bugtraq - The first release of SWFIntruder is out !

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Tue, 04 Dec 2007 17:07:22 +0100
From: Stefano Di Paola <stefano.dipaola@...dedsecurity.com>
To: Btq <bugtraq@...urityfocus.com>
Cc: research@...dedsecurity.com
Subject: The first release of SWFIntruder is out !

I am proud to announce first release of SWFIntruder.
SWFIntruder (pronounced Swiff Intruder) is the first tool specifically 
developed for analyzing and testing security of Flash applications at
runtime.
It helps to find flaws in Flash applications using the methodology
originally described in Testing Flash Applications [1]
and in Finding Vulnerabilities in Flash Applications [2] .

Some neat feature:
    * Basic predefined attack patterns.
    * Highly customizable attacks.
    * Highly customizable undefined variables.
    * Semi automated Xss check.
    * User configurable internal parameters.
    * Log Window for debugging and tracking.
    * History of latest 5 tested SWF files.
    * ActionScript Objects runtime explorer in tree view.
    * Persistent Configuration and Layout. 

SWFIntruder is hosted @ OWASP:
https://www.owasp.org/index.php/Category:SWFIntruder

and is sponsored by Minded Security (http://www.mindedsecurity.com)

Check it out and let me know!
Any comments will be appreciated.

References:
[1]
http://www.owasp.org/images/8/8c/OWASPAppSec2007Milan_TestingFlashApplications.ppt

[2]
http://www.owasp.org/images/d/d8/OWASP-WASCAppSec2007SanJose_FindingVulnsinFlashApps.ppt

Regards, 
Stefano
-- 
Stefano Di Paola
Chief Technology Officer
Director of Minded Security Research Labs

Minded Security - Application Security Consulting

www.mindedsecurity.com