From: Stefano Di Paola (stefano.dipaola@mindedsecurity.com)
Date: Tue Dec 04 2007 - 11:06:55 EST
I am proud to announce first release of SWFIntruder.
SWFIntruder (pronounced Swiff Intruder) is the first tool specifically
developed for analyzing and testing security of Flash applications at
runtime.
It helps to find flaws in Flash applications using the methodology
originally described in Testing Flash Applications [1]
and in Finding Vulnerabilities in Flash Applications [2] .
Some neat feature:
* Basic predefined attack patterns.
* Highly customizable attacks.
* Highly customizable undefined variables.
* Semi automated Xss check.
* User configurable internal parameters.
* Log Window for debugging and tracking.
* History of latest 5 tested SWF files.
* ActionScript Objects runtime explorer in tree view.
* Persistent Configuration and Layout.
SWFIntruder is hosted @ OWASP:
https://www.owasp.org/index.php/Category:SWFIntruder
and is sponsored by Minded Security (http://www.mindedsecurity.com)
Check it out and let me know!
Any comments will be appreciated.
References:
[1]
http://www.owasp.org/images/8/8c/OWASPAppSec2007Milan_TestingFlashApplications.ppt
[2]
http://www.owasp.org/images/d/d8/OWASP-WASCAppSec2007SanJose_FindingVulnsinFlashApps.ppt
Regards,
Stefano
-- Stefano Di Paola Chief Technology Officer Director of Minded Security Research Labs Minded Security - Application Security Consulting www.mindedsecurity.com ------------------------------------------------------------------------ This list is sponsored by: Cenzic Need to secure your web apps NOW? Cenzic finds more, "real" vulnerabilities fast. Click to try it, buy it or download a solution FREE today! http://www.cenzic.com/downloads ------------------------------------------------------------------------
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:58:14 EDT