stumbled across this page while researching a virus my scanner found...
http://www.hackers.nl/2008/how-to-intru ... etworks-2/while it's over my head i gather it is a 'how to sneak in' with Flash.
Anyone know if they're speaking of Flash Player? Perhaps i'll uninstall that?
You can compile this code by doing:
thex00@hdnl:/secret/GordonProject$ mtasc -swf myWorm.swf -main backdoor.as
Add that code to another flash movie:
thex00@hdnl:/secret/GordonProject$ swfcombine -o demo.swf -T myWorm.swf myBanner.swf
Now how about some local network scanning to ice the cake? The socket handling in ActionScript 3, allows you to scan TCP ports (Flash is not designed for usage with UDP), through the SecurityErrorEvent object. This special object in flash is an exception, like you have in Java,
that is ‘thrown’. The flaw in this design however that it is thrown immediately when a connection failed (closed ported), so if the Movie isn’t allowed AND doesn’t get a SecurityErrorEvent within seconds the port is likely to be open.
Here is an example of how such a scanner would look like:
/* (* ScannerSkeleton.as *) ActionScript 3 */
protected var host:String;
protected var port:Number;
protected var sock:Socket;
public class Main
{
public function Main():void
{
conn = new LocalConnection();
conn.allowDomain(’*');
sock = new Socket();
sock.addEventListener(SecurityErrorEvent.SECURITY_ERROR, onSecurityError);
sock.connect(host, port)
}
}
Not so great is the spawning of child processes inside the flashmovie, which can cause the movie to hang the browser or even worse, the Operating System. Because Flash allows you to scan inside the network, you should try to find the router, which by default uses the Telnet protocol but these days comes with a web interface. As I’ve mentioned
before, it is perfectly possible to reconfigure the router from within Flash, or even worse… Enable UPnP!
Finally, some of the conditions that you need to meet when hacking with Flash. The advantage is that Flash data is stored locally, the challenge is that you got by default only 100Kb per host to work with (a lot less than that actually, its more like 4-5Kb that you can really use for your abusive motivations)… but it rarely gets deleted
and doesn’t have an expiration date, so not like cookies.
Why hack with Flash? Because you can! Hope you enjoyed it.
a.
Cogito ergo doleo.
