Comments on: A Lazy Pen Tester’s Guide to Testing Flash Applications http://www.ivizsecurity.com/blog/web-application-security/testing-flash-applications-pen-tester-guide/ The Authoritative Blog on Penetration Testing Fri, 27 Aug 2010 18:23:23 +0000 hourly 1 http://wordpress.org/?v=3.0.1 By: Flash vs Silverlight http://www.ivizsecurity.com/blog/web-application-security/testing-flash-applications-pen-tester-guide/comment-page-1/#comment-4119 Flash vs Silverlight Fri, 27 Aug 2010 18:23:23 +0000 http://www.ivizsecurity.com/blog/?p=121#comment-4119 A good topic to share. In my view using Flash application is not a good deal now a days because Microsoft has lunched silverlight which is good comparison for flash A good topic to share. In my view using Flash application is not a good deal now a days because Microsoft has lunched silverlight which is good comparison for flash

]]> By: John Gag http://www.ivizsecurity.com/blog/web-application-security/testing-flash-applications-pen-tester-guide/comment-page-1/#comment-3954 John Gag Wed, 28 Jul 2010 16:45:24 +0000 http://www.ivizsecurity.com/blog/?p=121#comment-3954 Great article with loads of information. Thanks again! Great article with loads of information. Thanks again!

]]> By: babor hossain http://www.ivizsecurity.com/blog/web-application-security/testing-flash-applications-pen-tester-guide/comment-page-1/#comment-3857 babor hossain Sat, 19 Jun 2010 06:53:51 +0000 http://www.ivizsecurity.com/blog/?p=121#comment-3857 Most important post .Thanks for sharing Most important post .Thanks for sharing

]]> By: シティゴールド http://www.ivizsecurity.com/blog/web-application-security/testing-flash-applications-pen-tester-guide/comment-page-1/#comment-3734 シティゴールド Thu, 20 May 2010 07:22:18 +0000 http://www.ivizsecurity.com/blog/?p=121#comment-3734 I just stumbled upon your blog and wanted to say that I have really enjoyed reading your blog posts. Any way I'll be subscribin I just stumbled upon your blog and wanted to say that I have really enjoyed reading your blog posts. Any way I’ll be subscribin

]]> By: Penetration Test http://www.ivizsecurity.com/blog/web-application-security/testing-flash-applications-pen-tester-guide/comment-page-1/#comment-3298 Penetration Test Sun, 14 Mar 2010 07:58:32 +0000 http://www.ivizsecurity.com/blog/?p=121#comment-3298 One of the most comprehensive lists I have seen. One of the most comprehensive lists I have seen.

]]> By: Open Source Flash#5: AS3 Sockets and Security | Mtdjing http://www.ivizsecurity.com/blog/web-application-security/testing-flash-applications-pen-tester-guide/comment-page-1/#comment-3200 Open Source Flash#5: AS3 Sockets and Security | Mtdjing Thu, 25 Feb 2010 02:31:12 +0000 http://www.ivizsecurity.com/blog/?p=121#comment-3200 [...] Regarding Flash/AS3… Well they did not design a secure system thats for sure. But this post is more to discuss the Socket implementation and some minor aspects that might help those in need, rather than reflecting upon security on flash (take a look at this if you’re on that page and test your apps firmly, like this). [...] [...] Regarding Flash/AS3… Well they did not design a secure system thats for sure. But this post is more to discuss the Socket implementation and some minor aspects that might help those in need, rather than reflecting upon security on flash (take a look at this if you’re on that page and test your apps firmly, like this). [...]

]]> By: smith White http://www.ivizsecurity.com/blog/web-application-security/testing-flash-applications-pen-tester-guide/comment-page-1/#comment-3190 smith White Tue, 23 Feb 2010 00:30:31 +0000 http://www.ivizsecurity.com/blog/?p=121#comment-3190 Hi, interesting post and thanks for sharing Underestimating risk is a constant threat in security .About penetration testing read more here http://www.eccouncil.org/certification/licensed_penetration_tester.aspx Smith Hi,

interesting post and thanks for sharing Underestimating risk is a constant threat in security .About penetration testing read more here

http://www.eccouncil.org/certification/licensed_penetration_tester.aspx

Smith

]]> By: Prathamesh http://www.ivizsecurity.com/blog/web-application-security/testing-flash-applications-pen-tester-guide/comment-page-1/#comment-3163 Prathamesh Thu, 18 Feb 2010 17:27:13 +0000 http://www.ivizsecurity.com/blog/?p=121#comment-3163 @ Original comment: Forgot mention that i need an elaboration on server side testing. @ Original comment:

Forgot mention that i need an elaboration on server side testing.

]]> By: Prathamesh http://www.ivizsecurity.com/blog/web-application-security/testing-flash-applications-pen-tester-guide/comment-page-1/#comment-3162 Prathamesh Thu, 18 Feb 2010 17:25:41 +0000 http://www.ivizsecurity.com/blog/?p=121#comment-3162 Hi Rudrak, Your article is very nice, I am confused about one thing. When I went through the article. I saw that so far I am doing only client side testing for Flash. If you can elaborate on this, I am also confused about AMF. Thanks in advance, Prathamesh Hi Rudrak,

Your article is very nice, I am confused about one thing. When I went through the article. I saw that so far I am doing only client side testing for Flash. If you can elaborate on this, I am also confused about AMF.

Thanks in advance,
Prathamesh

]]> By: Bookmarks for January 17th through February 15th at Ed Smiley’s Blog http://www.ivizsecurity.com/blog/web-application-security/testing-flash-applications-pen-tester-guide/comment-page-1/#comment-3154 Bookmarks for January 17th through February 15th at Ed Smiley’s Blog Tue, 16 Feb 2010 03:04:29 +0000 http://www.ivizsecurity.com/blog/?p=121#comment-3154 [...] Testing Flash Applications | A Lazy Pen Tester’s Guide – While there are some tools and white papers available, I could not find many authoritative resources which wraps the entire spectrum of flash security testing of RIA applications. So here is an endeavor to detail out the steps of testing. I will keep this post only to outline the essential steps or points. [...] [...] Testing Flash Applications | A Lazy Pen Tester’s Guide – While there are some tools and white papers available, I could not find many authoritative resources which wraps the entire spectrum of flash security testing of RIA applications. So here is an endeavor to detail out the steps of testing. I will keep this post only to outline the essential steps or points. [...]

]]>