Guardsquare / flutter-re-demo

Experiments on the feasibility of Flutter application reverse engineering
144 stars 37 forks source link

How can i get the rebase #2

Open vividmuse opened 2 years ago

vividmuse commented 2 years ago

Use the samples ofbu.apk and the dump_flutter_memory.js i get a error

Spawned fr.carameldunes.nyanyarocket. Resuming main thread! [Pixel::fr.carameldunes.nyanyarocket]-> Hooking libapp: 0x719a311000 SharedPreferences::getInstance() X27: 0x7000600040 Default flutter memory 0x7200000000 seems incoherent with X27 0x7000600040 Please modify FLUTTER_MEM_START, FLUTTER_MEM_END

vividmuse commented 2 years ago

and how can i get SHARED_PREF_GET_INSTANCE_OFFSET?

alexander-pick commented 1 year ago

You can get the SHARED_PREF_GET_INSTANCE_OFFSET by looking at libapp.so in IDA Pro. If you open the arm64-v8a version of the sample you will find a function named SharedPreferences.getInstance() at offset 6D4F88. Lumina will rename the function for you, so it is easy to spot.