Sign an IPA with your Apple ID

Apple requests go through the CORS proxy below, so its operator can see your session tokens and could use them against your developer account (your password itself is not sent in the clear, it is used in an SRP exchange). Use a spare Apple ID, or point this at a proxy you run yourself.

Services

CORS proxy URL ({url} = encoded target) Anisette server

Apple ID

Apple ID Password

IPA

Device UDID (shown by the trust handshake demo) Bundle ID (only needed if it can't be auto-detected) IPA file