arm64x / SatellaJailed

A jailed in-app purchase cracker for iOS 12.2-15.6

Satella Jailed

For, um, educational purposes only or something. Definitely don't use this to pirate in-app purchases in apps to which you don't have legal rights.

A modern in-app purchase cracker built for sideloaded applications, especially on unjailbroken devices. If you want to crack in-app purchases on jailbroken devices, including for sideloaded apps, try Satella 2

Script Method

1. Obtain a decrypted .ipa of your target app
2. Clone this repo to your PC
3. Run the patch.sh script. Optional arguments are:
   • -v for version, i.e., 15
   • -i for input, i.e., App.ipa
   • -o for output, i.e., App_Satella
4. Sideload the patched .ipa

Manual Method

1. Obtain a decrypted .ipa of your target app
2. Clone this repo to your PC
3. Extract the Orion zip for your iOS version
4. Move Emilia directory to Orion.framework
5. Inject Satella.dylib and Orion.framework into the target .ipa
6. Ensure that Orion.framework and CydiaSubstrate.framework are located in @executable_path/Frameworks
7. Ensure that the load commands for Orion.framework/Orion and Satella.dylib use @executable_path/Frameworks instead of /Library/Frameworks
8. Sideload the patched .ipa

E-Sign Method

1. Obtain a decrypted .ipa of your target app
2. Download the .zip of this repo and open in E-Sign
3. Unzip your desired Orion .zip
4. Move Emilia directory to Orion.framework
5. In Signature -> More Settings, import Orion.framework, Satella.dylib, and CydiaSubstrate.framework
6. Sign and install the patched .ipa

AppDB Method

1. Link your device to AppDB
2. Enable the in-app purchase patch
3. Install an app that has in-app purchases

Now you can make fake purchases without a jailbreak! Just attempt to purchase something and cancel on the popup.

You can also access Satella Jailed’s preferences by long-pressing with two fingers inside an app if you are on iOS 13 or higher.

The configurable options are:

• Emilia chibi: SwiftUI is fun
• Little x in the corner: Close the preferences. You can also swipe down from the top
• Enabled: Just what it says on the tin :p
• Receipt: Spoof receipts for purchases. This works well on iOS 12-13, not so much on 14-15.
• Observer: Replace the app’s transaction observer with a hacked one. Fixes some apps, breaks others.
• RevenueCat: Hack apps using the RevenueCat framework for purchases and subscriptions.
• Touches: The number of fingers required to activate the preferences, per request. Default is two, maximum is five.
• Apply: Press this to apply whatever prefs changes you make. This closes the app— it’s intended behaviour, not a crash. Just open the app again.