Penetration Testing mailing list archives
Re: Flash Web Application
From: Zaki Akhmad <zakiakhmad () gmail com>
Date: Tue, 2 Feb 2010 19:12:40 +0700
On Tue, Feb 2, 2010 at 6:17 PM, david lodge <resident.deity () gmail com> wrote:
Get a good flash disassembler. You can get flare and flasm for free (open source), but these are limited to as2 and don't support as3. The other alternatives are SoThink's SWFdecompiler and ASV (both commercial). SWFscan from HP is good, but I've had varying success from it and prefer to do it by hand :-)
What do you mean by "... to do it by hand"? I can't get good source with SWFscan. Is it me the one who wrong and didn't know how to do it with SWFscan or ... -- Zaki Akhmad ------------------------------------------------------------------------ This list is sponsored by: Information Assurance Certification Review Board Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT and CEPT certs require a full practical examination in order to become certified. http://www.iacertification.org ------------------------------------------------------------------------
Current thread:
- Re: Flash Web Application david lodge (Feb 02)
- Re: Flash Web Application Zaki Akhmad (Feb 03)
- Re: Flash Web Application Steve Pinkham (Feb 03)
- <Possible follow-ups>
- Re: Flash Web Application Zaki Akhmad (Feb 03)
- Re: Flash Web Application lovewadhwa (Feb 03)
- Re: Flash Web Application Zaki Akhmad (Feb 03)
- Re: Flash Web Application David Howe (Feb 03)
- Re: Flash Web Application Zaki Akhmad (Feb 03)
- Re: Flash Web Application David Howe (Feb 05)
- Re: Flash Web Application Zaki Akhmad (Feb 05)
- Re: Flash Web Application David Howe (Feb 03)
- Re: Flash Web Application Todd Haverkos (Feb 05)
- RE: Flash Web Application PortSwigger (Feb 07)