<![CDATA[Stories by Sumit Kumar on Medium]]> https://medium.com/@sumit.dhawan0?source=rss-8b7f46221bf4------2 https://cdn-images-1.medium.com/fit/c/150/150/1*Vhq-sDKSLg99TOuXzsG75A.jpeg Stories by Sumit Kumar on Medium https://medium.com/@sumit.dhawan0?source=rss-8b7f46221bf4------2 Medium Thu, 28 May 2026 00:14:33 GMT <![CDATA[ Part 27: Miscellaneous & Advanced Flutter Exploits — From Stack Trace Leaks to Input Hijacking]]>

Beyond traditional exploits like token theft or WebView injection, there are less obvious, but equally dangerous threats lurking in the…

Continue reading on Flutter Minds »

]]> https://medium.com/flutter-minds/part-27-miscellaneous-advanced-flutter-exploits-from-stack-trace-leaks-to-input-hijacking-6ed1f435ec8a?source=rss-8b7f46221bf4------2 https://medium.com/p/6ed1f435ec8a Wed, 06 Aug 2025 09:43:40 GMT 2025-08-06T10:14:06.072Z <![CDATA[ Part 26: Asset Tampering in Flutter — Runtime Modifications and Dynamic Asset Swaps]]>

Even after an app is built and running, attackers can manipulate its runtime behavior and assets loaded in memory. Using dynamic…

Continue reading on Flutter Minds »

]]> https://medium.com/flutter-minds/part-26-asset-tampering-in-flutter-runtime-modifications-and-dynamic-asset-swaps-bab44d12d59c?source=rss-8b7f46221bf4------2 https://medium.com/p/bab44d12d59c Wed, 06 Aug 2025 09:43:25 GMT 2025-08-06T10:13:48.386Z <![CDATA[️ Part 25: Asset Repack Attacks — How Attackers Modify Your Flutter App’s Assets to Inject…]]>

Many Flutter apps use assets — images, JSON configs, HTML files, and scripts — to drive parts of their UI or logic. These assets are…

Continue reading on Flutter Minds »

]]> https://medium.com/flutter-minds/%EF%B8%8F-part-25-asset-repack-attacks-how-attackers-modify-your-flutter-apps-assets-to-inject-526ceb8f6b91?source=rss-8b7f46221bf4------2 https://medium.com/p/526ceb8f6b91 Wed, 06 Aug 2025 09:43:08 GMT 2025-08-06T10:13:41.009Z <![CDATA[️ Part 24: Flutter Code Obfuscation Bypass — Why Obfuscation Isn’t Enough to Protect Your App…]]>

Obfuscation is often mistaken for security — but it’s just a speed bump, not a wall.

Continue reading on Flutter Minds »

]]> https://medium.com/flutter-minds/%EF%B8%8F-part-24-flutter-code-obfuscation-bypass-why-obfuscation-isnt-enough-to-protect-your-app-413179f4e026?source=rss-8b7f46221bf4------2 https://medium.com/p/413179f4e026 Wed, 06 Aug 2025 09:42:55 GMT 2025-08-06T10:13:33.005Z <![CDATA[ Part 23: Reverse Engineering libapp.so — Extracting Hidden Secrets From Compiled Flutter Code]]>

When a Flutter app is built in release mode, all Dart code is compiled into a shared library called libapp.so. While this binary gives you…

Continue reading on Flutter Minds »

]]> https://medium.com/flutter-minds/part-23-reverse-engineering-libapp-so-extracting-hidden-secrets-from-compiled-flutter-code-6b98c6701abf?source=rss-8b7f46221bf4------2 https://medium.com/p/6b98c6701abf Wed, 06 Aug 2025 09:42:37 GMT 2025-08-06T10:13:23.097Z <![CDATA[ Part 22: Flutter App Integrity Bypass via Repack & Side-Loading — The Hidden Danger of Modified…]]>

Even a secure Flutter app can be completely hijacked if attackers modify the APK, inject malicious logic or assets, repack the app, and…

Continue reading on Flutter Minds »

]]> https://medium.com/flutter-minds/part-22-flutter-app-integrity-bypass-via-repack-side-loading-the-hidden-danger-of-modified-cef6bf2eeae0?source=rss-8b7f46221bf4------2 https://medium.com/p/cef6bf2eeae0 Wed, 06 Aug 2025 09:42:14 GMT 2025-08-06T10:13:11.302Z <![CDATA[ Part 21: Reverse Engineering Flutter Apps Using JADX & Ghidra — How Hackers Extract Secrets…]]>

Flutter apps are compiled to native binaries, giving developers a false sense of protection. But in reality, attackers can reverse…

Continue reading on Flutter Minds »

]]> https://medium.com/flutter-minds/part-21-reverse-engineering-flutter-apps-using-jadx-ghidra-how-hackers-extract-secrets-b1bf754f1fe7?source=rss-8b7f46221bf4------2 https://medium.com/p/b1bf754f1fe7 Wed, 06 Aug 2025 09:41:53 GMT 2025-08-06T10:12:50.948Z <![CDATA[ Part 20: Runtime Memory Inspection (RAM Sniffing) — How Hackers Extract Secrets from Your…]]>

Even the most secure Flutter apps must load sensitive data — like JWT tokens, credentials, feature flags, or session states — into memory…

Continue reading on Flutter Minds »

]]> https://medium.com/flutter-minds/part-20-runtime-memory-inspection-ram-sniffing-how-hackers-extract-secrets-from-your-7fbd01da4e98?source=rss-8b7f46221bf4------2 https://medium.com/p/7fbd01da4e98 Wed, 06 Aug 2025 09:41:36 GMT 2025-08-06T10:12:26.277Z <![CDATA[ Part 19: Runtime Memory Hooking — Hijacking Flutter's Internal State While the App Runs]]>

Most mobile developers assume that once an app is compiled and signed, its internal logic is safe. But attackers with tools like Frida…

Continue reading on Flutter Minds »

]]> https://medium.com/flutter-minds/part-19-runtime-memory-hooking-hijacking-flutters-internal-state-while-the-app-runs-988cf4d02079?source=rss-8b7f46221bf4------2 https://medium.com/p/988cf4d02079 Wed, 06 Aug 2025 09:35:08 GMT 2025-08-06T10:12:13.484Z <![CDATA[️ Part 18: Flutter Asset Injection — How Attackers Tamper with Static Resources in Your App]]>

Flutter apps bundle critical assets inside the assets/ directory — including:

Continue reading on Flutter Minds »

]]> https://medium.com/flutter-minds/%EF%B8%8F-part-18-flutter-asset-injection-how-attackers-tamper-with-static-resources-in-your-app-7a54227bb2dd?source=rss-8b7f46221bf4------2 https://medium.com/p/7a54227bb2dd Wed, 06 Aug 2025 09:34:04 GMT 2025-08-06T10:12:03.646Z