You don't need to install any certificates. On an Android device, you don't need root access as well. reFlutter also allows to bypass some of the flutter certificate pinning (https://www.kitploit.com/search/label/Certificate%20Pinning) implementations. Usage on Android The resulting apk must be aligned and signed. I use uber-apk-signer (https://github.com/patrickfav/uber-apk-signer/releases/tag/v1.2.1) java -jar uber-apk-signer.jar --allowResign -a release.RE.apk. To see which code is loaded through DartVM, you need to run the application on the device. reFlutter prints its output in logcat with the reflutter tag impact@f:~$ adb logcat -e reflutter | sed 's/.*DartVM//' >> reflutter.txt code output NavigationInteractor { } Function 'initDeepLinkHandle':. (dynamic) => Future* { } Function '_navigateDeepLink@547106886':. (dynamic, dynamic, {dynamic navigator}) => void { } } Library:'package:anyapp/auth/navigation/AuthAccount.dart' Class: AuthAccount extends Account { PlainNotificationToken* _instance = sentinel; Function 'getAuthToken':. (dynamic, dynamic, dynamic, dynamic) => Future* { } Function 'checkEmail':. (dynamic, dynamic) => Future* { } Function 'validateRestoreCode':. (dynamic, dynamic, dynamic) => Future* { } Function 'sendSmsRestorePassword':. (dynamic, dynamic) => Future* { } }">Library:'package:anyapp/navigation/DeepLinkImpl.dart' Class: Navigation extends Object {

String* DeepUrl = anyapp://evil.com/ ;

Function 'Navigation.': constructor. (dynamic, dynamic, dynamic, dynamic) => NavigationInteractor {

}

Function 'initDeepLinkHandle':. (dynamic) => Future* {

}

Function '_navigateDeepLink@547106886':. (dynamic, dynamic, {dynamic navigator}) => void {

}

}

Library:'package:anyapp/auth/navigation/AuthAccount.dart' Class: AuthAccount extends Account {

PlainNotificationToken* _instance = sentinel;

Function 'getAuthToken':. (dynamic, dynamic, dynamic, dynamic) => Future* {

}

Function 'checkEmail':. (dynamic, dynamic) => Future* {

}< br/>
Function 'validateRestoreCode':. (dynamic, dynamic, dynamic) => Future* {

}

Function 'sendSmsRestorePassword':. (dynamic, dynamic) => Future* {

}
} Usage on iOS Use the IPA file created after the execution of reflutter main.ipa command. To see which code is loaded through DartVM, you need to run the application on the device. reFlutter prints its output in console logs in XCode with the reflutter tag.

___________________________
@hacking_Attack
@Hacking_Video

To Do Display absolute code offset for functions; Extract more strings and fields; Add socket patch; Extend engine support to Debug using Fork and Github Actions; Improve detection of App.framework and libapp.so inside zip archive Build Engine The engines are built using reFlutter (https://github.com/ptswarm/reFlutter/blob/main/.github/workflows/main.yml) in Github Actions (https://github.com/ptswarm/reFlutter/actions) to build the desired version, commits and snapshot hashes are used from this table (https://github.com/ptswarm/reFlutter/blob/main/enginehash.csv). The hash of the snapshot is extracted from storage.googleapis.com/flutter_infra_release/flutter//android-arm64-release/linux-x64.zip release

___________________________
@hacking_Attack
@Hacking_Video

Custom Build If you would like to implement your own patches, manual Flutter code change is supported using specially crafted Docker (https://hub.docker.com/r/ptswarm/reflutter) sudo docker pull ptswarm/reflutter -e COMMIT= --rm -iv${PWD}:/t ptswarm/reflutter FLAGS: -e x64=0 -e arm=0 -e WAIT=300 -e HASH_PATCH=[Snapshot_Hash] -e COMMIT=[Engine_commit] "># Linux, Windows
EXAMPLE BUILD ANDROID ARM64:
sudo docker run -e WAIT=300 -e x64=0 -e arm=0 -e HASH_PATCH= -e COMMIT= --rm -iv${PWD}:/t ptswarm/reflutter

FLAGS:
-e x64=0
-e arm=0
-e WAIT=300
-e HASH_PATCH=[Snapshot_Hash]
-e COMMIT=[Engine _commit]


Download reFlutter (https://github.com/ptswarm/reFlutter)

___________________________
@hacking_Attack
@Hacking_Video

KitPloit - PenTest Tools!
reFlutter - Flutter Reverse Engineering Framework

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
William Marten’s PEN-200 Approach (OSCP 2022, with AD)

Long story short; I will edit this “story” when I am done with the exam. I will do it Jan. 18th. (so.. in a few hours)

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
HOW TO FALL ASLEEP IN NO TIME

https://cdn-images-1.medium.com/max/2600/1*mkEwjZew3vBZePenf8WtgA.jpeg
Having trouble getting to sleep? A natural technique that does not provide any pharmacological help could help you

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Pipe VM Walkthrough

https://cdn-images-1.medium.com/max/897/0*BCy-Rm6qyZstav8O.png
Makineyi indirebilirsiniz.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Get rid of the DELL charger not recognized limitation

https://cdn-images-1.medium.com/max/2600/1*eDL2mf5YP3hnZyIF-CFyMQ.jpeg
Transfer the identification chip from the charger to the computer so any valid chargers could be used.

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Makinede Bir Hayalet:Hacky Crack Yapma

https://cdn-images-1.medium.com/max/1080/1*v52cIG87njyShrG3XZRmBA.png
Sevgili Topluluk, Hacken ekibi sizin için özel bir şey hazırladı. Bu yayının başlığı alışılmadık görünüyor değil mi?

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
Practical malware analysis — Lab 4

https://cdn-images-1.medium.com/max/951/1*_aBE2rQ-PpbXWhqlztJ2bA.png
Guys this blog will be great, with this lab we can learn another technique that bad guys use a lot! They hide files in another file, and…

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video

Hacking on Medium
El mercado más grande de Dark Web para tarjetas de crédito robadas se está cerrando

https://cdn-images-1.medium.com/max/1525/0*CgijJdHwzOkrQFTs
PUBLICADO EN 17 ENERO, 2022POR EHACKING

Continue reading on Medium »

___________________________
@hacking_Attack
@Hacking_Video