packageSpoofer allows you to edit an application's CFBundleIdentifier and resign it to force it to run regardless of a provision profile restricting the app from opening.
packageSpoofer uses plutil to modify the contents of the app's Info.plist to change the app's CFBundleIdentifier, as most provision profiles use the app's package name to block it from opening. Then once the package name is changed, we use codesign to resign the app with the new package name to allow macOS to launch the app.
- Automatically make apps executable with the "Apply binary fix" patch
- Remove frameworks through the app (Beta)
- Change bundle IDs anytime
packageSpoofer GUI edition is able to run on devices with macOS 14.6 or newer. The CLI edition can run on devices with macOS 10.13 or newer and requires an xterm-compatible terminal.
It is impossible to sign applications installed from the App Store without an Xcode identity, which is not possible without Xcode (which requires admin), and installing it will likely not be possible for the target audience of this tool. Most App Store apps are DRM protected (even the free apps) and all App Store apps are all cryptographically locked, using a sealed code directory and hardened by macOS System Integrity Protection (SIP). Basically you're never signing App Store apps with a local signature, at least without Xcode. There will be no plans to support App Store apps or any plans to try to circumvent DRM or other security measures by Apple or third-parties.
When downloading a file from AirDrop or another website or server, the app will likely lose its execution ability when it is installed, making it crash when trying to launch/showing an "access denied" message in the command line. To fix this, make sure to enable "Apply binary patches" in the app. If you need to manually do this, run chmod +x on your app executable (ex: chmod +x ~/Downloads/Steam.app/Contents/MacOS/Steam).