ViRb3/TrustMeAlready

Health v2 · maintenance only

Flags: archived no_license

Adoption not part of the score

1508 stars · 191 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

An Xposed module for rooted Android devices that disables SSL certificate verification and pinning system-wide. It hooks Java trust-check methods so all apps accept untrusted certificates, enabling HTTPS traffic inspection.

Use cases

• bypass ssl pinning on android apps
• intercept https traffic from android apps with a proxy
• disable ssl verification system-wide on rooted android
• pentest android app network communication
• sniff app api traffic for reverse engineering

When to choose

• you need a single system-wide SSL bypass instead of patching each APK
• you already run an Xposed-compatible framework like EdXposed or LSPosed on a rooted device
• you want to inspect HTTPS traffic from many apps at once during security testing

When to avoid

• your device is not rooted or lacks an Xposed-compatible hooking framework
• you only need to bypass pinning in one app and prefer repackaging the APK without root
• the target app uses custom certificate checks that bypass standard Java trust hooks
• you need a maintained solution - the last release was in 2019 and newer Android versions may not be supported

Facets

plugin · maturity maintenance

security cryptography reverse-engineering penetration-testing security android-tools penetration-testing reverse-engineering xposed-module ssl-pinning-bypass root mobile-security-testing traffic-interception android

Member repositories

For agents

markdown · JSON · MCP: product_card(name="ViRb3/TrustMeAlready")