Flutter-Reverse-Engineering-Labs

Flutter 逆向工程实验 该仓库包含一系列渐进式挑战，旨在介绍Flutter应用的逆向工程。由于没有太多博客文章或教程详细解释Flutter逆向，我决定创建这个仓库作为实践方式来填补这一空白。 目标是建立一个坚实的基础，以理解Flutter框架的独特特性以及常用的分析技术。 这些挑战按递进结构设计，从基本概念开始，逐步进阶到中间和更高级的技术，例如网络流量拦截和保护绕过。 每个挑战不是传统的解题报告，而是包含一个详细的、博客风格的解决方案，逐步指导你完成逆向过程，结合实践问题解决和相关理论，使概念通过实践直接学习。 📋 先决条件 Android移动应用基础知识 熟悉逆向工程概念...

CVE-2026-22011-iOS-MDM-Profile-Delivery-over-HTTP

CVE-2026-22011 – Entrega de perfiles MDM de iOS a través de HTTP Código del programa servidor MDM Python Flask root@kitploit: mdmserver.py - Serves enrollment profile over plain HTTP from flask import Flask, sendfile app = Flaskname @app.route'/enroll.mobileconfig' def serveprofile: Vulnerability...

CVE-2026-25961-SumatraPDF-3.5.0---3.5.2-RCE

PoC de Actualización Insegura de SumatraPDF CVE-2026-25961 – Ejecución Remota de Código mediante un Servidor de Actualización Malicioso Autor: Mohammed Idrees Banyamer Fecha: Febrero de 2026 CVE: CVE-2026-25961 GHSA: GHSA-xpm2-rr5m-x96q CVSS v3.1: 7.5 Alta AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H...

CVE-2026-79390

Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1883. An unauthenticated attacker with access to the same network segment can intercept MQTT traffic and obtain sensitive device information and operational...

CVE-2026-79390

Trueview TI8161 (version 6.0.23.4) is vulnerable to information disclosure caused by the transmission of MQTT communications in plaintext over TCP port 1883 . An unauthenticated attacker with access to the same network segment can intercept this traffic and obtain sensitive device information and...

CVE-2026-19683

A vulnerability exists in the Dynamic DNS (DDNS) functionality of TP-Link Omada Gateways . During communication with a third-party DDNS service, authentication credentials are transmitted over an unencrypted channel . An attacker with visibility or control of the relevant network path can obtain ...

CVE-2026-76362

In Splunk SOAR versions below 8.6.0, an unauthenticated user who can observe or alter network traffic between Splunk SOAR and a configured CyberArk Representational State Transfer REST server could access or modify all relevant data exchanged through that credential manager. The vulnerability is...

CVE-2026-76244

stigmem-node contains an insecure default configuration vulnerability that allows federation traffic to traverse networks without mTLS protection when non-loopback endpoints are enabled. Operators who explicitly disabled mTLS while binding federation to non-loopback addresses expose federation...

CVE-2026-76242 stigmem Federation Peer Registration Authentication Bypass

stigmem-node 0.9.0a1 accepts federation peer key material during peer registration without a separate administrator out-of-band fingerprint approval step. On nodes that accept federation peer registration over a network where initial registration can be intercepted or misdirected, an attacker can...

EUVD-2026-60484

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic...

CVE-2026-65329

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic...

CVE-2026-65329

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic...

PT-2026-76846

An authentication issue was addressed with improved state management. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1. An attacker in a privileged network position may be able to bypass IPSec authentication and intercept network traffic...

CVE-2026-18678 Kong Mesh: kumactl connects to the control plane without verifying the TLS certificate when no CA is configured

When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, kumactl disables TLS verification and sends API tokens over the unverified connection. An attacker on the network path between the operator and the control plane can intercept user or admin API...

PT-2026-70232

Name of the Vulnerable Software and Affected Versions NETGEAR Nighthawk affected versions not specified Description A command injection flaw allows a network-adjacent attacker who can intercept and modify local network traffic attacker-in-the-middle to compromise the confidentiality and integrity...

CVE-2026-43779

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to intercept network connections intended for another process...

EUVD-2026-49487

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to intercept network connections intended for another process...

CVE-2026-43779

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to intercept network connections intended for another process...

CVE-2026-43779

CVE-2026-43779 is a logic issue in macOS components that could allow an app to intercept network connections intended for another process. Publicly documented fixes target macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6, indicating improved restrictions to prevent cross-process ne...

PT-2026-65183

Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.8 macOS Sonoma versions prior to 14.8.8 macOS Tahoe versions prior to 26.6 Description A logic issue exists where an application may be able to intercept network connections intended for another process...