virb3 / trustmealready Goto Github PK

🔓 Disable SSL verification and pinning on Android, system-wide

Java 90.28% Shell 9.72%

xposed module android ssl pinning bypass root

trustmealready's Introduction

TrustMeAlready

An Xposed module to disable SSL verification and pinning on Android using the excellent technique provided by Mattia Vinci. The effect is system-wide.

Requirements

An Xposed-compatible hooking system. Some options at time of writing:
- EdXposed (Android 9, Magisk-based and passes SafetyNet)
- 'OG' Xposed (Android 5-8)

Tested

Android 9.0, arm64, EdXposed v0.3.0.0_beta3

Download

Available under Releases or at the Xposed module repository

Troubleshooting

Some apps implement custom certificate checking, bypassing this hook. Try sniffing Chrome traffic, if you don't get an invalid certificate error then this module is working as it should
Check your Xposed logs, chances are this module couldn't hook the correct method

trustmealready's People

Contributors

Stargazers

Watchers

Forkers

d1pakda5 flatl1neapt gavz jayaramyalla rockystevejobs sepyeight bbhunter open-sec shantanu561993 w-x-l xingxingdangkongzhao khanh2990 fengjixuchui alimp5 morristech raslin777 affilares ninovalboskoni neoblackxt alitteration freemanzyq stantoxt fewpiwork dev-bobbie wudidalaofei kingking888 batcom crackercat 5l1v3r1 royz-iwnl blkryd sry309 samoo-7 52funny layman404 jackelchen polling-repo-continua thinks520 jpstotz rushika9 jpacg markojaadam zhuyoucai168 zhang-777 nikithadavid lesiuk zz0813 chinaamerica pesh178 vlinz-git bupthui larack8 jackandli edwardchoijc hiyangyue fairyworld bylheart shitianshiwa ilaotan iconfehu 3vfxvc netstu baihongliang glsakura mild0wl amjiyu htoochonaung caokang returnhere gaopeng20161109 tienquanutc 1509788891 liu913306275 refactor2 sokcuri jeromeyoung betterdefender cc-404 jiangchance ccczone adrianmejiam feilongluo maskertui 1amfine2333 cookiesnob cosimahan zerotimex killman122 gh6324 zhaopufeng woohong666 yyh361274777 zgn16668181478 sanlic woniuqishi vensgth niasand pkcsloye segfault-bilibili eysdo

trustmealready's Issues

Add support for okhttp3

Hi, this method doesn't work on the app i'm trying to bypass the ssl pinning.
is there way for you to add "okhttp3" - support PLEASE?
or make separate module supports "okhttp3 certificate pinner"
there is a old module called : sslUnpinning - it says it support it -but it doesn't work....
since i'm kind of noob to programming - i'm just scratching the surface so many ways without a depth :(. and failing - not lack of trying though...
when i patched the app then recompiled & signed it - after installing it - when i tried to start it - it crashes... also tested it just de-compiled & recompiled without any modification - same issue... - i'm guess some kind of tamper - protection placed on it....
also tried Frida, after injecting the script (it says spawned) then- it immediately crashes....
also tried writing the xposed module myself..... :)) --- probably it would be very laughable for You if you saw how i went about it... so don't even need to mention any further...
Probably this is child play for You since You have a wealth of knowledge.

I'm in great need for module contains similar functions to script below..... Would You please please please help?!

"var CertificatePinner = Java.use('okhttp3.CertificatePinner');
CertificatePinner.check.overload('java.lang.String', 'java.util.List').implementation = function (str) {
console.log('! Intercepted okhttp3: ' + str);
return;
};"

its helpful for some apps to ssl unpinn but so many apps liek snapchat ,instagram ........unable to unpiinn their traffic with help of this

I'm not sure what's the issue but you can have a look at : https://pastebin.com/raw/4dA9tDCb

This is some log of using some module called JustTrustMe : https://pastebin.com/raw/aS6UxTrS
I end up with the app failed to load : https://t.me/fridadotre/40665
This is some fridascript i was having lots of luck with but not with that one : https://pastebin.com/raw/xHT60fb7