Ultimate-Sideloading-Guide

Please use this website

Updates

Make sure to update the WSF Configuration Profile periodically as there are still some changes that need to be ironed out!

Currently working on everything from web changes, custom ESign with no logs, and of course more certificates, which will all be available in roughly 1-2 weeks.

Introduction

Hello and welcome to my guide on how to sideload on Apple Devices!

Some of the advantages with using this method:

Some of the disadvantages with using this method:

I will look into fixing these quirks soon.

If you are hesitant of the WhySooooFurious Configuration Profile, open it up on your PC using Notepad or TextEdit and see what’s inside!

If you have any issues, requests or ideas please make an issue here on GitHub.

How does this method work?

By using leaked business enterprise certificates, We can sign apps using their credentials which means Apple lets us install the apps without any hassle, however after a while Apple revokes the certificate, the WhySooooFurious Configuration Profile redirects and prevents Apple servers from contacting your device about the revoked certificate which let’s you use apps forever.

The WhySooooFurious Configuration Profile redirects specific Apple servers to https://localhost.direct which is a fancy way of saying that it’s your own local network, meaning Apple can never contact your device about the revoked certificates!

Before we start

Compatibility

This should work for all iOS and iPadOS devices on the latest versions. iOS Versions that might not be supported are below iOS 12 and iPadOS 13.

The WSF Configuration Profile is compatible with other sideloading services as long as they rely on enterprise certificates to install.

Feather is also available to download and the steps should be similar as ESign’s.

Follow Part 1 and 2 of my guide to install the WSF Configuration Profile for other sideloaders. You do not need to follow Part 3, 4 and 5 as these install and setup ESign itself.

Ultimate Sideloading Guide

English Tutorial

Spanish Tutorial

Part [1/4] Installing the Configuration Profile

  1. Go down to Downloads and click on the link, then Configuration Profiles and then select the WSF Configuration Profile
  2. Click on Download, and the profile should be imported into settings automatically
  3. Now, open settings and go to General > VPN & Device Management and install the downloaded profile
  4. It should now automatically be enabled, this also installs a Web Clip for easy access to my website
  5. Continue onto Part 2 if you want to install ESign

Part [2/4] Installing ESign

  1. Go down to Downloads and click on the link, then click on Downloads, then ESign and choose any link
  2. Click on install once the popup comes up
  3. Open settings and go to General > VPN & Device Management > (should show the ESign app under the link you picked back in Step 1.)
  4. Click on Trust at the top then click on allow, after this your device might need to be restarted
  5. If your device was restarted, swipe up and click on install profile
  6. ESign should now be on your home screen, fully functional
  7. Continue onto Part 4 to setup ESign

Part [3/4] Setting up ESign

  1. Open ESign and accept the agreements
  2. Go into Settings and click on Get Device UDID
  3. Select allow and then you should be redirected to settings
  4. After opening settings go to General > VPN & Device Management
  5. Install the Query Device UDID profile
  6. You should be redirected back to ESign
  7. Now go down to Downloads, click the link and then go into certificates, download the ESign certificates, and the Certificates should be downloaded
  8. Extract the ESign-Certificates.zip and select the one that corresponds to the ESign app in VPN & Device Management
  9. Go into ESign Settings and click on Import Resources
  10. Find and select the certificate you selected back in Step 8 and click on Import
  11. Now go over to AppStore in ESign and click on App Source
  12. Click on the plus icon and paste in the sources from here, click on add all
  13. You now have setup ESign with all sources ready to install apps
  14. Continue onto Part 4

Part [4/4] Using ESign

  1. Download any app using the AppStore in ESign or you can import your own .ipa using Import Resource in which case you can skip to step 4
  2. Check the download status in the Download tab if downloading from the ESign AppStore
  3. Click on the downloaded IPA and select Import App Library
  4. Your app should now be visible in the Unsigned Apps tab, select unsigned or signed by selecting the bar on top of ESign
  5. Click on the app and select Signature
  6. You can change your app and edit it here
  7. Select Signature and ESign should sign the app using the certificate you selected before
  8. There might be red text saying this certificate is revoked, this is normal! Click on the blue button saying Install, then click Install on the prompt again
  9. The app should be on your homescreen now
  10. Open settings and go to General > VPN & Device Management
  11. Select the app you installed and click on Trust
  12. Click on Allow, after this your device might need to be restarted
  13. If your device was restarted, swipe up and click on Install Profile
  14. The app should now be on your home screen, fully functional
  15. Now read the Post Install Notes carefully

Post Install Notes

Not following the above guidelines will make your apps revoked!

Troubleshooting

Unable to Install? Integrity could not be verified? App is not available?

You need to follow this guide

Downloads

All Downloads!

ESign Sources

My sources for ESign
### source[5GHxhb1U7Lc5jIMpumASbN2teg9dyK5EAazzwnfm1/gPKQPTWzcz/GqmMyJ96qOpN9I+sobaxc2bOxLJOnEOvCBO0SjBJ6XIk8Nf9KYABE+uuJIz/mURnkrtDBfU3E1fll7KWwHfpqaMhGsDUrU4QkmIT9GXsRL9/vfCUhbchV8JfBQt34vbYDiqqN3S7aq/7uAzEJjZ612XcSAUVA/w+sh/P4IMzGEGm+qjRaFc8o7f6ZPd8ZOuYuDjDtdragaeAiyKJFULqYKiB1AaWn216TNZ82DLdbc0N9Yv9Sgp8MSMSbs6uUfEUFsGuH3agxQW4ula1zXOByc3UBM1lFa9aIvockAMoPBptOr436xxZ7KHC9nnQkocKqBUkDtAS730RvUz0fXfivYOqlMW06DDVr/aJPUNCO4PBkp3Ew2yTUghIXNvQiugRHmWnmPAPwbrg1I6Ag82ieW3luXJeBWscne5c0BqC8ppl+e/3SjzHRB9uTT3ql9i/tu8uf5XHed29adH3CXTQAhWbYC4hVZZquM5LZk8Nlj8Vg2c3uI26+Udg2bMOCCxTfZNkKqYXtJIwsW392tlwhYBcvOnmBOuj3Smix3+KA+aUU0oFKe2IugifLNuwlEU/XmPcS5dGPIjWoXhzPDGPcPgC0DgzBuh7N69ZXp0nifSsodrdanPPVEtjCMk5Gu0VE6keph0kQkHblgqzb39rfGYqxgQlxnkxGSE0JsrlxKL5BAdGe13UKE9YuAgzOm156FQAR+KAxT1Sy+jTJiFYIqRnDdxlnFOiigzl99x3iSo74HGvIqzYrPzBSLRMPtSGVNOlHuCtVEgGSWL5JN+urlfv92Lpl5MP4tcWZIlzPuy5Eu3jH3gfbBE0+ll0Z+BdeqlIzYB0KgikhXLsyAVOGVu6Zjalv8sZp5mUaEmU36RhHwOMi1aQxgjA+VjNfsuF2xRiJ8Dr2JHCLo/In8qyezIRATfA94Ea/ONB5E9J53EU67sefIg8rvRVZme03Sb7qolQJB+DEL9REUgbZn7EXvlH0K6A5TlKnnxjzsENcTQZdEQ4MV+BM3Ra7c7EPUV6p08vr9c4fXbf56YcoNI34LNKPxo4xXfnWPbycsxzSHuiAxsWsSSqkI+/Jx6LVWOsK3qKroCjEHVinafTrNYPo4sD3AKP0PJsYlyz8AX7Zx5oAprxy3519UDSXA/vd/FIt/soP/4n6YU5+Pp8CExbUjzmZ/8yFixkPSanlZY1aDBkKJdUj8LDANG0b1g4eEzhnPSocdOzLi3kpQ8baYCn4vQhQy5cW0tJbERYg+Eu9EfvKXvJFilnfsjDmdDQKNOi4KFsDR4zjwr9w2t5deeHHWayuvZ4NHjkVQsb9v929hVnisCCIMGeZaLNlB4utflfpkVP+QWhOVT5js1JFaA+ZcHacR8OaGds9dBLStFiYLfwOmqXxUSckyLyOFRYPIf7GmH1rucvE4k+pzjNhFQGaiUeRLGTM0YeB7HiImo+5V/RfVATX5aPZvbV8mQC2zVIgJxza6mW7f51Gc5YUYvk6j9mGYwQcdTw//4dvtYyYLLaZxciiOoqzVZyAztg74NBwLEGYcBgIjWzw8XxZt9bhi4SBCfde+wI5StPJcf2xy02GNr9okAUUCHc6dQoMbVUI5SrBAuMjs5u84VJ5Dvr6JCxQydZCyE7uKLI65YpDaN2BUIJ46nyymSHREmxOyFa9GL0F3sFm0KoBA5NqPVpNPwjvl8bLb0jugHkdXGPlkQpJVwpTcCKD/v3uLYoMPCzYPuNb8Bh5qa87DvPtdAVw8FezSvZhuPEjrn2ieztjmVa1WolMAEpbYg7cgJVeyfiwR+jyG/IRKu9ErJw5zCtfsZF7qhFxk4fEv9UfHw6pRDrus8W1P2N26/BIaftXSm9H5I1CD7o0iUO1l+oUtgyxWqCzW8iRrLN8AURslsLryYvENiCCwWqZCGfJf2s+m1jm7k6ZSRysZmW1ZnM4Uzx4ss6cvLqL7jqUqqVzVF7pxobsSxi3S80tYPS7VuMmQUeukDYiUZRVhQNKV6nV/Adcb1eBxrGROpEUBhvKjdL1FHqt7zFyTo3DBToeDYgTH5D4nugYxfXdN5fOv0LwITVqebDsD2gGudcBsGKUBthZeu79RUufkR+U98wSOBW3DcKA75PP+kkFVgQtBkyXjnefqIZc0mVfZKJnCKOpdLtqkb4A==]

Questions/Answers

-

Q - Can I use a VPN?

A - You cannot

-

Q - Will a restart bypass this and revoke my apps?

A - Simple answer, No.

-

Q - Will services such as AltStore, Sideloadly and Sidestore affect this guide at all?

A - No, Those listed services use developer signing instead of Enterprise signing so they are fine to use alongside! Although SideStore’s WireGuard is not compatible.

-

Miscellaneous Guides

Revoked?

So you’ve gotten yourself revoked, Follow the methods listed below and you should be unrevoked.

Method 1 should work

Method 2 will completely reset your device and will definitely work

You must not use your backups with Method 2

Method 1

  1. Remove the Configuration Profile and uninstall ESign
  2. Back up your device, here is a guide
  3. After backing up, reset your device, here is a guide, iTunes restore in Recovery Mode or DFU mode is heavily recommended
  4. Now if you have an iCloud backup you should be prompted to restore from your backup after logging in to your Apple ID, if you have a local backup all you need to do is plug your phone in, go on either Finder for macOS or iTunes for Windows and click on restore backup from your device’s menu
  5. Then follow Part 1 of the guide to prevent revokes

Method 2

  1. Remove the Configuration Profile and uninstall ESign
  2. Follow this guide
  3. Then follow Part 1 of the guide to prevent revokes

Using Nugget or Cowabunga

All Configuration Profiles disappear when using Nugget and Cowabunga. This can easily be bypassed by following the steps below.

Fix for macOS:

Only the macOS version of Nugget is compatible with this guide. Not the app itself! You must always follow this guide when wanting to use Nugget and Cowabunga!

Part [1/2] Using Nugget/Cowabunga
  1. Forget all WiFi networks and disable Cellular Networks and put your device in Airplane Mode.
  2. Remove the WSF Configuration Profile you have. You don’t have to delete your installed apps.
  3. Now you can use Nugget or Cowabunga as you please.
  4. Continue onto the Part 2
Part [2/2] Installing the WSF Configuration Profile
  1. Go down to Downloads and click on the link, then Configuration Profiles and then select the WSF Configuration Profile
  2. Click on Download, and the profile should be downloaded to your Downloads folder
  3. Download Apple Configurator from the Mac App Store
  4. Make sure your device is connected to your macOS device
  5. Input your password on your device if it requires it
  6. Find your device, right click and select Add > Profiles
  7. Select the WSF Configuration Profile and then it should be installed and activated automatically

Hall of Fame!

u/Comfortable-Basil-47 For introducing me to the whole method and taking the time to teach me!

@timi2506 For creating wonderful icons for the configuration profile and for making the Nothing app!

Partners

@pollacongafes For the Spanish tutorial!

@Techjunkie_Aman For the English tutorial!