Flash Decompilation Challenege is Back

[mattkenefick]

Seems like people were interested... So give this a go.

https://www.seesaw-server.net/decompile/

The certificate on it is broken right now.. so you'll have to accept and such. Sorry about that. It's safe though, I promise.


I know ASF will be happy to see this is back.

--


oh yeah.. the idea is to get the file, copy the AS inside it and repost it here..

[mattkenefick]

I'm finding some issues with IE browsers, but I believe these are due to my certificate being broken. FireFox Mac/PC , Safari should all see it fine.

[mattkenefick]

Change:

FIXED: Netscape had a bug where RightClicking and going to "Media" tab .. File could be downloaded.
FIXED: Wireshark monitoring / Ethereal monitorinig
FIXED: Safari activity monitor downloading

[asf8]

Hi Matt,

Ok, so its back. But the question remains, is it just another thread for people to be guinea pig testers? Then you disappear again or are you actually gonna share the technique with others (tutorial/source) as promised 2 thread challenges ago? This makes the fifth unless I am am forgeting more ;-)

1.) How to prevent someone from decompiling your SWF files...
2.) Anti-decryption Method. Extension Thread
3.) Flash Decompilation Challenge
4.) NEW Flash Decompliation Challenge
5.) Flash Decompilation Challenege is Back (this thread)

I mean common Matt my hopes have been riding high and falling short for a half a year now chasing you around the forums to finish this up and disclose the technique.

Not to mention the many others whom are and would be interested. I would like to believe that this would come to a closure and you would share your goodness that you have crafted... but.....

In this thread you say - Are you afraid of releasing your Flash work?

Originally Posted by mattkenefick

I currently have some Flash projects I'm reluctant to make public for the fact they will be copied. ........ Anyone else feel this way?

Originally Posted by mattkenefick

Check my thread in Challenges. Might solve our issues. Find someone that can break it. If they cant.. then there we go.

So "we" as in your gonna release the technique to others? Common Matt, I am tired of chasing you :-) Share the goodness friend!

[mattkenefick]

Well, after further testing of the method before.. I found some bugs that wouldn't let it work. It would have been a great to slow the process.. but once it got found out and someone released the technique to bypass it.. so what would be the point?

I needed to test further and come up with a solution but my time with work and stuff became really tight and I wasn't able to work on it.

But recently I've thought about things and think I've found a new / improved system that will work. This is a new test that is separate from the previous ones. I'm asking people to break this one and see if this is "the one" or if it's back to the drawing board.

There's no sense in writing an article in something you know has potential flaws.

[mattkenefick]

NOTE: If you find anything with LoadVars.. that is the wrong file.

[asf8]

Update: I updated my previous post above, as I was mistaken, this is the 5th Thread you have had about this. I had forgotten 2 of them ;-)

Originally Posted by mattkenefick

Well, after further testing of the method before.. I found some bugs that wouldn't let it work. It would have been a great to slow the process.. but once it got found out and someone released the technique to bypass it.. so what would be the point? I needed to test further and come up with a solution but my time with work and stuff became really tight and I wasn't able to work on it. But recently I've thought about things and think I've found a new / improved system that will work. This is a new test that is separate from the previous ones. I'm asking people to break this one and see if this is "the one" or if it's back to the drawing board. There's no sense in writing an article in something you know has potential flaws.

I understand all that, I want you to know I appreciate your effort and coming back.... I still hope something will come out of all this (ie: a solid method, that will be shared). ;-)

Originally Posted by mattkenefick

NOTE: If you find anything with LoadVars.. that is the wrong file.

okie dokie.... see my next post below with the results I was able to get!

[asf8]

Unfortunately I think I solved it....

Start Results --------------------------------------------------------------------

1.) Ok so I go to this address -- https://www.seesaw-server.net/decompile/
2.) I see a quick text flash that reads something like -- asdfasdfasdf
3.) Then I see this text which is in some swf -- flyyyyyyy

Ok now for the nuts and bolts (specs):

When I go the the address I see a quick text flash that reads -- asdfasdfasdf
SSL -- Connection Encrypted: High-grade Encryption (AES-256 256 bit)

decompile.html

<script src="js/swfobject.js"></script>
<div id="hi">a</div>
<script>
// <![CDATA[

var so = new SWFObject('flash/initial.swf', "logo", "550", "400", "8", "#FFFFFF");
so.addParam("wmode", "transparent");
so.write("hi");

// ]]>
</script>

initial.swf - actionscript code

frame 1
var sv = new LoadVars();
var lv = new LoadVars();
lv.myurl = _root._url;
lv.sendAndLoad('swf.php', sv, 'POST');
sv.onLoad = function (success) {
if (success) {
_root.txt.text = this.response;
_root.loadMovie(this.response);
}
};

swf.php

displays a bunch of garbled text that wont display here!

...decompile/swf.php When I try to open the php file in a new window it read:

Dont hotlink this

Loaded SWF - displays this (on screen)

flyyyyyyy

Drum Roll --------------------------------------------------------------------

Loaded SWF - actionscript code

frame 1
hi.text = 'flyyyyyyy';
}
};

END Results --------------------------------------------------------------------

So how did I do?

[mattkenefick]

How did you come about that?

[asf8]

First --- is it right ?