Building a comprehensive device spoofer for rootless

Hey everyone, HD here!

I've been working on a device info spoofer tweak for rootless jailbreaks (Dopamine/palera1n) and wanted to get some input from the community on implementation details and potential gaps.

What's currently implemented:

• MobileGestalt hooks (MGCopyAnswer, MGCopyAnswerWithError)
• UIDevice properties (name, systemVersion, identifierForVendor)
• CoreTelephony (CTCarrier, IMEI/MEID via CTMobileEquipmentInfo)
• IOKit registry properties
• sysctlbyname / uname hooks
• Keychain filtering for device fingerprint keys
• ASIdentifierManager (advertisingIdentifier)

Questions for the community:

1. What other APIs do apps commonly use for fingerprinting? I've seen mentions of statvfs for filesystem checks and various dyld functions - are these worth hooking?
2. AppleAttestation / DeviceCheck - Has anyone successfully worked around these? I understand they're server-validated but curious if there's any client-side component worth investigating.
3. Canvas/WebGL fingerprinting - Beyond spoofing the User-Agent, are there effective ways to randomize canvas rendering signatures in WKWebView?
4. Recommendations for testing? Any apps or tools that show what device identifiers are being read? What about FLEX?
5. Rootless-specific considerations - Any gotchas when hooking system frameworks on rootless vs rootful?
6. Known detection vectors - What are apps like IG checking that basic spoofing misses?

Appreciate any pointers to resources, other open-source tweaks to reference or reverse, or general advice. Happy to share the source once it's more polished.

Cheers

PM me