Soroush Dalili (@irsdl) – سروش دلیلی

Web AppSec ninja, semicolon character enthusiast!

Skip to content
  • Home
  • Advisories
  • Archives
  • Privacy Policy

Flash it baby!

A guideline for penetration testers to find vulnerabilities in Flash files was presented in BSides Manchester 2016.

The slides can be found at:

Flash it baby! from Soroush Dalili

The PowerPoint file can be downloaded from:

https://soroush.secproject.com/downloadable/flash_it_baby_v2.0.pptx

This entry was posted in Security Articles and tagged flash, flash xss, swf on October 1, 2016 by Soroush Dalili.

Post navigation

← Common Security Issues in Web-Based Payment Systems (& Gambling Apps) Using Firefox Profiles in Security Testing →

Social

Follow me on:

Recent Posts

  • ASP.NET resource files (.RESX) and deserialization issues August 12, 2018
  • MS 2018 Q4 – Top 5 Bounty Hunter for 2 RCEs in SharePoint Online August 12, 2018
  • WAF Bypass Techniques – Using HTTP Standard and Web Servers’ Behaviour August 12, 2018
  • SMB hash hijacking & user tracking in MS Outlook August 12, 2018
  • Bug Bounty vs Penetration Testing (Simple Unbiased Comparison) February 20, 2018
  • Rare ASP.NET request validation bypass using request encoding February 20, 2018
  • Additional notes on “A Forgotten HTTP Invisibility Cloak” talk! September 1, 2017
  • Request encoding to bypass web application firewalls August 24, 2017
  • When a web application SSRF causes the cloud to rain credentials & more August 24, 2017
  • CVE-2017-8592 – XMLHttpRequest in IE followed 307 redirections with additional or customised headers August 24, 2017
  • Using Firefox Profiles in Security Testing May 1, 2017
  • Flash it baby! October 1, 2016
  • Common Security Issues in Web-Based Payment Systems (& Gambling Apps) June 11, 2015
  • Interesting XML Processing in Copy/Paste in Word and Outlook March 31, 2015
  • Non-Root-Relative Path Overwrite (RPO) in IIS and .Net applications February 23, 2015

Archives

  • August 2018 (4)
  • February 2018 (2)
  • September 2017 (1)
  • August 2017 (3)
  • May 2017 (1)
  • October 2016 (1)
  • June 2015 (1)
  • March 2015 (1)
  • February 2015 (2)
  • August 2014 (1)
  • July 2014 (2)
  • May 2014 (1)
  • April 2014 (1)
  • January 2014 (1)
  • October 2013 (3)
  • September 2013 (2)
  • April 2013 (1)
  • March 2013 (1)
  • November 2012 (2)
  • October 2012 (1)
  • August 2012 (1)
  • June 2012 (5)
  • April 2012 (2)
  • December 2011 (1)
  • May 2011 (1)
  • March 2011 (1)
  • January 2011 (2)
  • December 2010 (5)
  • September 2010 (1)
  • August 2010 (4)
  • July 2010 (1)
  • June 2010 (2)
  • May 2010 (3)
  • March 2010 (2)
  • January 2010 (2)
  • December 2009 (4)
  • November 2009 (5)
  • August 2009 (1)
  • February 2009 (2)
  • January 2009 (20)
  • December 2008 (1)

Blog Tags

  • Anti-XSS bypass
  • AntiXSS bypass
  • ASP.NET
  • block ip
  • block isp
  • bug bounty
  • Burp Suite Beautifier
  • bypass
  • Challenge
  • computer science vulnerabilities
  • Critical vulnerabilities
  • CSRF Attacks
  • ExternalInterface
  • ExternalInterface.call
  • FaceBook MobWars Cheat
  • file upload
  • file upload bypass
  • file uploader bypass methods
  • file uploader security bypass
  • flash
  • flash xss
  • hacking videos
  • iis
  • IIS File Extension Security Bypass
  • IIS Tilde bug
  • IIS tilde feature
  • IIS tilde vulnerability
  • jar protocol
  • Javascript
  • logical flaw
  • Microsoft IIS Vulnerability
  • penetration testing
  • Privacy
  • RCE
  • request encoding
  • Short name scanner
  • travian game
  • travian hack
  • travian online game
  • Unrestricted File Download
  • Unrestricted File Upload
  • WAF bypass
  • website vulnerability
  • XSS
  • XSS Vulnerability

RSS reddit.com netsec Channel Feed

  • Libssh Authentication Bypass Vulnerability Exploit (CVE-2018-10933) October 20, 2018
  • I wrote a tool/framework to automate to automate basic network recon. Tell me what you think! October 20, 2018
  • Health Data Security Approach Inspired by Blockchain Transactions October 20, 2018
  • Finding 0day with the World's Worst Android Kernel Fuzzer October 20, 2018
  • Defeating Cisco's Machine Learning Based Malware Traffic Detection Algorithm October 19, 2018

RSS SecurityFocus Feed

  • Vuln: cURL CVE-2018-1000300 Heap Buffer Overflow Vulnerability
  • Vuln: Apache Groovy CVE-2016-6814 Remote Code Execution Vulnerability
  • Vuln: Apache Struts CVE-2016-1182 Security Bypass Vulnerability
  • Vuln: OpenSSL CVE-2018-0732 Denial of Service Vulnerability
  • Bugtraq: [SECURITY] [DSA 4269-1] postgresql-9.6 security update

RSS Exploit-DB Feed

  • [webapps] Learning with Texts 1.6.2 - 'start' SQL Injection
  • [webapps] OwnTicket 1.0 - 'TicketID' SQL Injection
  • [webapps] PHP-SHOP master 1.0 - Cross-Site Request Forgery (Add Admin)
  • [remote] libSSH - Authentication Bypass
  • [remote] FLIR AX8 Thermal Camera 1.32.16 - Hard-Coded Credentials
Privacy Policy Proudly powered by WordPress