http://qtnes.com/tags/hive/Recent content in Hive on QtnesHugoen-usThu, 16 Apr 2026 00:00:00 +0000http://qtnes.com/posts/5---mediterraneanpotions---decrypting-a-flutter-apps-encrypted-database/Thu, 16 Apr 2026 00:00:00 +0000http://qtnes.com/posts/5---mediterraneanpotions---decrypting-a-flutter-apps-encrypted-database/<h2 id="overview">Overview</h2> <p>MediterraneanPotions was a Flutter challenge built around a single encrypted asset: <code>potions.hive</code>, a Hive key-value database where every record was AES-CBC encrypted. The AES key was hardcoded in the app&rsquo;s native Dart binary. The Hive frame format embedded a per-record IV.</p> <p>The challenge was to find the key, understand the binary format, and decrypt all records.</p> <h2 id="first-impressions">First Impressions</h2> <p>The APK was a Flutter application. That changed the decompilation landscape immediately: the main application logic was compiled into <code>libapp.so</code> as native Dart code, not Java bytecode. JADX produced almost nothing useful beyond the Android framework glue.</p>