I am bit of a newbie to Flash exploits but I have heard that they use sockets to connect to a C&C server. According to the administration guide, I can disable sockets like this:

DisableSockets = 1

This option enables or disables the use of the Socket.connect() and XMLSocket.connect() methods. I want to know what could be issues around it?

The issues that I am looking for, specifically, are if I harden by disabling sockets, will our existing SWFs work or not?

closed as unclear what you're asking by Anders, Xander, grochmal, kasperd, techraf Dec 29 '16 at 7:07

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • Could you clarify what you are asking here? What do you mean with "issues around it"? Are you afraid that you will break some functionality? Or do you want to protect against some exploit? Or something else? I do not understand the question. – Anders Dec 28 '16 at 15:37

No issues with disabling sockets. You can always whitelist socket connections

EnableSocketsTo = [ host name, IP address ]

if you have any whitelisted application using socket.connect. nothing breaks that way...

Not the answer you're looking for? Browse other questions tagged or ask your own question.