SWFIntruder Help
Description
SWFIntruder is a runtime analyser for SWF external movies.
It helps to find flaws in Flash using the methodology described in
Testing Flash Applications[1] and in Finding Vulnerabilities in Flash
Applications[2].
Quick and Dirty:
-
Download the SWF File you want to test to a subdirectory of SWFIntruder.
-
Set the (Full) path to the SWF.
-
Click Load.
-
Select some of the undefined variables (Multiple select are allowed).
-
Go to Menu -> View -> Show Xss Tool.
-
Click play.
Recommended Configuration
- Firefox 2.x [Needed]
- FireBug Addon
- Flash Player Plugin Ver >= 9 [Needed]
- Any Web Server [Needed]
Persistent Configuration and Layout
By using Firefox globalStorage, SWF Intruder saves user's
main configuration and layout in order to be retrived everytime
the browser is launched.
Specifically, users will have persistance on:
- User defined attack patterns
- Selection of attack patterns
- User added undefined parameters
- Custom parameters appended to request
- Address value of site hosting evil.swf
- Some other configuration amenities
- Latest 4 urls tested (History helper)
- Xss box and Debug box show/hide layout
Known Issues/Bugs
1. Sometime Firefox crashes. This is due to some problem in Firefox and not in SWF Intruder itself.
2. If you use SWF Intruder under linux, the flash plugin eats a lot of memory.
3.There's a pattern for which __resolve does not work:
frame 1 {
static.main(this)
}
where 'this' is _root but not explicitly set.
Warning
Letting browser run untrusted Flash movies, could result
in an attack to internal network and other malicious activities
against the tester.
Set the test environment as strict as possible.