frida-flutterproxy

A Frida script for intercepting traffic on Android, iOS Flutter applications (arm64, x86_64)
Tested on a few flutter apps (e.g., Google Ads, Naver Blog, Naver Knowledge iN, 삼쩜삼, BMW, Nubank(Android), Universal Studios hollywood, Demaecan(Android), Alibaba.com)
What does this script do? memory scan and hook some functions. check my blog post!

Usage

You don't need to configure iptables for Android or OpenVPN for iOS. Just follow the steps below.

1. Set up burp invisible proxy on the host machine

2. Specifiy burp ip and port on the script
At the very end of the script.js, specifiy BURP_PROXY_IP and BURP_PROXY_PORT

3. Attach
frida -Uf <package name> -l script.js

Contact

• Channel: https://t.me/hackcatml1
  
• Chat: https://t.me/hackcatmlchat

Credits

reflutter
NVISO blog post 1
NVISO blog post 2