{
  "added_at": "2026-11-08",
  "additional_evidence_urls": [
    "https://github.com/Angel-Gril/FlyBird-ProtocolAnalysis/blob/a832a47c4cc1d7a7aaf0449ab40c3f5d7af6e767/README.md",
    "https://github.com/Angel-Gril/FlyBird-ProtocolAnalysis/blob/a832a47c4cc1d7a7aaf0449ab40c3f5d7af6e767/docs/02-client-architecture.md"
  ],
  "category": "reconstruction-cases",
  "class": "software",
  "description_en": "FlyBird-ProtocolAnalysis investigates the FlyBird proxy client's subscription delivery and APXS v2 format across Windows, Android, Linux and OpenWrt. Its reports describe client static analysis, process-memory inspection, GDB breakpoints and TLS observation; accompanying code decrypts the envelope and reproduces the documented mTLS request flow using user-supplied account credentials and certificates from the user's installed client.",
  "description_zh": "FlyBird-ProtocolAnalysis 研究 FlyBird 代理客户端在 Windows、Android、Linux 和 OpenWrt 上的订阅交付链路与 APXS v2 格式。报告记录了客户端静态分析、进程内存检查、GDB 断点及 TLS 流量观察；配套代码可解密数据封套，并利用用户提供的账号凭据和从已安装客户端导出的证书复现所述 mTLS 请求流程。",
  "entry_url": "https://awesomerea.org/resources/flybird-protocol-analysis-case/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/flybird-protocol-analysis-case/",
  "evidence_class": 2,
  "evidence_status": "observed",
  "evidence_url": "https://github.com/Angel-Gril/FlyBird-ProtocolAnalysis/blob/a832a47c4cc1d7a7aaf0449ab40c3f5d7af6e767/docs/01-overview.md",
  "group": "cases",
  "id": "flybird-protocol-analysis-case",
  "json_url": "https://awesomerea.org/resources/flybird-protocol-analysis-case/record.json",
  "kind": "case-study",
  "markdown_url": "https://awesomerea.org/resources/flybird-protocol-analysis-case/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/flybird-protocol-analysis-case/index.md",
  "name": "FlyBird-ProtocolAnalysis: FlyBird client subscription protocol and APXS v2 format",
  "name_zh": "FlyBird-ProtocolAnalysis：FlyBird 客户端订阅协议与 APXS v2 格式",
  "record_type": "resource",
  "relationship": "independent-reconstruction",
  "requirement_facets": [
    "prerequisites",
    "prerequisites",
    "testing",
    "license"
  ],
  "requirements": [
    "Subscription retrieval requires user-supplied account credentials and certificate files exported from the user's installed client.",
    "The source describes Python 3, with additional client binaries and GDB for some tracing routes.",
    "The author reports byte-for-byte matching of decrypted output and an approximately eight-second protocol route.",
    "MIT."
  ],
  "requirements_zh": [
    "获取订阅需要用户提供账号凭据，并从自行安装的客户端导出证书文件。",
    "文档使用 Python 3；部分跟踪路线还需要客户端二进制和 GDB。",
    "作者报告解密结果与客户端输出逐字节一致，纯协议路线约需八秒。",
    "许可证为 MIT。"
  ],
  "scope": "unknown",
  "targets": [
    "app",
    "binary",
    "protocol"
  ],
  "url": "https://github.com/Angel-Gril/FlyBird-ProtocolAnalysis",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06"
}