admin
4c7d968d49
- Replace bad_query with forcequitOS/worse_query (App Group based) - Read the App Group from the code signature entitlements - Add pathleak container enumeration and iOS 27 system container lookup - Route descriptor/CarPlay writes through worse_query - Add sign_personal.sh and POCKET_POSTER_SELFTEST diagnostics - Keep bad_query as an iOS 26 fallback
3.3 KiB
Pocket Poster
Custom PosterBoard Wallpapers for iOS 17+ · worse_query for iOS 26–27.2
Maintained / iOS 27 port by Mak5er
Download
Latest IPA: Releases
CI builds an unsigned IPA on every push to main and publishes a GitHub Release when you push a tag like v3.2.2 (or run Release IPA from Actions).
# cut a release from your machine
git tag v3.2.2 && git push origin v3.2.2
Getting Started
iOS 26 / 27.2 (worse_query)
On versions where worse_query works (iOS 26.0–26.7.2 and 27.0–27.2.x), no computer is required. The app must be signed with a provisioning profile that contains an App Group — worse_query uses that container to place its symlink and obtain the sandbox extension. Signed IPAs produced with the included sign_personal.sh already carry the profile's App Groups.
- Install the IPA (sideload with your signer of choice; the profile needs an App Group).
- Settings → Detect On-Device (or just hit Apply — hash auto-detects).
- Select tendies / video → Apply → device does a full respring (Frontboard + Backboard).
If no App Group entitlement is present the app reports it explicitly; on iOS 26 the legacy bad_query route is used as a fallback.
Reset Collections wipes PosterBoard descriptors via worse_query, then full resprings the same way.
Older iOS (legacy .Trash exploit)
You will need a computer to get the App Hash/UUID.
Download Nugget on your computer and plug in your phone.
Then, navigate to the Settings page and click the Pocket Poster Helper button.
Inside Pocket Poster, click the Detect button inside of settings.
Community-made wallpapers can be found on the official Cowabun.ga site.
Join the Cowabunga Discord Server for additional help.
Credits
- Mak5er — worse_query integration, iOS 27.2 port, full respring, on-device detect
- LeminLimez — original Pocket Poster
- Translations crowdsourced using POEditor
- PosterRestore for their help with PosterBoard
- dootskyre for the fallback shortcut
- Nathan and DuyKhanhTran for the .Trash exploit
- forcequitOS for worse_query (iOS 26/27 sandbox escape)
- SerStars for creating the website