WQFiles & GestaltX for iOS
WQFiles and GestaltX use the worse_query container sandbox escape to browse app data, edit SQLite and plist files in place, and customize MobileGestalt capabilities on iOS 26 and iOS 27 without a jailbreak or kernel exploit.
- WQFiles IPAv0.9.5 (715 KB)November 12, 2026
- GestaltX IPAv1.0.7 (3.56 MB)November 12, 2026
- Supported OSiOS 26.0 – 27.3 Beta 1App Group required
- Ecosystem downloads69,7538,442 GitHub stars
Choose your iOS worse_query IPA package
Direct GitHub Release assets verified on November 12, 2026 (69,753 total downloads across 28 releases).
Container escape, not a jailbreak
Built on forcequitOS/worse_query by Taj C, kolbicz/WQFiles 
opens app containers, system groups, and SQLite databases in place, while huamidev/GestaltX 
provides a dedicated SwiftUI MobileGestalt editor with automatic backups, per-preset revert, and device-verified plist imports 
across iPhone and iPad.
WQFiles container browser, App Backups, and Cache Cleaner
Opens /var/mobile/Containers/Data/Application/*, App Groups, Extension Data, Internal Daemons, and (on iOS 27) /var/containers/Shared/SystemGroup/*. Resolves human-readable app names and icons via LaunchServices in seconds.
In-place Plist, Hex, and SQLite editor with WAL safety
Saves retain the original inode and owner after copying the pre-edit file to Backups. The SQLite editor runs PRAGMA integrity_check on a working copy and empties -wal/-shm files on save so changes are never overwritten.
GestaltX SwiftUI MobileGestalt presets and MG Control
Configures Dynamic Island, Always-On Display, Stage Manager, Charge Limit, Region Code (LL/US, CN, HK, TW, JP, GB), Apple Intelligence flags, .tendies PosterBoard wallpapers, and custom lock screen text with NeoSpring respring.
Runtime App Group entitlement detection across signers
Both WQFiles and GestaltX inspect com.apple.security.application-groups at runtime and use whichever group your signer assigns (AltStore, SideStore, Impactor, or iLoader).
Verify your IPA or ZIP locally
Drop any downloaded .ipa or .zip to compare its SHA-256 digest in your browser against all 28 releases across kolbicz/WQFiles, huamidev/GestaltX, ichitaso/Regitela, murk-sus/kamui-escape, and adnan120hz/WorkTweaks. Zero files leave your device.
Ecosystem by the numbers
Every figure is computed directly from the GitHub Releases and repository metadata of kolbicz/WQFiles, huamidev/GestaltX, forcequitOS/worse_query, ichitaso/Regitela, murk-sus/kamui-escape, and adnan120hz/WorkTweaks as of November 12, 2026.
Combined GitHub Release downloads across 28 verified releases
GitHub stars on huamidev/GestaltX (50,491 IPA/ZIP downloads)
GitHub stars on kolbicz/WQFiles (14,520 IPA downloads across 14 tags)
Built-in UI localizations: 11 languages in WQFiles, 10 locales in GestaltX
MobileContainerManager app-group part-directory symlink route on iOS 26.x & 27.2+
In-place file saves backed up automatically before overwrite or deletion
Release highlights & safety checklist
Key changes in WQFiles v0.9.5 and GestaltX v1.0.7, iOS 26 vs iOS 27 container boundaries, and mandatory MobileGestalt backup steps.
All five worse_query tools compared
Side-by-side comparison of every active open-source iOS 26/27 utility built on forcequitOS/worse_query:
| Project & Repo | Latest | Supported iOS | Primary Capabilities | License | Downloads |
|---|---|---|---|---|---|
WQFiles (kolbicz/WQFiles) | v0.9.5 | iOS 26.0–26.7.2, 27.0–27.3b1 | App/Extension/SystemGroup file manager, App Backups, Cache Cleaner, Plist/Hex/SQLite editor | GPL-3.0 | 14,520 |
GestaltX (huamidev/GestaltX) | v1.0.7 | iOS/iPadOS 27.x (26.x local plist) | SwiftUI MobileGestalt presets, Dynamic Island, AOD, Stage Manager, Region/AI flags, .tendies, MG Control | GPL-3.0 | 50,491 |
Regitela (ichitaso/Regitela) | v1.0.1 | iOS 26.0–26.7.2, 27.0–27.2 | Supervised Mode toggle, 13-country Region switcher, pathleak container finder, 17 languages | GPL-3.0 | 1,689 |
KAMUI (murk-sus/kamui-escape) | v2.5.2 | iOS 26.x, 27.0.1–27.2 | Multi-strategy BQEscape engine, Gestalt presets, Cowabunga/Nugget PosterBoard catalog, MCM Files tab | MIT | 928 |
WorkTweaks (adnan120hz/WorkTweaks) | v3.13 | Build-checked 26.7.2 & 27.0–27.3b1 | 23 MobileGestalt tweaks, Cache Data Cleaner, .deploy package builder, Lock Screen Footnote | AGPL-3.0 | 2,125 |
USB-C Sideloading & Backup Hardware
Initial IPA provisioning with SideStore, AltServer, Impactor, or iLoader requires a stable wired USB data connection, and keeping an off-device copy of com.apple.MobileGestalt.plist and full Finder/iTunes backups protects against bad edits:
| Accessory | Role in IPA Sideloading & Backup | Technical Spec | Link |
|---|---|---|---|
| Anker 240W USB-C to USB-C Data Cable | Wired USB IPA provisioning & pairing file setup | USB-IF certified USB-C data & 240W power cable | View on Amazon |
| Apple 60W USB-C Charge & Sync Cable | Direct MacBook / Windows USB-C sync & DFU restore | Woven 1m USB-C charge and USB 2 data sync cable | View on Amazon |
| SanDisk 1TB Extreme Portable USB-C SSD | Off-device MobileGestalt plist & full iOS backup storage | 1TB NVMe USB-C 3.2 Gen 2 (up to 1050 MB/s read) | View on Amazon |
| UGREEN Revodok 10Gbps USB-C Hub | Connecting iPhone/iPad to USB-C Macs & PCs simultaneously | 10Gbps USB-C & USB-A data ports + 100W PD pass-through | View on Amazon |
As an Amazon Associate, this site earns from qualifying purchases.
Common questions
What is the difference between WQFiles and GestaltX?
WQFiles (kolbicz/WQFiles) is a general-purpose container file manager, app data backup/restore utility, cache cleaner, and in-place Plist/Hex/SQLite editor for iOS 26.0–26.7.2 and iOS 27.x. GestaltX (huamidev/GestaltX) is a dedicated SwiftUI MobileGestalt customization tool for iOS/iPadOS 27.x with one-tap presets (Dynamic Island, Always-On Display, Stage Manager, Charge Limit, Region Code, Apple Intelligence flags), device-bound plist import checks, per-preset revert, and NeoSpring respring. Many users keep both installed.
Why does WQFiles, GestaltX, or Regitela say "No App Group" after sideloading?
The underlying worse_query sandbox escape requests container tokens through your app’s com.apple.security.application-groups entitlement. Desktop Sideloadly and shared wildcard enterprise certificates (App ID *) strip App Groups during signing. Sideload with AltStore, SideStore, Impactor, or iLoader so an App Group is automatically provisioned under your Apple ID.
Does worse_query work on iOS 26 as well as iOS 27?
Yes, with an architectural distinction documented by forcequitOS/worse_query and kolbicz/WQFiles: on iOS 26.0 – 26.7.2, worse_query opens App Data, App Groups, Extension Data, and Internal Daemons, so WQFiles’s file browser, App Backups, Cache Cleaner, and SQLite/Plist editors work, but /var/containers/Shared/SystemGroup/* is unreachable on 26.x. On iOS 27.0 – 27.3 Beta 1, worse_query also reaches SystemGroup, enabling live on-device com.apple.MobileGestalt.plist and Supervision editing.
Is this a jailbreak or kernel exploit?
No. As forcequitOS/worse_query states, this is a userland MobileContainerManager (containermanagerd) sandbox escape that obtains read/write sandbox extensions for MCM containers owned by mobile. It does not grant root privileges, kernel read/write, or arbitrary /var filesystem access outside MCM containers.
How do I prevent a bootloop or display glitch when editing MobileGestalt?
First, export an unmodified backup of com.apple.MobileGestalt.plist to iCloud Drive or your computer before changing any keys. Second, use GestaltX’s built-in presets and per-preset Revert button rather than typing unknown raw keys or wrong value types. Third, avoid spoofing iPadOS mode or unsupported display artwork subtypes on older notch/Dynamic Island screens.
Why did Safari on iOS 27 download a damaged .ipa file?
The GestaltX README notes that Safari on iOS 27 occasionally truncates GitHub Release downloads, causing signers to report a damaged archive. Drop your downloaded file into our local WebCrypto SHA-256 checker above to verify its exact byte count and hash, or re-download using another browser.