Flash Security, OWASP Chennai

Test.Security(Flash); Lavakumar K GISA, Royal Bank of Scotland Lavakumar[dot]in[at]gmail[dot]com 21 st March, 2009

About me: ,[object Object],[object Object],[object Object],[object Object],[object Object]

Imagine you are testing a web application and it has flash content. What would you do? ,[object Object],[object Object],[object Object],[object Object],[object Object]

What is Flash ,[object Object],[object Object],[object Object],[object Object]

The moment of truth ,[object Object]

Logic in Flash ,[object Object],[object Object],[object Object],[object Object],[object Object]

Flash is powerful ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Areas of focus ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

_global and _root objects ,[object Object],[object Object],[object Object],[object Object]

Example: ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Cross-site scripting ,[object Object],[object Object],[object Object],[object Object],[object Object]

Vulnerable functions a.k.a PDNF ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Other means of Cross-site scripting ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Cross-site flashing (XSF) ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Cross Domain concerns ,[object Object],[object Object],[object Object],[object Object]

Crossdomain.xml ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

How it works User is logged in to www.a.com User visits www.b.com and a SWF file is loaded www.a.com Web server Browser http://www.a.com/profile.jsp www.a.com Cookie HTTP 200 OK : profile.jsp

Crossdomain.xml ,[object Object],[object Object],[object Object],[object Object],[object Object]

Allowscript access ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

What it does ,[object Object],[object Object],[object Object],[object Object],[object Object]

Localconnection ,[object Object],[object Object],[object Object],[object Object]

Security.allowDomain() ,[object Object],[object Object],[object Object],[object Object]

Sensitive data storage ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Flash decompilation with Flare ,[object Object],[object Object],[object Object],class Demo { static var app : Demo; function Demo() { var username = "administrator"; var password = "p@ssw0rd"; //--------------------------cut here -------------------------- movie 'talk.swf' { // flash 7, total frames: 1, frame rate: 20 fps, 800x600 px, compressed movieClip 20480 __Packages.Demo { #initclip if (!Demo) { _global.Demo = function () { var v2 = 'administrator'; var v3 = 'p@ssw0rd'; }; //--------------------------cut here --------------------------

Encryption in Flash ,[object Object],[object Object],[object Object],[object Object],[object Object]

Attacking the server ,[object Object],[object Object],[object Object],[object Object]

Credits, References and further reading ,[object Object],[object Object],[object Object],[object Object],[object Object]

Flash Security, OWASP Chennai

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Viewers also liked

Viewers also liked (6)

Similar to Flash Security, OWASP Chennai

Similar to Flash Security, OWASP Chennai (20)

Recently uploaded

Recently uploaded (20)

Flash Security, OWASP Chennai