NVISOsecurity / disable-flutter-tls-verification

A Frida script that disables Flutter's TLS verification
315 stars 54 forks source link

Flutter library found, but ssl_verify_peer_cert could not be found #28

Closed william-beaux closed 1 month ago

william-beaux commented 4 months ago

iOS app - the md5sum b547eba74d755c423d83341d3cb4306a for '/Payload/Runner.app/Frameworks/Flutter.framework/Flutter' is not present in the samples folder.

cloud-jie commented 3 months ago

have the same problem. image image

TheDauntless commented 2 months ago

@william-beaux This app isn't available in my region. Can you upload the decrypted version somewhere?

@cloud-jie Please include the apk file or provide a link.

william-beaux commented 2 months ago

@TheDauntless - attached - looks like BoringSSL updated their library

ipa.zip

cloud-jie commented 2 months ago

Tested, the project can be used:https://github.com/hackcatml/frida-flutterproxy

有同样的问题。 图像 图像

TheDauntless commented 2 months ago

@william-beaux I've added a pattern and it seems to be working on the app (I don't have an IG account to verify but I can intercept the ad requests). Can you verify please?

TheDauntless commented 2 months ago

@cloud-jie If you can share the APK or a URL I can make sure this tool works on your version as well :)

william-beaux commented 2 months ago

@william-beaux I've added a pattern and it seems to be working on the app (I don't have an IG account to verify but I can intercept the ad requests). Can you verify please?

Resolved.