Doldrums: Flutter/Dart reverse engineering tool

Doldrums

Doldrums is a reverse engineering tool for Flutter apps targetting Android. Concretely, it is a parser and information extractor for the Flutter/Dart Android binary, conventionally named libapp.so, for all Dart version 2.10 releases. When used, it recovers all Dart classes and methods and indicates the offset into the libapp.so file where the code for each method may be found. The native code can then be reversed using the techniques shown in the last section.

Install

pip3 install pyelftools
git clone https://github.com/rscloura/Doldrums.git

Use

To use, simply run the following command, substituting libapp.so for the appropriate binary, and output for the desired output file.

python3 src/main.py libapp.so output

The expected output is a dump of all classes, in the following format:

class MyApp extends StatelessWidget {

    Widget build(DynamicType, DynamicType) {

        Code at absolute offset: 0xec85c

    }



    String myPrint(DynamicType, DynamicType) {

        Code at absolute offset: 0xeca80

    }

}

 

The absolute code offset indicates the offset into the libapp.so file where the native function may be found.

Source: https://github.com/rscloura/