IOS免越狱、免巨魔修改定位 大佬搞的，可用于各种打卡定位～ https://github.com/FFF686868/proxypin-wloc-spoofer… 自签用这个，仅支持IOS 17.4及以上 https://github.com/StephenDev0/StikDebug…

FFF686868/proxypin-wloc-spoofer

Source: https://github.com/FFF686868/proxypin-wloc-spoofer

ProxyPin WLOC Response Rewriter

中文文档 · English

ProxyPin script for authorized iOS location testing. It intercepts Apple WLOC responses for gs-loc-cn.apple.com/clls/wloc and gs-loc.apple.com/clls/wloc, then rewrites latitude/longitude values inside the original binary response.

This is not an Apple CVE, not a remote exploit, and not an iOS permission bypass. It only works on a device where the user has explicitly installed and trusted the ProxyPin CA certificate and routes traffic through ProxyPin.

Disclaimer

This project is provided for authorized testing, research, and QA use only.

By using this code, you agree that:

• You will only test devices, apps, accounts, and networks you own or have explicit permission to test.
• You are responsible for complying with local laws, platform rules, and service terms.
• The authors are not responsible for misuse, service abuse, account bans, data loss, legal consequences, or any other damage caused by this code.
• This project is provided “as is”, without warranty of any kind.

Do not use this project to deceive services, bypass rules, falsify production location data, or interfere with devices or networks without permission.

What It Does

• Preserves the original binary WLOC request body.
• Handles gzip-compressed Apple WLOC responses.
• Rewrites location fields in the original protobuf-like WLOC payload.
• Returns debug headers such as X-WLOC-ProxyPin, X-WLOC-Patched-Locations, and X-WLOC-Error.

Requirements

This repository is only a JavaScript script for ProxyPin. It is not a standalone app, proxy server, or iOS profile.

You need:

• ProxyPin with script support.
• An iOS test device.
• ProxyPin CA installed and trusted on that device.
• HTTPS capture enabled in ProxyPin.

Files

• proxypin_wloc_compat_v2.js: ProxyPin JavaScript script.
• LICENSE: MIT license for this project.
• NOTICE: Third-party notice for pako.

Usage

Use the script locally in ProxyPin. Do not rely on a remote script URL.

Chinese step-by-step tutorial with screenshots: ProxyPin WLOC tutorial.

1. Open proxypin_wloc_compat_v2.js.
2. Copy the full script content.
3. In ProxyPin, create a new local script.
4. Match these URLs:
   • gs-loc-cn.apple.com/clls/wloc
   • gs-loc.apple.com/clls/wloc
5. Paste the script into ProxyPin.
6. Edit the target coordinates in the pasted local script.
7. Install and trust the ProxyPin CA certificate on the iOS test device.
8. Enable HTTPS capture in ProxyPin.
9. Trigger location on the test device.

The script is working when the intercepted WLOC response contains headers like:

X-WLOC-ProxyPin: v5.3.0
X-WLOC-Origin-Status: 200
X-WLOC-Patched-Locations: 1

If X-WLOC-Origin-Status is 400, the Apple server rejected the original request before the response could be rewritten.

Change Coordinates

Edit these constants in the local ProxyPin script:

var TARGET_LONGITUDE = 113.94114;
var TARGET_LATITUDE = 22.544577;
var TARGET_ACCURACY = 25;

Scope

This project is intended for:

• Authorized device testing.
• QA workflows that need repeatable iOS network-location behavior.
• Security research in a controlled local proxy environment.

Notes

This modifies Apple network-location WLOC responses. It does not directly modify GPS hardware readings, and iOS may prefer real GPS when GPS signal is strong.

References

• ProxyPin project: https://github.com/wanghongenpin/proxypin
• ProxyPin script documentation: https://github.com/wanghongenpin/proxypin/wiki/Script
• pako gzip library: https://github.com/nodeca/pako