All Questions
12 questions
2
votes
1
answer
615
views
How can javascript files represent a flash-based XSS vulnerability?
I am hosting a static website (no PHP etc., just HTML/JavaScript/CSS) with a security-conscious hoster that proactively removes vulnerable files. This is fine with me.
However, their last report ...
- 4,143
1
vote
0
answers
178
views
Load non-existent flash file through service worker
Using Service Workers it is possible to load non-existent files with the fetch event handler, however this does not seem to work when loading flash files.
Is there any way in any browser to do this ...
- 446
1
vote
1
answer
630
views
Stealing user cookies with flash/actionscript
I know I am asking a dumb question here, but pardon me, I am learning.
I found two questions viz, How do I access cookies within Flash? and
How to Make a button send an email using AS3 automatically....
- 1,472
3
votes
1
answer
393
views
Is it possible to get a flash src after a redirect or an element inside an embed/object/iframe tag (cross-domain)?
The URL example.com/auth will automatically redirect the user (HTTP 302) to example.com/signed_in.SWF?token=SENSITIVE.
Is it possible for an attacker to steal the token, using javascript or flash, in ...
user61429
3
votes
1
answer
2k
views
How is Cross Site Flashing performed?
I read about cross site flashing in the OWASP testing guide. I know the difference between XSS and XSF. But what I am looking for is how attackers perform a XSF attack. How is it possible since there ...
- 2,097
0
votes
1
answer
312
views
What is the difference between XSS and Cross Site Flashing? [duplicate]
I want to know the basic differences between XSS and XSF
- 2,097
0
votes
1
answer
680
views
Flash Objects SWF security (ExternalInterface.call)
I am performing a penetration test against a website that uses Flash.
I found this piece of code:
url = ExternalInterface.call("window.document.location.href.toString") as String;
How it can be ...
- 131
4
votes
3
answers
2k
views
Flash ignores Content-Type header, allowing XSS?
I recently read that the Flash plugin ignores the Content-Type header in certain circumstances. In particular, you can give Flash a URL, and the Flash plugin will happily fetch the content at that ...
- 100k
3
votes
2
answers
870
views
Exploiting flash XSS holes
I have a URL to a flash file. Sample :-
http://abc.mydomain.com/Findme.swf
Now, there is a parameter called xmlpath as :-
http://abc.mydomain.com/Findme.swf?xmlPath=something.
Is it not that ...
- 1,522
1
vote
1
answer
610
views
Need an explanation of Cross-Site Flashing?
I found this - can anyone provide me examples of how these issues are exploited?
- 1,452
2
votes
2
answers
327
views
For untrusted user upload sites: what should the contents of crossdomain.xml and clientaccesspolicy.xml be?
Flash has a long history of ignoring MIME types of files and reading the file directly for executable content or for cross domain execution permissions. That means a malicious user can take advantage ...
- 51.1k
3
votes
1
answer
2k
views
XSS in SWF file
I have the following code in an SWF file that a vulnerability scanner marks as XSS:
// Action0
{
var __callResult_6 = getURL(_root.thankYou, "_self");
var __callResult_7 = stop();
...
name