High-risk tools in SO Analyzer MCP
12 of the 56 tools in SO Analyzer MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
blutter_export_hooksExecute为指定函数生成Frida Hook脚本。类型:trace/modify/log
-
blutter_search_vipExecute⭐在Blutter输出中搜索VIP/会员相关函数，自动生成修改建议
-
flutter_analyze_apkExecute⭐完整分析Flutter APK：解压→提取SO→Blutter分析→生成Hook脚本
-
flutter_analyze_libappExecute⭐使用Blutter分析libapp.so，恢复Dart符号和函数（核心工具）
-
flutter_generate_hookExecute生成Flutter Frida Hook脚本。类型:trace/modify/args
-
flutter_patch_apkExecute自动patch Flutter APK的SSL验证（一键操作）
-
flutter_patch_sslExecutePatch SSL验证（绕过证书检测，用于抓包）
-
flutter_ssl_offset_v2Execute⭐核心工具！模拟IDA分析流程：1.搜索ssl_client 2.xrefs_to 3.智能选择函数 4.生成脚本
-
so_decompileExecute⭐反编译函数生成伪代码。支持radare2(默认,轻量)/ghidra(高质量)/simple(无依赖)
-
so_patch_branchExecute修改分支跳转指令。force_jump=强制跳转/no_jump=不跳转/invert=反转条件
-
so_patch_nopExecute将指令替换为NOP(空操作)，用于跳过检测代码
-
so_patch_returnExecute⭐修改函数直接返回指定值(VIP破解核心工具)。支持:0/1/true/false/-1/max/自定义数值
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.