Flutter 逆向工程框架

# Linux, Windows, MacOSpip3 install reflutter

impact@f:~$ reflutter main.apk
Please enter your Burp Suite IP: <input_ip>
SnapshotHash: 8ee4ef7a67df9845fba331734198a953The resulting apk file: ./release.RE.apkPlease sign the apk file
Configure Burp Suite proxy server to listen on *:8083Proxy Tab -> Options -> Proxy Listeners -> Edit -> Binding Tab
Then enable invisible proxying in Request Handling TabSupport Invisible Proxying -> true
impact@f:~$ reflutter main.ipa

java -jar uber-apk-signer.jar --allowResign -a release.RE.apk

impact@f:~$ adb logcat -e reflutter | sed 's/.*DartVM//' >> reflutter.txt

Library:'package:anyapp/navigation/DeepLinkImpl.dart' Class: Navigation extends Object {  
String* DeepUrl = anyapp://evil.com/ ;
 Function 'Navigation.': constructor. (dynamic, dynamic, dynamic, dynamic) => NavigationInteractor {                      }     Function 'initDeepLinkHandle':. (dynamic) => Future<void>* {                      }     Function '_navigateDeepLink@547106886':. (dynamic, dynamic, {dynamic navigator}) => void { 
                   }        } Library:'package:anyapp/auth/navigation/AuthAccount.dart' Class: AuthAccount extends Account {
PlainNotificationToken* _instance = sentinel;  Function 'getAuthToken':. (dynamic, dynamic, dynamic, dynamic) => Future<AccessToken*>* { 
                   }   Function 'checkEmail':. (dynamic, dynamic) => Future<bool*>* {                     }
 Function 'validateRestoreCode':. (dynamic, dynamic, dynamic) => Future<bool*>* {                     }
 Function 'sendSmsRestorePassword':. (dynamic, dynamic) => Future<bool*>* { 
                   }       }