Cannot Intercepted using Burp Suite

[ghozimahdi]

Success Injection with Frida.

[+] ✅ SSL pinning bypass applied
[+] ✅ Anti-debugging bypass applied
[+] ✅ Debugger detection bypassed
[+] ✅ Debugger detection bypassed
[+] PairIP License check bypassed
[+] ✅ SSL checkServerTrusted bypassed
[+] ✅ SSL checkServerTrusted bypassed
[+] ✅ SSL checkServerTrusted bypassed

🔍 REFLUTTER DART DUMPING INITIALIZED

📍 libapp.so baseAddress: 0x74fe608000
📍 codeOffset: 0x74ff06be80
📍 dumpOffset: 0xa63e80

⏳ Waiting for Dart code execution...

✅ reFlutter hook attached successfully!
📝 Dart dump will be written to app's data directory
📂 Use: adb shell cat /data/data/-/dump.dart > dump.dart
[+] ✅ SSL checkServerTrusted bypassed

=========================================

I cannot intercept the request api with Burp Suite. Event though I have set the proxy as in the tutorial, but I able to dump and there is file dump.dart in the root data

[ghozimahdi]

Have you try it? @AbhiTheModder

[AbhiTheModder]

Have you try it? @AbhiTheModder

Hey there, I don't use burp suite so I can't say anything about it.

[Damo3003]

I have the same problem. Reflutter worked well for bypass ssl pinning flutter app a few months ago, but today, even though I'm following the same steps, I can't intercept traffic of my flutter app in my Burp Suite.

[AnotherWayIn]

same here

[bad-antics]

Flutter apps can be tricky to intercept! Common solutions:

Certificate Pinning Bypass:

• reFlutter should handle this, but verify the patch was applied
• Check if app uses additional pinning (OkHttp, custom)

Proxy Setup:

• Ensure proxy is set system-wide, not just WiFi
• For Android 7+, user certs need to be installed as system certs

Steps to verify:

1. Check if non-Flutter traffic is intercepted
2. Verify the reFlutter snapshot was properly generated
3. Try Frida with ssl_pinning_bypass scripts

Alternative approaches:

• Use Objection for runtime manipulation
• Try ProxyDroid for system-wide proxy
• For iOS, use SSL Kill Switch 2

What's your setup? Android/iOS version and device type?

[bad-antics]

Flutter apps can be tricky to intercept!

Common solutions:

1. Verify reFlutter patch was properly applied
2. Ensure proxy is system-wide (ProxyDroid for Android)
3. For Android 7+, install certs as system certs
4. Try Frida ssl_pinning_bypass scripts as backup

Steps to verify:

• Check if non-Flutter traffic is intercepted
• Verify the reFlutter snapshot was properly generated
• Try Objection for runtime manipulation

What's your setup - Android/iOS and device type?