Flashbang
Flashbang copied to clipboard
cure53
Project "Flashbang" - An open-source Flash-security helper
it told me to report a bug in the thing, i tried to run the first Achievement Unlocked in the thing and it popped up with an error. idk why...
What is the problem, please? 
http://globalassets.starbucks.com/static/media/goalsandprogress/exploreTheStore.swf Uncaught TypeError: Cannot read property 'props' of undefined at Object.addTimelineChild [as _addTimelineChild] This swf file will break the runtime of flashbang
I've uploaded the file here: https://ufile.io/e6f You can try it by opening the file in your browser and adding "?clickTAG=http://www.example.com" to the end of the URL. Now click the image,...
Here is the SWF file. https://github.com/umbraco/Starterkits/blob/master/Overflow/Overflow/umbraco/Dashboard/Swfs/AIRInstallBadge.swf Open it like this for example: AIRInstallBadge.swf?str_error=I am so vulnerable!&str_err_params=Click here for XSS!
Heya, strangely, in this file, Flashbang cannot see the Flashvars. It needs to be noted, that other decompilers and tools have similar issues. http://s3.amazonaws.com/avlidienbrunn/wheres_the_xss.swf Can we specify what is happening...
- [ ] Inability to scroll horizontally incase of long lines of text in trace terminal - [ ] If possible one raw version and one interpreted version of the...
Decompiled source - [Here](http://www.showmycode.com/?ea58f07001ada8467472ff459ec4a8da)
Decompiled source : [Here](http://www.showmycode.com/?74cddabf381bd34dba1e16106cf017b0) The call is "YUI.applyTo" is not happening :O
This is to ensure that if swf tries to parse parameters from url our flashVars still work. Detection of flashVars is complex in this case though. **loaderInfo._url** has to be...