Friday, October 3, 2008

FlashBack

On this challenge a page with a flash object is displayed, but the flash didn't work here. First of all I took a look at the page's source code and found this line:
<param name="movie" value="FlashBack.swf">
I put the "FlashBack.swf" on the URL and it got like the following:
http://www.trythis0ne.com/levels/others/tt0login/FlashBack.swf
Ok, now the flash is playing and it ask for a username and a password.
I downloaded the flash object (on the browser: file -> save as) and saved it on my hd. Next step, I opened the flash file with a hexadecimal editor (there're tons of hex editors on the web, you can use one like this) and as you can see below, the username and password are explicit on the file:


Simply entry the user and password on the flash and that's all. =)

No comments: