frida-flutterproxy

A Frida script for intercepting traffic on Android, iOS Flutter applications (arm64 only)
Tested on a few flutter apps (e.g., Google Ads, Naver Blog, Naver Knowledge iN, 삼쩜삼, BMW, Nubank(Android), Universal Studios hollywood, Demaecan(Android), Alibaba.com)
What does this script do? memory scan and hook some functions. check my blog post!

Usage

1. Set up burp invisible proxy on the host machine

2. Specifiy burp ip and port on the script
At the very end of the script.js, specifiy BURP_PROXY_IP and BURP_PROXY_PORT

3. Attach
frida -Uf <package name> -l script.js

Credits

reflutter
NVISO blog post 1
NVISO blog post 2