Unpacking Flutter hives

Intro When analyzing the security of mobile applications, it’s important to verify that all data is stored securely (See OWASP MASVS-STORAGE-1). A recent engagement involved a Flutter app that uses the Isar/Hive framework to store data. The engagement was unfortunately blackbox, so we did not have access to any of the source code. This especially … Continue reading Unpacking Flutter hives →

access app applications application security blackbox code continue data engagement flutter framework hive hives important mobile mobile applications mobile security owasp reversing security source code storage store the source unpacking verify