Reverse analysis of a Flutter-APP

Google Flutter Capture Packet

Flutter framework

新发布的应用是基于Google的Flutter框架编写,编写语言为Dart。主要判断依据是其APK的Lib文件夹中,存在 libflutter.so、 libapp.so两个关键文件,以此可断定其使用的框架。此框架最大的特点是使用 Dart语言编写一次,可同时生成Android和IOS两个操作系统的应用。

insert image description here
Legend: The location of the packaged so file of Flutter

Use IDA to open the libflutter.so file, search for the ssl_server string in the Strings window, and find the specific reference function through interactive references, as shown below:

Use IDA to open the libflutter.so file, search for the ssl_server string in the Strings window, and find the specific reference function through interactive references, as shown below:

Flutter Capture Packet

This analysis process provides a way to capture packets, which can be ignored. Subsequent data packets can be directly intercepted by dump dart or other methods

Main idea: The Flutter framework cannot intercept data packets through the middleman proxy, and needs to bypass its judgment on certificate binding. via libflut

Guess you like

Origin blog.csdn.net/weixin_38927522/article/details/127638344