Decrypting an SWF file

[i_am_parag]

Hi,

This is more of a challenge and less of a problem. One of my friend has altered the header of an swf file using an exe generated using visual foxpro. This results into inability by any program (even flash player itself) to run that swf file. Only, when he decrypts the file using the same exe, the file is back into its original manner.

Do we have any other tool/method/way to do the decryption?

With warm regards,

Parag Shah

[CyanBlue]

Howdy... :)

I don't know what your friend did, but if you do not know how he encrypted the SWF, your chance of decrypting it is very slim... Probably a brute force will be the time consuming project to do so...

As for the tool... Whichever software that can read the SWF file header and write a new SWF file should be able to do it... and you already mentioned Visual Fox Pro which should do the job just fine... But that's not what you are really asking, is it??? :)

[i_am_parag]

Hi Cyanblue,

Exactly. I want other decrypter tool/s.

With warm regards,

Parag Shah

[baby_annie]

You can alter the swf file using Sothink SWF quicker.

[bugmenot]

Hi Cyanblue,

Exactly. I want other decrypter tool/s.

With warm regards,

Parag Shah


Hey i wants too the same tool that can decrypt swf file. So i can see its actions....................

[bugmenot]

You can alter the swf file using Sothink SWF quicker.

No it can decompile the swf file. But cant decompile the code if that is encrypted using swfencrypt 2.0 or someone else.

[orange gold]

sothlink also gets that.. its a setting xD

[madgett]

A swf file is just a binary file sitting on your hdd. You can use java, c++, c#, python, perl, etc... just look up the flash .swf specifications and it will tell you which bytes to look for to find the header location and if they are missing you can just inject them into the .swf using a text buffer.

[tertiary77u]

I was going to suggest sothink swf decrypter as well, but i see that is not your problem. I would go with madgett's suggestion or just have your friend decrypt it for you and send you that file.

[kanui]

I have been using ASV for about 7 years. I now have an swf file that has been encrypted that asv 528 cannot decrypt. I will post the swf online and if someone can decrypt the action script and still have a working swf, I will pay 20 bux. the SWF is located at http://www.jorotek.com/rpmnew.swf

[RubyCoder]

I have been using ASV for about 7 years. I now have an swf file that has been encrypted that asv 528 cannot decrypt. I will post the swf online and if someone can decrypt the action script and still have a working swf, I will pay 20 bux. the SWF is located at http://www.jorotek.com/rpmnew.swf

I can.

PM me.

[orange gold]

well i used sothlink and it decomiles but the code is screwed over

[realschizo]

I have been using ASV for about 7 years. I now have an swf file that has been encrypted that asv 528 cannot decrypt. I will post the swf online and if someone can decrypt the action script and still have a working swf, I will pay 20 bux. the SWF is located at http://www.jorotek.com/rpmnew.swf


I can too :) on my site www.konkursy-hack.na11.pl is free tool (SWF unprotector 2.3) which can decrypt swfs which are encrypted by SWF Encrypt :) It is free but it extract only AS code :)
So if someone is interested ....
and here You can read how decrypt swfs like Your @kanui, but it is written in Polish :) http://www.konkursy-hack.na11.pl/articles.php?article_id=4

sample decrypted Your code:


// Action script...

// [Action in Frame 139]
stop ();
TextField = _root.globals.chat_tos;
if (_root.globals.loginstatus == "true")
{
tellTarget(_root.indicator.jumperSwitch)
{
gotoAndStop(2);
tellTarget("")
{
} // End of TellTarget
} // End of TellTarget
} // end if
_root.globals.ImAtPit = 0;
_root.indicator.RaceTrack.carphoto2._visible = false;
_root.indicator.RaceTrack.carphoto1._visible = false;
_root.clientRecord.Round = 0;
_root.globals.cur_rnd = _root.clientRecord.Round;
_root.clientRecord.LastET = 9.999900E+001;
_root.clientRecord.LastRT = 0;
if (_root.clientRecord.Status != 3)
{
_root.clientRecord.Status = 3;
_root.client_nc.call("msgFromClient", null, "ready", _root.clientRecord);
} // end if




You can download too, my SWF Reader http://realswfreader.sourceforge.net/ which can decrypt Secure SWF :)

so don't pay let's use my freeware soft :)

[Xegnma]

realschizo...I ran your program and the GUI came up. However in the console pane I keep getting null pointer exceptions, even with unencrypted swfs.

[realschizo]

realschizo...I ran your program and the GUI came up. However in the console pane I keep getting null pointer exceptions, even with unencrypted swfs.

I think You download old version maybe 1.1 ? Current version is 1.2.2, program is still develop so there are some bugs sometimes...

If You have problem with opening swf file just send me it on konkursy.hack@gmail.com and I check it. Or You can post this problem on http://sourceforge.net/forum/?group_id=258540

I test program on AS3 AS2 files and it works fine...
It can decrypt part of swf (AS3 only!) encrypted by Secure SWF, but it can't decrypt fully encrypted swf.
Now I work out include SWF Encrypt, decyptor for AS2 and later AS3..

SWF Reader can return some errors if file is big. So You can increase memory for java virtual machine:
- Xmx128m, -Xmx256m, -Xmx512m, -Xmx764m and -Xmx1024m

for example You can run program: java -Xmx512m -jar programName

[djkadir]

I disassembled the swfencrypt program.
Here is asm codes
asm codes are nearly
Here is a torrent link 2Mb
http://www.mininova.org/tor/2504667

Here is piratebay torrent link..
http://thepiratebay.org/torrent/4858619

[realschizo]

I have been using ASV for about 7 years. I now have an swf file that has been encrypted that asv 528 cannot decrypt. I will post the swf online and if someone can decrypt the action script and still have a working swf, I will pay 20 bux. the SWF is located at http://www.jorotek.com/rpmnew.swf

new SWF Reader 1.2.4 can decrypt 99% of swf. :)

have fun :)

[asf8]

:eek: Email and Web addresses with "hack" in them, links to "thepiratebay" & "torrents" ? What the heck is going one in this thread? :confused:

Anyway I looked at your Java App, it would not even open on my mac, and when I view it on a PC and tried to run it, it asked a "what website..." question. Why do you need to input a web address to use an application feature. You dialing home or something?

I can just imagine all applications asking questions to proceed, I doubt computers would be what they are today as people would get tired of that pretty quick, rather pointless in any practical terms to have to answer questions as you go about a user interface.

[realschizo]

:eek: Email and Web addresses with "hack" in them, links to "thepiratebay" & "torrents" ? What the heck is going one in this thread? :confused:

Anyway I looked at your Java App, it would not even open on my mac, and when I view it on a PC and tried to run it, it asked a "what website..." question. Why do you need to input a web address to use an application feature. You dialing home or something?

I can just imagine all applications asking questions to proceed, I doubt computers would be what they are today as people would get tired of that pretty quick, rather pointless in any practical terms to have to answer questions as you go about a user interface.

You can have a problem to run program on Mac because You must have java 1.6 but therei is no java 1.6 to mac ;) only 64bit... so check Your java version.

are You scared "hack" word ? lol ;) If You don't know there are white, black, grey hackers if You know what it means...

If You don't like my question/program just write Yourself program which can decrypt swfs ;) if You can ? but I don't think... or if You are smart You can compile sources without question...
I think You don't value my work.. I release program for free of charge.. but I could earn money.

[asf8]

You can have a problem to run program on Mac because You must have java 1.6 but there is no java 1.6 to mac, only 64bit... so check Your java version.

I beleive there is in fact Java 1.6 for Mac, but I think its only available in OSX 10.5+ and possibly only Intel based machines as well.

are You scared "hack" word ? lol If You don't know there are white, black, grey hackers if You know what it means...

That was more of an intended joke of sorts. And you forgot "scipt kiddies" & "hacktivists", and many more... in your list of hacker terms.

If You don't like my question/program just write yourself program which can decrypt swfs if You can ? but I don't think... or if you are smart you can compile sources without question... I think You don't value my work.. I release program for free of charge.. but I could earn money.

I never de-valued your work, if you felt that way I am sorry, that was not my intention. It's just, what is the point of having to answer a question to use a feature in a application? Makes little since. Whats the actual correct address for the answer? Why not simply post the correct answer here or as part of the downlaod readme in clear fashion, instead of a riddle? But again whats the point, if the need for asking a question is that ingenious and a needed feature atleast explain why and what the point is for doing so.

Again I was not intending to offend you. Interesting project, is it for/part of your university studies?

[realschizo]

Sorry maybe I misunderstand Your sentence ;)
I build program on windows so and java 1.6... I think problem is in java version.

Answer is on SWF reader title, on about dialog and in source code... The answer is: www.konkursy-hack.pl I think that when I can build brogram so You can find answer ;) Don't be so lazy :P

I build program because this tool help me analyze swf files...I don't want to force somebody to pay for my tool or something like that. I think that if someone like my tool, than can donate my project...
But I will use my tool in a master’s thesis, a master’s dissertation :]

Readme is very bad, there is no tutorial for SWF Reader, I know that but I only one person (me) develop this program so there is no time...Program is beta version, maybe if I develop final version I try to improve readme and make some tutorial etc.
:)

I don't know do You understand my very bad English ;)