ViRb3/TrustMeAlready

🔓 Disable SSL verification and pinning on Android, system-wide

Java

1,505

16 commits

updated Sep 23, 2019

See the code

README

TrustMeAlready

An Xposed module to disable SSL verification and pinning on Android using the excellent technique provided by Mattia Vinci. The effect is system-wide.

Requirements

An Xposed-compatible hooking system. Some options at time of writing:
- EdXposed (Android 9, Magisk-based and passes SafetyNet)
- 'OG' Xposed (Android 5-8)

Tested

Android 9.0, arm64, EdXposed v0.3.0.0_beta3

Download

Available under Releases or at the Xposed module repository

Troubleshooting

Some apps implement custom certificate checking, bypassing this hook. Try sniffing Chrome traffic, if you don't get an invalid certificate error then this module is working as it should
Check your Xposed logs, chances are this module couldn't hook the correct method

android

bypass

module

pinning

root

ssl

xposed

Significant stargazers

Bing Gao

38 followers · starred Sep 2021

Rine Amakawa

290 followers · starred Jan 2026

Jan S.

69 followers · starred Oct 2019

Evan Goode

81 followers · starred May 2020

Similar repos

Fuzion24/JustTrustMe

An xposed module that disables SSL certificate checking for the purposes of auditing an app with…

5,368

0xCD4/SSL-bypass

SSL bypass check

311

okankurtuluss/FridaBypassKit

Android Universal Anti-Bypass Framework - Root, SSL Pinning, Emulator & Debug Detection Bypass

170

httptoolkit/frida-interception-and-unpinning

Frida scripts to rewrite mobile applications at runtime to directly MitM all HTTPS traffic

2,315

NVISOsecurity/AlwaysTrustUserCerts

A Magisk/KernelSU module that automatically adds user certificates to the system root CA store

2,584

script-or-script/FlutterTap

Zygisk module that intercepts Flutter app traffic — redirects to a proxy and bypasses BoringSSL TLS…

126

LSPosed/CorePatch

Disable signature verification For Android

3,455

kdrag0n/safetynet-fix

Google SafetyNet attestation workarounds for Magisk

6,394