Case study
FlyBird-ProtocolAnalysis: FlyBird client subscription protocol and APXS v2 format
FlyBird-ProtocolAnalysis investigates the FlyBird proxy client's subscription delivery and APXS v2 format across Windows, Android, Linux and OpenWrt. Its reports describe client static analysis, process-memory inspection, GDB breakpoints and TLS observation; accompanying code decrypts the envelope and reproduces the documented mTLS request flow using user-supplied account credentials and certificates from the user's installed client.
- Targets
- App · Binary · Protocol
- Category
- Independent reconstruction cases
- Relationship
- Independent reconstruction project
- Sources reviewed
- Evidence class
- C2 code & docs, no demo or download
- Stars
- 3
- Last commit
- 2026-10-30
- Language
- Python
GitHub data as of 2026-11-10
Evidence
- Observed
- Code, documentation and a demo observed; no download method found.
- Checked
- 2026-11-08
Requirements & limits
- Prerequisites: Subscription retrieval requires user-supplied account credentials and certificate files exported from the user's installed client.
- Prerequisites: The source describes Python 3, with additional client binaries and GDB for some tracing routes.
- Testing evidence: The author reports byte-for-byte matching of decrypted output and an approximately eight-second protocol route.
- License: MIT.
Cite
BibTeX
@misc{flybird-protocol-analysis-case,
title = {{FlyBird-ProtocolAnalysis: FlyBird client subscription protocol and APXS v2 format}},
howpublished = {\url{https://github.com/Angel-Gril/FlyBird-ProtocolAnalysis}},
url = {https://github.com/Angel-Gril/FlyBird-ProtocolAnalysis},
urldate = {2026-11-06},
note = {Awesome REA entry: \url{https://awesomerea.org/resources/flybird-protocol-analysis-case/}}
}Plain text
FlyBird-ProtocolAnalysis: FlyBird client subscription protocol and APXS v2 format. https://github.com/Angel-Gril/FlyBird-ProtocolAnalysis (accessed 2026-11-06). Awesome REA entry: https://awesomerea.org/resources/flybird-protocol-analysis-case/
Useful? Star Awesome REA on GitHub2.4k
About this entry
The description was reviewed against primary sources.
Primary sources
- docs/01-overview.md GitHub · Angel-Gril/FlyBird-ProtocolAnalysis · Revision a832a47
- README.md GitHub · Angel-Gril/FlyBird-ProtocolAnalysis · Revision a832a47
- docs/02-client-architecture.md GitHub · Angel-Gril/FlyBird-ProtocolAnalysis · Revision a832a47
More in Apps
- SwiftCUA: reconstructing a macOS computer-use service · Case study
- IOSVM: booting iOS 16.5 user space in QEMU on Linux · Case study
- BOSS GX-10: reconstructing the TSL preset format · Case study
- Valeton GP180: USB MIDI SysEx protocol investigation · Case study
- fiilpod: FIIL earbud protocols integrated into HyperOS · Case study
- upright: reconstructing Lightroom Classic's perspective correction · Case study