ellekit

A macOS-style arrow cursor for jailbroken iPadOS 17.

A governed privileged AI agent runtime for real iOS devices, focused on safe planning, capability routing, execution, semantic verification, and recovery.

Rootless arm64e TLS trust and certificate-pinning bypass for modern Dopamine/ElleKit iOS research devices

System-wide iOS location spoofing by hooking locationd, so it reaches roothide-blacklisted apps that block tweak injection. Rewrites CLLocation/CLVisit on the daemon's XPC serialization path and defeats sourceInformation.isSimulatedBySoftware.

Per-app hiding of an on-device VPN interface from an iOS app's detection. Sanitizes getifaddrs, CFNetworkCopySystemProxySettings, and the nw_path_* family so a target app never sees the utun/ipsec tunnel, while traffic keeps routing through the VPN. roothide/Dopamine, scoped via a Settings picker.

iOS tweak that neutralizes the AppsFlyer SDK's jailbreak and VPN detection by forcing AppsFlyerUtils's verdict methods to NO. Defeats detection for apps that trust AppsFlyer's state.

Rootless tweak that restores bookmark sync on old iOS Microsoft Edge by clearing the server's minimum-version gate

Hide specific iCloud upsells in Settings on Dopamine rootless iPadOS 17

Use your iPad as a virtual trackpad for Stage Manager external displays.

PoC that overrides RadarSDKFraud isJailbroken() in a controlled test harness to demonstrate the iOS App Attest vs. Play Integrity asymmetry.