Nullcon Berlin 2024 | The Complexity Of Reversing Flutter Applications by Axelle Apvrille

Abstract Flutter is a cross-platform application development platform. With the same codebase, developers write and compile native applications for Android, iOS, Windows, Linux. In this presentation, we explain how to make sense of the assembly code. We illustrate the talk by walking the audience towards the solution of a Dart challenge which was part of GreHack CTF 2023. We run the program, parse the Dart AOT snapshot, and use Radare2 to disassemble it. We locate access to the Object Pool, which uses a custom register, and compute the reference to the accessed objects. Finally, we uncover the creation of the flag and solve the challenge. Download Presentation: https://berlin2024.nullcon.net/berlin-2024/recordings #Flutter #AssemblyCode #CTFChallenge #reverseengineering Know more - https://nullcon.net/berlin-2024/speaker-the-complexity-of-reversing-flutter-applications ----------------- Follow Nullcon on Facebook: https://www.facebook.com/nullcon X: https://twitter.com/nullcon LinkedIn: https://www.linkedin.com/company/7593034/admin/feed/posts/ Website: https://nullcon.net/