D3fau4 / TrustMeAlready

🔓 Disable SSL verification and pinning on Android, system-wide

TrustMeAlready

An Xposed module to disable SSL verification and pinning on Android using the excellent technique provided by Mattia Vinci. The effect is system-wide.

Requirements

• An Xposed-compatible hooking system.
  • LSPosed (Android 13)

Tested

• Android 13.0, ARM64, LSPosed 1.8.5

Troubleshooting

• Some apps implement custom certificate checking, bypassing this hook. Try sniffing Chrome traffic, if you don't get an invalid certificate error then this module is working as it should
• Check your LSPosed logs, chances are this module couldn't hook the correct method.