cure53 / Flashbang

Project "Flashbang" - An open-source Flash-security helper
https://cure53.de/flashbang
Mozilla Public License 2.0
206 stars 55 forks source link

Can't find FlashVars in a SWF file #16

Open irsdl opened 9 years ago

irsdl commented 9 years ago

Here is the SWF file. https://github.com/umbraco/Starterkits/blob/master/Overflow/Overflow/umbraco/Dashboard/Swfs/AIRInstallBadge.swf

Open it like this for example: AIRInstallBadge.swf?str_error=I am so vulnerable!&str_err_params=Click here for XSS!

cure53 commented 9 years ago

@tunnelshade One more example, do we know why and how this happens?

flabbergastedbd commented 9 years ago

@cure53 @irsdl It seems even the latest Shumway is is encountering an error (here) in playing this file. Can we report this flash file in the shumway issue tracker so that they might have a look and fix?