What is lspoof?

LSpoof is an iOS library written in Objective-C that makes any app on your iPhone report a fake GPS location instead of your real one. It does not require jailbreaking the device. Instead, you inject it into a third-party app by embedding the library file into the app bundle before sideloading it onto your phone. Once in place, any location reading that app makes returns the coordinates you choose. The library works by intercepting calls to Apple's CoreLocation system, specifically the CLLocationManager class that iOS apps use to request location data. When an app asks for the current position, LSpoof intercepts that request and returns the coordinates you set, whether the app is using callbacks, synchronous reads, or delegate-based location updates. To control spoofing at runtime, you hold three fingers on the screen for 0.8 seconds. This opens a full-screen map interface with two modes. Static mode lets you search for a place, drag a pin to a specific spot, or type in exact latitude and longitude coordinates, then apply that as your fixed fake location. Route mode lets you set a start point and destination, fetch directions, and then simulate movement along that route at a chosen speed (walking, cycling, or driving pace), with your heading updating in real time as you progress along the path. A bookmarks tab saves frequently used locations for quick access. The library does not intercept all location methods. Swift's newer async location API (iOS 17+), WiFi and IP-based geolocation, and server-side location checks are not affected. It targets the most common CoreLocation patterns used by apps. Building requires the Theos toolchain and targets arm64 devices running iOS 16 and above.