Re: pen testing flash games.

[bugtraq () cgisecurity net]

Someone mentioned decompiling, but didn't provide a link to a useful tool.
I use this myself.

Flare
http://www.nowrap.de/flare.html

"Flare processes an SWF and extracts all scripts from it. The output is written to a single text file. Only 
ActionScript is extracted, no text or images. Flare is freeware. Windows, Mac OS X and Linux versions are available."

This site has some other cool tools as well.

Regards,
- Robert
http://www.cgisecurity.com/ Application Security news and more
http://www.webappsec.org/
http://www.qasec.com/ 



------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------