HP's Free Adobe Flash Vulnerability Scanner

Catalyst writes "SWFScan is a free Flash security tool (download here), released by HP Software, which decompiles all versions of Flash and scans them for over 60 security vulnerabilities. The scan detects things like XSS, SQL inside of the Flash app, hard-coded authentication credentials, weak encryption, insecure function calls, cross-domain privilege escalation, and violations of Adobe's security recommendations. There is also this video explaining a real, and amusing, attack against a Flash app. These issues are fairly widespread, with over 35% of SWF applications violating Adobe security advice."

Comments

SFWScan

[MrEricSir]

Can they also make SFWScan?

That would help avoid potentially embarrassing situations at work.

Re:SFWScan

[Shakrai]

Sure, here's some code to do that:

if (strcmp(link.postedby, "Anonymous Coward") == 0 || strstr(link.url, "goatse" != NULL) return false;
else return true;

Re:What good is it?

[Pharmboy]

And the guy in the video has a plate of burgers to prove they did it anyway.