pancake Feb 19

r2flutter is moving at good pace. Still not yet ready for a release, but quite usable for both iOS and Android. It’s about 3000 LOC, and i’m still trying to stabilize the parsing and carving of all the metadata for strings, class hierarchies, type information and so on.

Dart is tricky but I hope this cli tool and #radare2 plugin will make a difference for reversing Flutter apps when released next month.

Show threadcodecoloristFeb 20
@pancake can’t wait to integrate it with my web tool
Show threadpancake Feb 20
@codecolorist your web tool?
Show threadcodecoloristFeb 20
@pancake Mobile Pentester IDE wannabe
Show threadpancake Feb 21
@codecolorist that looks so cool! (And useful) You must submit a blue/yellow color theme for r2 to match the style! I can do as template if you like
Show threadcodecoloristFeb 24
@pancake I'd digg the rabbit hole to put hermes plugin first 
Show threadpancake Feb 24
@codecolorist wow that looks great 🔥are also interested in my upcoming plugins for flutter and unity?
Show threadcodecolorist2d ago
@pancake hermes is done
Show threadpancake 2d ago
@codecolorist yay! that's fantastic! definitively you need to do your own color theme for r2!
Show threadcodecolorist1d ago
@pancake :-> reinventing goes too far
Show threadViss1d ago

@codecolorist @pancake so im a complete reversing noob. the deepest i got into it was the OSCP in 2009 (basic buffer overflow with dep/aslr disabled) and then a few years later making a SINGLE BYTE change to vncpasswd to allow for 1 char passwords.

ive always wanted to chuck an apk into something like this and go to town tearing out hardcoded api keys and whatnot. for a reversing nooblet like me, is this just way overboard, or do you think i could light it up and survive?

Show threadcodecolorist
@Viss this thing should be easy to learn, especially with llm. You might have some problem with RASP for real world apps because all of them try to hide the binary from reverser now
Mar 26 at 7:40pmWeb