WebApp Sec mailing list archives

Re: SWF assesment


From: jfvanmeter () comcast net
Date: Thu, 3 Sep 2009 10:53:43 +0000 (UTC)

swfscan might do what your looking for, I have to say that I've not used the tool alot.
http://www.cgisecurity.com/2009/03/swfscan-free-flash-security-tool.html


----- Original Message -----
From: "Serg B" <sergeslists () gmail com>
To: webappsec () securityfocus com
Sent: Thursday, September 3, 2009 1:46:08 AM GMT -05:00 US/Canada Eastern
Subject: SWF assesment

Hi all

Does anyone know of a tool that would allow me to query/execute
arbitrary methods within a currently loaded flash app?

E.g.

Go to a web page, server serves a SWF file, SWF file is loaded and
does whatever... I would like to be able to invoke individual methods
and properties inside the SWF file, while it's loaded in the web
browser.



Thanks
   Serg





Current thread: