WebApp Sec: Re: SWF assesment

[jfvanmeter () comcast net]

swfscan might do what your looking for, I have to say that I've not used the tool alot.
http://www.cgisecurity.com/2009/03/swfscan-free-flash-security-tool.html


----- Original Message -----
From: "Serg B" <sergeslists () gmail com>
To: webappsec () securityfocus com
Sent: Thursday, September 3, 2009 1:46:08 AM GMT -05:00 US/Canada Eastern
Subject: SWF assesment

Hi all

Does anyone know of a tool that would allow me to query/execute
arbitrary methods within a currently loaded flash app?

E.g.

Go to a web page, server serves a SWF file, SWF file is loaded and
does whatever... I would like to be able to invoke individual methods
and properties inside the SWF file, while it's loaded in the web
browser.



Thanks
   Serg