
Do I need to jailbreak my iPhone or run anything as root?No — on the default native transport the Mac needs no root, as it piggybacks Apple's own remotepairingd tunnel. The iPhone is not jailbroken either: it just needs to be paired & trusted and have Developer Mode enabled.
Will it work with an iPhone on iOS 16?Not with the default native/tunneld transports — those require iOS 17+. For iOS 16 and older, the README points you at pymobiledevice3's developer simulate-location directly over usbmux instead.
Can I run it from Windows or Linux?No — it is macOS-only: the GUI is a SwiftUI Mac app, and even building the tool requires macOS with the Xcode / Swift 6 toolchain.
Does it only pin a fake spot, or can it fake movement?Route mode drops waypoints A → B plus points in between on the map, then moves the iPhone along the path at constant speed — paced by a duration (h:m:s) or a speed in km/h, with optional looping. Waypoints can be reordered and edited while the route runs.
What happens when I stop it or the phone disconnects?Stopping or quitting clears the fake location immediately, and if the phone drops and reconnects the spoof is re-applied automatically. Cleanup survives even kill -9 — the orphaned tunnel process is reaped on next launch — and --no-clear-on-exit keeps the fake spot if you want it to stick.
Why does it need Python and pymobiledevice3?On iOS 17+ Apple's location-simulation service sits behind the encrypted CoreDevice tunnel, which pymobiledevice3 handles; this tool wraps it with device selection, the keep-it-spoofed loop and clean teardown. Note the DMG's bundled venv references the build machine's Homebrew Python — on other Macs use a --no-venv build and install pymobiledevice3 yourself.
How complete is the spoofed location?Only latitude and longitude are faked — altitude, course and speed are not set, same as Xcode's simulate-location. The first run can also take a few seconds while the DeveloperDiskImage mounts and the tunnel is established.
Creator
SegFault42
Size
5.8 MB
Stars
241
Age
1mo
Commits · 90 Days