WebApp Sec mailing list archives

Re: SWF assesment


From: Leonardo Cavallari Militelli <leonardocavallari () gmail com>
Date: Thu, 3 Sep 2009 09:43:30 -0300

I'm not aware of that but one thing you shloud try is decompiling it
and load into adobe flash cs3/4 in order to debug it.
Then you can understand actions and manipulate their values from
requests using a proxy.
Hope that helps.
- Leo Cavallari


2009/9/3, Serg B <sergeslists () gmail com>:
Hi all

Does anyone know of a tool that would allow me to query/execute
arbitrary methods within a currently loaded flash app?

E.g.

Go to a web page, server serves a SWF file, SWF file is loaded and
does whatever... I would like to be able to invoke individual methods
and properties inside the SWF file, while it's loaded in the web
browser.



Thanks
   Serg




-- 
Enviado do meu celular



Current thread: