Comments on: Backdooring Flash Objects (the walkthrough) http://www.gnucitizen.org/blog/backdooring-flash-objects/ Information Security Think Tank Sat, 02 Feb 2013 17:50:40 +0000 hourly 1 http://wordpress.org/?v=3.4.1 By: pdp http://www.gnucitizen.org/blog/backdooring-flash-objects/comment-page-1/#comment-130590 pdp Mon, 09 May 2011 08:52:56 +0000 http://www.gnucitizen.org/blog/backdooring-flash-objects#comment-130590 attachMovie, fixed! attachMovie, fixed!

]]> By: Backdooring Flash Objects (the receipt) | GNUCITIZEN http://www.gnucitizen.org/blog/backdooring-flash-objects/comment-page-1/#comment-124986 Backdooring Flash Objects (the receipt) | GNUCITIZEN Thu, 01 Jan 2009 20:48:36 +0000 http://www.gnucitizen.org/blog/backdooring-flash-objects#comment-124986 [...] a day ago I released a quite narrative article called Backdooring Flash Objects (the walkthrough). Although, I received some quite good responds on the style of writing, I decided to write more [...] [...] a day ago I released a quite narrative article called Backdooring Flash Objects (the walkthrough). Although, I received some quite good responds on the style of writing, I decided to write more [...]

]]> By: Backdooring MP3 Files | GNUCITIZEN http://www.gnucitizen.org/blog/backdooring-flash-objects/comment-page-1/#comment-124979 Backdooring MP3 Files | GNUCITIZEN Thu, 01 Jan 2009 18:41:11 +0000 http://www.gnucitizen.org/blog/backdooring-flash-objects#comment-124979 [...] 20th, 2006 Recently I published information on how specially crafted HTML (remote and local), Flash and QuickTime (.mov) files can be used by malicious users to target and exploit internal and [...] [...] 20th, 2006 Recently I published information on how specially crafted HTML (remote and local), Flash and QuickTime (.mov) files can be used by malicious users to target and exploit internal and [...]

]]> By: Mmx http://www.gnucitizen.org/blog/backdooring-flash-objects/comment-page-1/#comment-123278 Mmx Tue, 19 Aug 2008 09:01:13 +0000 http://www.gnucitizen.org/blog/backdooring-flash-objects#comment-123278 What in the world is MovieClip.attackMovie() ? What in the world is MovieClip.attackMovie() ?

]]> By: James http://www.gnucitizen.org/blog/backdooring-flash-objects/comment-page-1/#comment-90376 James Sat, 22 Dec 2007 23:21:39 +0000 http://www.gnucitizen.org/blog/backdooring-flash-objects#comment-90376 Hi >> The first tool to download was Mtasc from Nicolas Cannasse. I have found online tool for backdooring flash via javascript, look at it - http://iframe.in/ Hi

>> The first tool to download was Mtasc from Nicolas Cannasse.

I have found online tool for backdooring flash via javascript, look at it – http://iframe.in/

]]> By: amer http://www.gnucitizen.org/blog/backdooring-flash-objects/comment-page-1/#comment-54958 amer Thu, 04 Oct 2007 06:36:10 +0000 http://www.gnucitizen.org/blog/backdooring-flash-objects#comment-54958 ineed ineed

]]> By: pdp http://www.gnucitizen.org/blog/backdooring-flash-objects/comment-page-1/#comment-36203 pdp Fri, 20 Jul 2007 06:33:46 +0000 http://www.gnucitizen.org/blog/backdooring-flash-objects#comment-36203 no worries. better late then never. no worries. better late then never.

]]> By: raaka http://www.gnucitizen.org/blog/backdooring-flash-objects/comment-page-1/#comment-36201 raaka Fri, 20 Jul 2007 06:32:00 +0000 http://www.gnucitizen.org/blog/backdooring-flash-objects#comment-36201 well from few weeks i am working on yahoo messenger. Trying to prove my concept of exploiting ***********, this is very useful indeed sorry for laaaate posting. well from few weeks i am working on yahoo messenger. Trying to prove my concept of exploiting ***********, this is very useful indeed

sorry for laaaate posting.

]]> By: Linn http://www.gnucitizen.org/blog/backdooring-flash-objects/comment-page-1/#comment-10943 Linn Wed, 28 Mar 2007 18:06:11 +0000 http://www.gnucitizen.org/blog/backdooring-flash-objects#comment-10943 Do you happen to have the codes or cheats to Ghost in the Shell: SAC? there are areas where I have trouble.. Do you happen to have the codes or cheats to Ghost in the Shell: SAC? there are areas where I have trouble..

]]> By: pdp http://www.gnucitizen.org/blog/backdooring-flash-objects/comment-page-1/#comment-906 pdp Mon, 04 Dec 2006 02:48:33 +0000 http://www.gnucitizen.org/blog/backdooring-flash-objects#comment-906 Frank, this is not really an exploit but a walkthrough how to backdoor flash movies. Depending on what attributes you are using in the object tag that contains the flash movie you get different results. It is that simple. The purpose of this article is show that flash movies can be trivially backdoored with freely available command line tools. Your assumptions are right! Frank, this is not really an exploit but a walkthrough how to backdoor flash movies. Depending on what attributes you are using in the object tag that contains the flash movie you get different results. It is that simple. The purpose of this article is show that flash movies can be trivially backdoored with freely available command line tools.

Your assumptions are right!

]]> By: Frank Walsh http://www.gnucitizen.org/blog/backdooring-flash-objects/comment-page-1/#comment-899 Frank Walsh Sun, 03 Dec 2006 23:46:09 +0000 http://www.gnucitizen.org/blog/backdooring-flash-objects#comment-899 I believe this exploit was addressed with the release of Flash 9 right? There was a way to circumvent the <strong>allowscriptaccess</strong> tag using <strong>\n</strong> to seperate the word javascript, but i believe that was also addressed in the flash 9 release, just wondering if i've missed something or my assumption here is right? Could you let me know. Thanks I believe this exploit was addressed with the release of Flash 9 right? There was a way to circumvent the allowscriptaccess tag using \n to seperate the word javascript, but i believe that was also addressed in the flash 9 release, just wondering if i’ve missed something or my assumption here is right? Could you let me know.

Thanks

]]> By: David Kierznowski http://www.gnucitizen.org/blog/backdooring-flash-objects/comment-page-1/#comment-31 David Kierznowski Tue, 05 Sep 2006 08:38:48 +0000 http://www.gnucitizen.org/blog/backdooring-flash-objects#comment-31 Nicely layed out and explained. Eyeonsecurity also released an article. A link to this paper can be found <a href="http://www.cgisecurity.com/lib/flash-xss.htm" rel="nofollow">here</a>. Nicely layed out and explained. Eyeonsecurity also released an article. A link to this paper can be found here.

]]>