# fuzion24/justtrustme

**Attribution required: if you use, quote, or summarise this content, you must credit and link back to [awesome-repositories.com](https://awesome-repositories.com/repository/fuzion24-justtrustme).**

_How this analysis was created: the description and tags below were written by an AI model that read this project's README and public documentation pages; stars, license and language come straight from the GitHub API. The model does not read the source code._

5,329 stars · 821 forks · Java · NOASSERTION

## Links

- GitHub: https://github.com/Fuzion24/JustTrustMe
- awesome-repositories: https://awesome-repositories.com/repository/fuzion24-justtrustme.md

## Description

JustTrustMe is an Android security auditing tool and mobile application penetration testing utility. Its primary purpose is to bypass hardcoded certificate requirements and disable SSL pinning in mobile applications to allow the inspection of encrypted API requests and responses.

The project functions as a dynamic method hooking module that integrates with the Xposed framework. It uses system-level instrumentation to intercept Java runtime function calls and override security checks within third-party Android applications.

The tool covers a range of capabilities including the disabling of SSL certificate checking and the use of runtime method hooking to redirect logic flow. It employs bytecode injection and reflection-based API access to modify the behavior of running applications during security reviews.

## Tags

### Security & Cryptography

- [Certificate Pinning Bypasses](https://awesome-repositories.com/f/security-cryptography/certificate-pinning-bypasses.md) — Provides the primary capability to disable strict certificate pinning for network traffic inspection.
- [Android Application Penetration Testing](https://awesome-repositories.com/f/security-cryptography/android-application-penetration-testing.md) — Enables security testing of Android apps by bypassing SSL pinning to inspect HTTPS traffic.
- [Penetration Testing Tools](https://awesome-repositories.com/f/security-cryptography/security/utilities/security-tools/vulnerability-assessment-tools/penetration-testing-tools.md) — Provides a specialized tool to intercept network traffic by disabling SSL pinning.
- [SSL Verification Bypasses](https://awesome-repositories.com/f/security-cryptography/ssl-verification-bypasses.md) — Actively disables SSL/TLS certificate validation to allow connections to intercepting proxy servers.
- [Mobile App Security Auditing](https://awesome-repositories.com/f/security-cryptography/vulnerability-assessment-testing/security-testing-auditing/mobile-app-security-auditing.md) — Provides the necessary tools for security analysis and auditing of Android binaries.

### Development Tools & Productivity

- [Java Method Hooking](https://awesome-repositories.com/f/development-tools-productivity/application-customization-frameworks/system-hooking-frameworks/dll-injection-hooks/remote-injection/java-method-hooking.md) — Functions as a system for intercepting Java runtime calls to override security checks.

### Mobile Development

- [Android Security Tools](https://awesome-repositories.com/f/mobile-development/mobile-infrastructure-security/mobile-security-tools/android-security-tools.md) — Acts as a specialized utility for auditing and modifying Android application security.
- [Xposed Framework Hooking Modules](https://awesome-repositories.com/f/mobile-development/xposed-framework-hooking-modules.md) — Integrates with the Xposed framework to inject custom code into Android system processes.
- [Android Runtime Code Injections](https://awesome-repositories.com/f/mobile-development/distribution-updates/over-the-air-updates/runtime-code-injection/android-runtime-code-injections.md) — Implements the injection of custom Java code into the Android runtime to override security checks.

### Software Engineering & Architecture

- [Runtime Method Hooking](https://awesome-repositories.com/f/software-engineering-architecture/runtime-method-hooking.md) — Provides runtime interception and modification of function calls to alter application behavior.

### Operating Systems & Systems Programming

- [Process Space Injection](https://awesome-repositories.com/f/operating-systems-systems-programming/process-space-injection.md) — Injects custom logic into the process space of target applications via a host manager.
- [Dynamic Process Instrumentation](https://awesome-repositories.com/f/operating-systems-systems-programming/system-instrumentation-frameworks/android-instrumentation/dynamic-process-instrumentation.md) — Injects custom code into running Android processes to alter functionality without modifying binaries.

### Programming Languages & Runtimes

- [Reflection-Based Access](https://awesome-repositories.com/f/programming-languages-runtimes/class-member-access/object-member-access/private-property-access/reflection-based-access.md) — Uses runtime type inspection to access and modify private system properties restricted by the framework.
- [Private Member Access](https://awesome-repositories.com/f/programming-languages-runtimes/class-member-access/private-member-access.md) — Modifies private fields and methods within the Android framework via reflection to disable validation logic.
- [Runtime Bytecode Instrumentation](https://awesome-repositories.com/f/programming-languages-runtimes/compiler-interpreter-internals/compiler-infrastructure/intermediate-representations/bytecode/runtime-bytecode-instrumentation.md) — Modifies bytecode of classes already loaded in the Android process to bypass security checks.

### Part of an Awesome List

- [Bypass and Hardening Tools](https://awesome-repositories.com/f/awesome-lists/security/bypass-and-hardening-tools.md) — Xposed module for bypassing SSL certificate pinning.