Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added ios & android technique and tool for re-flutter (by @appknox) #2600

Merged
merged 22 commits into from
Jun 24, 2024
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
updated changes
  • Loading branch information
sk3l10x1ng committed Jun 18, 2024
commit 338d80951a36a1238371d73235125f6320564453
8 changes: 4 additions & 4 deletions techniques/android/MASTG-TECH-0109.md
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ This will create a **release.RE.apk** file in the output folder.

2. Sign the patched **release.RE.apk** file (e.g. using the [uber-apk-signer](https://github.com/patrickfav/uber-apk-signer)).

```plaintext
```bash
java -jar uber-apk-signer.jar -a release.RE.apk --out demo-signed
```

Expand All @@ -60,8 +60,8 @@ This will create a **release.RE-aligned-debugSigned.apk** file in the output fol

1. Configure [proxyDroid](https://blog.nviso.eu/2019/08/13/intercepting-traffic-from-android-flutter-applications/) or iptables rules to redirect requests to Burp.

Execute the command to configure iptables in order to redirect the incoming requests from the application to Burp.
```plaintext
If not using proxyDroid, execute the following commands on the rooted Android device to configure iptables to redirect the incoming requests from the application to Burp:
```bash
$ iptables -t nat -A OUTPUT -p tcp --dport 80 -j DNAT --to-destination <Your-Proxy-IP>:8080

$ iptables -t nat -A OUTPUT -p tcp --dport 443 -j DNAT --to-destination <Your-Proxy-IP>:8080
Expand All @@ -78,7 +78,7 @@ $ iptables -t nat -A OUTPUT -p tcp --dport 443 -j DNAT --to-destination <Your-Pr

4. Run the [disable-flutter-tls.js](../../tools/generic/MASTG-TOOL-0101.md) frida script.

```plaintext
```bash
frida -U -f eu.nviso.flutterPinning -l disable-flutter-tls.js
```

Expand Down