If the SWF takes the destination in as a FlashVar, then the SWF may be used as an open redirector. SWFs have the capability to navigate the browser. XSF could be used in the presence of Flash HTML Injection or external SWF files when loadMovie* methods are used. This attack could result in XSS or in the modification of the GUI in order to fool a user to insert credentials on a fake Flash form. XSF may be performed by forcing a flawed SWF to load an external evil Flash file. Unexpected communications between the browser and SWF application, which could result in stealing data from the SWF application.SetVariable to set a static or public Flash object to a new string value with JavaScript.GetVariable to access Flash public and static objects from JavaScript as a string.An HTML page uses JavaScript to command an Adobe Flash movie, for example, by calling:.One movie loads another movie with loadMovie* functions (or other hacks) and has access to the same sandbox, or part of it.XSF occurs when the following scenarios are initiated from different domains: In particular, since Flash applications are often embedded in browsers, vulnerabilities like DOM-based Cross Site Scripting (DOM XSS) could be present in flawed Flash applications.Ĭross-Site Flashing (XSF) is a vulnerability that has a similar impact to XSS. ActionScript 3.0, introduced with Flash Player 9, is a rewrite of the language to support object orientated design.ĪctionScript, like every other language, has some implementation patterns which could lead to security issues. ActionScript 1.0 and ActionScript 2.0 are very similar with ActionScript 2.0 being an extension of ActionScript 1.0. There are three versions of the ActionScript language. Home > V42 > 4-Web Application Security Testing > 11-Client-side Testing Testing for Cross Site Flashing IDĪctionScript, based on ECMAScript, is the language used by Flash applications when dealing with interactive needs.

Javascript swf viewer