![]() New stable version is created automatically by Travis CI when marking a revision in master branch with a tag in format versionxxx. On releasing new nightly build, previous nightly build is removed. These prerelease versions are called nightly builds. When a commit is pushed/merged into dev branch, new prerelease version is created automatically by Travis CI, gnujpdf - used for PDF export (Netbeans/Ant project)Īll notable changes are listed in the file CHANGELOG.md Deployment Nightly builds.ttf - used for TTF font export (Netbeans/Ant project).Swf2Exe - Stub for "Save to EXE" feature (Delphi 7 Project).nellymoser - used for Nelly Moser sounds decoding (Netbeans/Ant project).LZMA - used for SWF compression (Netbeans/Ant project).jsyntaxpane - code editor (Netbeans/Apache Maven project).jpproxy - proxy part of FFDec (Netbeans/Ant project).jpacker - used for compression of JavaScript Canvas scripts (Netbeans/Ant project).This library is built automatically with main project, but can be build also separately with its own Ant script. FFDec_lib - core of decompilation, SWF parsing, exporting.These libraries are placed in "libsrc" directory. There are few libraries which need to be built too. Launch4j.path = c:\\program files (x86)\\launch4j Nsis.path = c:\\program files (x86)\\NSIS You can make local copy of the sources with the following command: See installation section of wiki Source code How to get source Older versions and nightly builds are availabe on releases section How to install Download applicationįor downloading the app, see latest release. In the past (before 2018), we were using domain as HomePage, GitHub for source code, now we moved all information to Github. ![]() Application description and featuresįor information about using the software, list of features, etc., visit FFDec Wiki. Works with Java on Windows, Linux or MacOS. Extract resources, convert SWF to FLA, edit ActionScript, replace images, sounds, texts or fonts. Opensource flash SWF decompiler and editor. HP’s product was the clear winner, providing both the most complete functionality and features, ease of use, and detailed reports.Mainly modify SWFInputStream.java(D:\github\jpexs-decompiler\libsrc\ffdec_lib\src\com\jpexs\decompiler\flash\SWFInputStream.java)ĭi.name=tag.getName() JPEXS Free Flash Decompiler So the test is a fail due to Flash 10 being used in my application. “SWFIntruder purpose is to analyze a Flash application for version =< 8” It is a OWASP tool, and the site ( ) states: Installation was simple (100KB TGZ), which you extract, then simply point your browser (site states it requires Firefox 2.x) to the 127.0.0.1/…/index.html file. I don’t know if it’s because there was no vulnerabilities found or if the feature failed, but I obtained no results from the Analyze feature. There’s even an Analyze feature used to obtain a report of vulnerabilities in the application. In addition its UI is very intuitive, there’s even a tab to display the discovered URLS. Here is my original code: // Display read-only status information private function onNetStatus(event:NetStatusEvent):void mxml source code, these are missing from the SWFScan source.ġst thing to do, removed unused variables from my code! The look and very is very similar to Microsoft’s Application Verifier tool, a tool used to verify SDL compliance in unmanaged applications.įirst thing I noticed, I had unused strings, which the compiler stripped out of the final app. Installation was simple (6MB MSI), then you simply add the path to the SWF in the GUI and hit the “Get” button. This was no surprise given the recent version of the Supergroove application, and the dated Flare tool version. FLR file produced by Flare was some 31 lines of nothing. – ActionScript III (Flash 9) isn’t supported. – No images, sounds or text are extracted - ActionScript only. ![]() Installation was simple (100K EXE), then it is just a matter of right clicking the SWF file and selecting “Decompile”. Note, my SuperGroove Flash application was built with the latest Adobe Flash Builder 4 compiler, (Flex 4.1 SDK), and requires Flash 10.1 at a minimum in the client’s browser.Īll tests were run on a 圆4 Vista PC. ![]() I downloaded the SWF and ran each of the tools on it. The application used is a real world Flash Application for which I have the original code.Īlthough SuperGroove is in its alpha stage of development, now is as good a time as any to use these tools in order to determine:ġ- Which of them works best for pen testers.Ģ- And the tools may provide some insight as to possible issues in my Flash code, which I should fix. This article compares three popular Flash decompilers.
0 Comments
Leave a Reply. |