What is this?
A set of MITM rewrite modules for proxy apps that intercept Apple's location service traffic and rewrite the returned Wi-Fi/cell-tower coordinates, making an iPhone believe it is anywhere in the world without jailbreaking it.
A set of MITM rewrite modules for proxy apps that intercept Apple's location service traffic and rewrite the returned Wi-Fi/cell-tower coordinates, making an iPhone believe it is anywhere in the world without jailbreaking it.Is this a standalone app, or does it run inside another tool?It is not an installable app itself — it is a bundle of rewrite modules (.sgmodule/.lnplugin/.snippet/.stoverride) that load into existing proxy apps: Shadowrocket, Surge, Loon, Quantumult X, and Stash.
It is not an installable app itself — it is a bundle of rewrite modules (.sgmodule/.lnplugin/.snippet/.stoverride) that load into existing proxy apps: Shadowrocket, Surge, Loon, Quantumult X, and Stash.How do I get it running on my iPhone?Turn on HTTPS decryption/MITM in your proxy app, install and fully trust the CA certificate under Settings > General > VPN & Device Management, then import the matching module file, enable it, reconnect the VPN, and toggle Location Services once.
Turn on HTTPS decryption/MITM in your proxy app, install and fully trust the CA certificate under Settings > General > VPN & Device Management, then import the matching module file, enable it, reconnect the VPN, and toggle Location Services once.What do I need to self-host the optional location-picker map tool?The bundled location-picker web app needs Node 24+ for its built-in node:sqlite (still zero npm dependencies), or you can run it via the included Dockerfile, a Cloudflare Worker, or Railway instead.
The bundled location-picker web app needs Node 24+ for its built-in node:sqlite (still zero npm dependencies), or you can run it via the included Dockerfile, a Cloudflare Worker, or Railway instead.Does the spoofed location always take effect right away?On iOS 26/27, locationd aggressively caches your real position in memory, so even a correctly rewritten response can be ignored until you reboot the device; iOS 15-18 usually just needs Location Services toggled off and on.
On iOS 26/27, locationd aggressively caches your real position in memory, so even a correctly rewritten response can be ignored until you reboot the device; iOS 15-18 usually just needs Location Services toggled off and on.How accurate is the spoofed GPS fix?horizontalAccuracy defaults to 39 meters but can be tuned down to 5-15 for a tighter fix; altitude, vertical accuracy, and motion state are left untouched to avoid tripping iOS's own validation.
horizontalAccuracy defaults to 39 meters but can be tuned down to 5-15 for a tighter fix; altitude, vertical accuracy, and motion state are left untouched to avoid tripping iOS's own validation.What is the location-picker tool for?It is an optional web map where you click a spot to set your target coordinates and auto-fetch elevation, then Loon/Shadowrocket pull that location live via a configUrl instead of you editing argument= by hand.
It is an optional web map where you click a spot to set your target coordinates and auto-fetch elevation, then Loon/Shadowrocket pull that location live via a configUrl instead of you editing argument= by hand.Will this work on an old iPhone running iOS 12?Yes - a separate ios-location-spoofer-ios12.sgmodule build avoids BigInt so it runs on iOS 12's older JavaScriptCore engine, used the same way as the regular module.
Yes - a separate ios-location-spoofer-ios12.sgmodule build avoids BigInt so it runs on iOS 12's older JavaScriptCore engine, used the same way as the regular module.What happens if the proxy can't reach the WLOC servers?The failOpen parameter (default true) lets the original Apple response pass through unmodified on error, so location never becomes completely unavailable.
The failOpen parameter (default true) lets the original Apple response pass through unmodified on error, so location never becomes completely unavailable.What are similar projects?warp-masque-actions, mlmvpn_android, CFBox, mhr-cfw, iRingo, gate, brook, CFNext
warp-masque-actions, mlmvpn_android, CFBox, mhr-cfw, iRingo, gate, brook, CFNextWhich topics is it in?quantumultx, mitm, geolocation, cloudflare-workers, cloudflare, agpl, sqlite, proxy, utility, ios, networking, privacy
quantumultx, mitm, geolocation, cloudflare-workers, cloudflare, agpl, sqlite, proxy, utility, ios, networking, privacy