-
released this
2026-11-10 07:52:43 +00:00 | 1 commits to main since this releasePocket Poster 3.3.0
worse_query port for iOS 26.0 – 26.7.2 / 27.0 – 27.2.x.
Changes
- Replaced bad_query with forcequitOS/worse_query (App Group based sandbox escape)
- App Group is read dynamically from the code signature entitlements
- On-device container discovery via fsgetpath/pathleak (no PC required)
- iOS 27 system container lookup under
/var/containers/Data/System - PosterBoard descriptor and CarPlay wallpaper writes go through worse_query
- Legacy bad_query fallback on iOS 26
- Full respring via Frontboard + Backboard
- Added
sign_personal.shandPOCKET_POSTER_SELFTEST=1diagnostics
Install
This release contains the unsigned IPA. Sign it with a provisioning profile that includes an App Group (required by worse_query on iOS 27), then sideload it. The App Group is detected at runtime.
Credits
- forcequitOS — worse_query
- leminlimez — original Pocket Poster
- Mak5er — bad_query port / iOS 27 base
Downloads