Failed to load script: the connection is closed

[cylentsec]

Script version: May 19 2025
Package/bundle name: eu.nviso.flutterPinning
Link to app store / play store: N/A
Platform: iOS 15.8.2 (Dopamine jailbreak)
Frida Version: 16.7.19 (client) 16.1.4 (frida-server)
Output of Frida:

frida -U -p 2990 -l disable-flutter-tls.js
     ____
    / _  |   Frida 16.7.19 - A world-class dynamic instrumentation toolkit
   | (_| |
    > _  |   Commands:
   /_/ |_|       help      -> Displays the help system
   . . . .       object?   -> Display information about 'object'
   . . . .       exit/quit -> Exit
   . . . .
   . . . .   More info at https://frida.re/docs/home/
   . . . .
   . . . .   Connected to iPhone (id=<redacted>)
Attaching...                                                            
[+] Pattern version: May 19 2025
[+] Arch: arm64
[+] Platform:  darwin
[ ] Locating Flutter library 1/5
Failed to load script: the connection is closed                         

Thank you for using Frida!

I'm testing the script with the included eu.nviso.flutterPinning iOS app to test my OpenVPN server and iptables setup. I don't know if this script requires a different Frida version. I'm stuck on this version because Frida 17.x isn't compatible with ElleKit (required for ssl-kill-switch-3). I've tried changing the ssl-kill-switch-3 settings as well as uninstalling it to ensure it wasn't interfering and either way it failed to complete and the connection was closed.

I have ensured that I can capture Safari https traffic from the device in Burp Suite Pro. I see Status: HTTPS: SUCCESS ... when I test the iOS app without running the Frida script.

I have tried both attaching and spawning the app in the frida command line options. Same result either way.

[TheDauntless]

@cylentsec I doubt this is related to my script. Are you able to inject with your setup without the script? If that doesn't work either, then it's a Frida issue and you should open a ticket on their repo.

If you can inject other scripts, let me know and I'll see if I can replicate your setup.

[cylentsec]

Yes, I can. I've been using this exact same setup to pentest other apps all year and can inject into apps with it.

Is there a specific Frida version known to work with the script?