Burp Suite User Forum

Create new post

How to use burp with flutter based Android applications

uzair | Last updated: Apr 12, 2021 10:21AM UTC

Any tips while pen-testing Flutter based Android apps? Since it ignores system proxy and user/system CA certificates you cannot use burp suite easily.

Uthman, PortSwigger Agent | Last updated: Apr 12, 2021 12:05PM UTC

Hi Uzair, Flutter uses the Dart package, which does not appear to adhere to the device proxy settings. You might be able to use the ProxyDroid Android app to force all the traffic from the device to the Burp proxy via Iptables. The following article has some useful information regarding this: https://blog.nviso.eu/2019/08/13/intercepting-traffic-from-android-flutter-applications/

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.