Skip to content

Releases: script-or-script/FlutterTap

Release list

FlutterTap v1.0.0

FlutterTap v1.0.0 Latest
Latest

Choose a tag to compare

View all tags
@script-or-script script-or-script released this 29 Jul 06:06
v1.0.0
d8f5e79

First public release.

A Zygisk module that redirects the traffic of selected Flutter apps to a proxy and bypasses BoringSSL's TLS certificate verification, persistently -- no Frida, no cable, no live session.

Install

  1. Flash FlutterTap-v1.0.0.zip from your root manager (Magisk / KernelSU / SukiSu Ultra / APatch) and reboot.
  2. Install FlutterTap-manager-v1.0.0.apk and grant root on first launch.
  3. Set the proxy IP/port and tick your target apps.
  4. Force-stop the target app and reopen it -- the hook only enters new processes.

In Burp, enable invisible proxying on the listener.

Compatibility

Android 10 through 17, arm64-v8a and x86_64. Requires Zygisk (Magisk's built-in, Zygisk Next -- including with Zygisk Next Linker enabled -- or NeoZygisk).

Validated on hardware: OnePlus 5 (Android 10, Magisk + NeoZygisk) and Pixel 8a (Android 17, SukiSu Ultra + Zygisk Next 1.4.3 with ZN Linker on), with real decrypted HTTPS traffic captured.

Notes

  • The APK is signed (v3, RSA 4096). If you previously installed a debug build, uninstall it first.
  • The module zip is not signature-verified -- Magisk/KernelSU module managers do not implement that.
  • Intended for authorised traffic analysis only.
Assets 4
Loading