Computer Security Is My Interest!

Soroush Dalili's blog – بلاگ سروش دلیلی – @irsdl

Skip to content
  • Home
  • About Me
  • Advisories
  • Contact Me
  • FAQs
  • Links
  • Projects
    • Cross Site Request Forgery (CSRF) PoC Template (by Javascript) [not supported]
    • Excel Advanced Search Add-In Application [not supported]
    • Hall of Fame – Challenge Series 1

Flash it baby!

A guideline for penetration testers to find vulnerabilities in Flash files was presented in BSides Manchester 2016.

The slides can be found at:

Flash it baby! from Soroush Dalili

The PowerPoint file can be downloaded from:

https://soroush.secproject.com/downloadable/flash_it_baby_v2.0.pptx

This entry was posted in Security Articles and tagged flash, flash xss, swf on October 1, 2016 by Soroush Dalili.

Post navigation

← Common Security Issues in Financially-Oriented Web Applications Using Firefox Profiles in Security Testing →

Social

Follow me on:

Recent Posts

  • Using Firefox Profiles in Security Testing
  • Flash it baby!
  • Common Security Issues in Financially-Oriented Web Applications
  • Interesting XML Processing in Copy/Paste in Word and Outlook
  • Non-Root-Relative Path Overwrite (RPO) in IIS and .Net applications

Archives

  • May 2017
  • October 2016
  • June 2015
  • March 2015
  • February 2015
  • August 2014
  • July 2014
  • May 2014
  • April 2014
  • January 2014
  • October 2013
  • September 2013
  • April 2013
  • March 2013
  • November 2012
  • October 2012
  • August 2012
  • June 2012
  • April 2012
  • December 2011
  • May 2011
  • March 2011
  • January 2011
  • December 2010
  • September 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • March 2010
  • January 2010
  • December 2009
  • November 2009
  • August 2009
  • February 2009
  • January 2009
  • December 2008

RSS reddit.com netsec channel

  • CrackMe Solution - [A]dvanced Keygenme by sd333221 August 21, 2017
  • gOSINT - OSINT framework in golang August 21, 2017
  • SQLMAP-Detecting and Exploiting SQL Injection- A Detailed Explanation August 21, 2017
  • How I Accidentally Framed Myself for a Hacking Frenzy August 21, 2017
  • Revisiting SOHO Router Attacks by Álvaro Folgado Rueda and José Antonio Rodríguez García and Iván Sanz de Castro August 21, 2017

RSS New Vulnerabilities

  • Vuln: GraphicsMagick CVE-2017-11642 Denial of Service Vulnerability
  • Vuln: bzip2 '/bzip2recover.c' Denial of Service Vulnerability
  • Vuln: Ghostscript CVE-2017-8291 Multiple Remote Code Execution Vulnerabilities
  • Vuln: Adobe Flash Player APSB16-10 Multiple Unspecified Memory Corruption Vulnerabilities
  • Bugtraq: [SECURITY] [DSA 3948-1] ioquake3 security update
  • Bugtraq: [SECURITY] [DSA 3946-1] libmspack security update
  • Bugtraq: [SECURITY] [DSA 3928-2] firefox-esr security update
  • Bugtraq: Microsoft Resnet - DNS Configuration Web Vulnerability
  • More rss feeds from SecurityFocus

Blog Tags

Anti-XSS bypass AntiXSS bypass block ip block isp Burp Suite Beautifier Burp Suite Extension bypass Challenge close advertisment computer science vulnerabilities Critical vulnerabilities CSRF Attacks ExternalInterface ExternalInterface.call FaceBook MobWars Cheat file upload file upload bypass file uploader bypass methods file uploader security bypass flash flash xss free web hosting hacking videos iis IIS Tilde bug IIS tilde feature IIS tilde vulnerability jar protocol Javascript logical flaw Microsoft IIS Vulnerability National ID Code Algorithm National ID Code JavaScript penetration testing Privacy Short name scanner travian game travian hack travian online game Unrestricted File Download Unrestricted File Upload weblogs website vulnerability XSS XSS Vulnerability
Proudly powered by WordPress