# Bypass Flutter

## reFlutter

{% embed url="<https://github.com/Impact-I/reFlutter>" %}

```
pip3 install reflutter==0.7.8
```

Con el APK de fluter que tenemos, ejecutamos el comando.

```
reflutter app_apks_signed.apk
```

Especificamos la IP del burpsuite.

```
Please enter your BurpSuite IP: 192.168.139.1
```

Luego obtenemos el archivo release.RE.apk

Como dice la documentacion firmamos el apk resultante con Uber APK Signer

{% embed url="<https://github.com/patrickfav/uber-apk-signer>" %}

Tambien configuramos el proxy invisible en burpsuite.

<figure><img src="/files/WXppkSfedNkBFRZyxIWd" alt=""><figcaption></figcaption></figure>

Luego de ello deberiamos poder recibir las http request desde el emulador al burpsuite.

### Observaciones

A veces puede que no nos permite usar reflutter con el apk obtenido de [APKTOOL](/mobile/playstore-to-apk.md#apk-tool), recomiendo usar [AntiSplit-X](/mobile/playstore-to-apk.md#antisplit-x).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://cs.desdes.xyz/mobile/bypass-flutter.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.