Web Hack List

Other nomination

Backdooring Flash Objects

pdp's narrative walkthrough of backdooring a SWF entirely from the command line: compile an ActionScript class whose main calls getURL("javascript:...") with MTASC, then bind it in front of an untouched movie using swfcombine so the original animation still plays. Covers the swfmill library route and why attaching through attachMovie breaks preloaders.

Record

Researcher
pdp

In the archive

Tags

This page is the archive's own catalogue record. The research is the work of pdp, first published at the original source. Preserved copies are kept so the citation survives its host.