Added techniques/android/MASTG-TECH-0099.md ,techniques/ios/MASTG-TEC…

…H-0099.md, tools/generic/MASTG-TOOL-0099.md

techniques/android/MASTG-TECH-0099.md

@@ -0,0 +1,54 @@
+--- 
+title: Intercepting Non-proxy-aware Requests
+platform: android 
+---
+
+Flutter is an open-source UI software development kit (SDK) created by Google. It is used for building natively compiled applications for mobile, web, and desktop from a single codebase. Flutter uses Dart, which is not proxy-aware and uses its own certificate store.The application doesn’t take proxy configuration from the system and send the data directly to the server.Due to this , it is not possible to intercept the request using the Burp-suite or any MITM tools.
+
+## Intercepting Traffic using re-flutter
+
+1. The re-fultter supports both android and ios flutter applications.
+2. Install the [reflutter](https://github.com/Impact-I/reFlutter.git).
+3. Run the command to patch the application.
+```
+$ reflutter demo.apk
+```
+4. It prompts to choose two options:
+```
+$ reflutter demo.apk
+
+ Choose an option: 
+
+ 1. Traffic monitoring and interception 
+ 2. Display absolute code offset for functions
+
+ [1/2]? 
+```
+5. Select the **Traffic monitoring and interception**.
+6. Then it prompts **“Please enter your BurpSuite IP”**.Enter the IP of the machine which the burp suite is running.
+```
+$ reflutter demo.apk 
+
+ Choose an option: 
+
+ 1. Traffic monitoring and interception 
+ 2. Display absolute code offset for functions
+
+ [1/2]? 1
+
+Example: (192.168.1.154) etc.
+Please enter your BurpSuite IP: 192.168.29.216
+```
+7. This will create a patched **release.RE.apk** file.
+8. Re-sign the application with the [uber-apk-signer](https://github.com/patrickfav/uber-apk-signer).
+```bash
+$ java -jar uber-apk-signer.jar -a release.RE.apk --out demo-signed
+```
+9. This will create a **release.RE-aligned-debugSigned.apk** file in the output folder.
+10. Install the re-signed application on the mobile device.
+11. Configure the Burp-suite:
+ - Under Proxy -> Proxy settings -> Add new Proxy setting.
+ - Bind listening Port to **8083**.
+ - Select Bind to address to **All interfaces**.
+ - Request Handling -> support for invisible proxying.
+12. Open the Application and start intercepting the requests from the applications.

techniques/ios/MASTG-TECH-0099.md

@@ -0,0 +1,64 @@
+---
+title: Intercepting Non-proxy-aware Traffic
+platform: ios
+---
+
+
+Flutter is an open-source UI software development kit (SDK) created by Google. It is used for building natively compiled applications for mobile, web, and desktop from a single codebase. Flutter uses Dart, which is not proxy-aware and uses its own certificate store.The application doesn’t take proxy configuration from the system and send the data directly to the server.
+Due to this , it is not possible to intercept the request using the BurpSuite or any MITM tools.
+
+
+
+## Intercepting Traffic using re-fultter
+
+1. The re-Fultter supports both android and ios flutter applications.
+2. Install the [reflutter](https://github.com/Impact-I/reFlutter.git).
+3. Run the command to patch the application.
+```
+$ reflutter demo.ipa
+```
+4. It prompts to choose two options:
+```
+$ reflutter demo.ipa 
+
+ Choose an option: 
+
+ 1. Traffic monitoring and interception 
+ 2. Display absolute code offset for functions
+
+[1/2]? 
+```
+5. Select the **Traffic monitoring and interception**.
+6. It prompts **Please enter your BurpSuite IP**. Enter the **IP** of the machine which the BurpSuite is running.
+```
+$ reflutter demo.ipa 
+
+ Choose an option: 
+
+ 1. Traffic monitoring and interception 
+ 2. Display absolute code offset for functions
+ [1/2]? 1
+
+Example: (192.168.1.154) etc.
+Please enter your BurpSuite IP: 192.168.0.123
+```
+7. This will create a patched **release.RE.ipa** file.
+```
+SnapshotHash: 7dbbeeb8ef7bdfd91338640dca3927636de
+The resulting ipa file: ./release.RE.ipa
+Please install the ipa file
+
+Configure Burp Suite proxy server to listen on *:8083
+Proxy Tab -> Options -> Proxy Listeners -> Edit -> Binding Tab
+
+Then enable invisible proxying in Request Handling Tab
+Support Invisible Proxying -> true
+``` 
+8. [Re-sign](../../techniques/ios/MASTG-TECH-0092.md) the application with the Apple certificates.
+9. Install the re-signed application on the mobile device.
+10. Configure the Burp-suite:
+ - Under Proxy -> Proxy settings -> Add new Proxy setting.
+ - Bind listening Port to **8083**.
+ - Select Bind to address to **All interfaces**. 
+ - Request Handling -> support for invisible proxying.
+11. Open the Application and start intercepting the requests from the applications.

tools/generic/MASTG-TOOL-0099.md

@@ -0,0 +1,7 @@
+---
+title: re-flutter
+platform: generic
+source: https://github.com/Impact-I/reFlutter
+---
+
+[re-flutter](https://github.com/Impact-I/reFlutter) framework helps with Flutter apps reverse engineering using the patched version of the Flutter library which is already compiled and ready for app repacking. This library has snapshot deserialization process modified to allow you perform dynamic analysis.