Doldrums

Flutter : se déplacer par mouvements rapides et irréguliers, battre rapidement, être agité. Doldrums : une période de stagnation. Doldrums est un outil de rétro-ingénierie pour les applications Flutter ciblant Android. Concrètement, c'est un analyseur et extracteur d'informations pour le binaire...

aotopsy

AOTopsy A Dart AOT snapshot analyzer. Turns libapp.so — the compiled Dart code inside a Flutter release APK — into function names, class layouts, call graphs, behavioral signals, and readable pseudocode. No Dart VM, no SDK compilation, no runtime fallback. Fork notice: AOTopsy is a fork of...

rustdesk

Server • Compilazione • Docker • Struttura • Schermate English | Українська | česky | 中文 | Magyar | Español | فارسی | Français | Deutsch | Polski | Indonesian | Suomi | മലയാളം | 日本語 | Nederlands | Русский | Português Brasil | Esperanto | 한국어 | العربي | Tiếng Việt | Dansk | Ελληνικά | Türkçe Abbia...

CVE-2026-38093

filepicker aka flutterfilepicker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAYNAME obtained from ContentResolver.query directly in file path construction without...

reFlutter

Dieses Framework unterstützt das Reverse Engineering von Flutter‑Apps, indem es eine gepatchte Version der Flutter‑Bibliothek verwendet, die bereits kompiliert und für das Repackaging der App bereit ist. Die Bibliothek enthält eine modifizierte Snapshot‑Deserialisierung, die eine dynamische Analy...

InjuredAndroid

InjuredAndroid - CTF Eine anfällige Android-Anwendung mit CTF-Beispielen, die auf Bug-Bounty-Funden, Exploit-Konzepten und purer Kreativität basieren. Jetzt im Google Play Store erhältlich! https://play.google.com/store/apps/details?id=b3nac.injuredandroid Einrichtung für ein physisches Gerät 1...

SocialFishMobile

SocialFish Mobile Questa applicazione è un progetto open-source per controllare da remoto SocialFish, non funziona in modo indipendente. Come compilare root@kitploit: Prepare your Flutter environment Go to https://flutter.dev/docs/get-started/install After configured go ahead Clone this repositor...

blutter

Blutter Strumento di Reverse Engineering per Applicazioni Flutter Mobile tramite Compilazione del Runtime Dart AOT Attualmente l'applicazione supporta solo il file Android libapp.so solo arm64. Inoltre, l'applicazione funziona al momento solo con versioni recenti di Dart. Per le funzionalità...

EUVD-2026-67771

filepicker aka flutterfilepicker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAYNAME obtained from ContentResolver.query directly in file path construction without...

PT-2026-83128

file picker aka flutter file picker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAY NAME obtained from ContentResolver.query directly in file path construction without...

CVE-2026-38093

file_picker (aka flutter_file_picker) for Flutter, all versions through 10.3.10 , contains a path traversal (CWE-22) vulnerability in its Android implementation. The openFileStream() method in FileUtils.kt uses the DISPLAY_NAME value returned by ContentResolver.query() directly in file path const...

CVE-2026-38093

filepicker aka flutterfilepicker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAYNAME obtained from ContentResolver.query directly in file path construction without...

CVE-2026-38093

filepicker aka flutterfilepicker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAYNAME obtained from ContentResolver.query directly in file path construction without...

universal-flutter-ssl-pinning

universal-flutter-ssl-pinning Dekompliliert libflutter.so mit PyGhidra, um die SSL-Zertifikatsprüfungsfunktion zu lokalisieren, und erstellt dann einsatzbereite Umgehungsskripte für Frida und Renef. Funktionsweise 1. PyGhidra lädt libflutter.so headless und durchsucht alle definierten Strings nac...

Flutter-Reverse-Engineering-Labs

Laboratori di Reverse Engineering di Flutter Questo repository contiene una serie di sfide progressive pensate per introdurre il reverse engineering delle applicazioni Flutter. Poiché non ci sono molti post di blog o tutorial che spiegano il reversing di Flutter in dettaglio, ho deciso di creare...

Grid-Mobile

Grid – Verschlüsselte Standortfreigabe Schwer zu verfolgen. mygrid.app Grid ist eine sichere, Ende-zu-Ende-verschlüsselte E2EE Anwendung zur Standortfreigabe, die in das Matrix-Protokoll integriert ist. Grid wurde mit Flutter entwickelt und bietet eine datenschutzorientierte Lösung zur Freigabe...

reFlutter

Leggi di più sul blog: https://swarm.ptsecurity.com/fork-bomb-for-flutter/ Questo framework aiuta nel reverse engineering di app Flutter utilizzando una versione patchata della libreria Flutter, già compilata e pronta per il repacking dell'app. Questa libreria ha il processo di deserializzazione...

RedGridLink

Red Grid Link Navigazione MGRS offline e coordinamento di prossimità per piccole squadre 2-8 persone. Nessuna copertura cellulare necessaria. Basato sul motore MGRS di Red Grid MGRS. Field Link aggiunge sincronizzazione di prossimità zero-config tramite Bluetooth, con Apple Multipeer Connectivity...

LLMtary

LLMtary Elementary — AI-Powered Penetration Testing Platform...

CVE-2026-30797

Missing Authorization vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Flutter URI scheme handler, config import modules allows Application API Message Manipulation via Man-in-the-Middle. This vulnerability is associated with program files...