Crack my Flash

talk open source
1

Here’s my attempt at Flash Security. Crack it if you want…!

Feedback much appreciated

2

what do i do? what do you mean by crack it?

_root.attachMovie(“ASFile”, “ASFile1”, _global.number);

3

Sorry. I may not have explained myself too well here. I think I may have come up with a method for securing my flash content within a preloader here.

You obviously just decompiled my “TestPreLoader.swf” file, but all you have there is a call to an MC within the preloader movie.

What I want to know is can anyone work out the name of the SWF file that I am loading externally into this to give the “TESTMOVIE” text that you see displayed when you run the original preloader.

I’m looking for the NAME of the SWF being Loaded. Happy Hunting!!!:sure:

4

http://www.biznuge.co.uk/sausage_and_beans.swf ?

_Michael

5

muahahahaha… bugger!!

wanna tell me how?=)

6 

movie 'C:\Flash\decompiled\TestPreLoader.swf' {
// flash 8, total frames: 1, frame rate: 12 fps, 550x400 px, compressed

  movieClip 1 ASFile {

    #initclip
      Object.registerClass('ASFile', ASFile);
    #endinitclip
  }

  frame 1 {
    _root.attachMovie('ASFile', 'ASFile1', _global.number);
  }

  movieClip 2 __Packages.ASFile {

    #initclip
      if (!_global.ASFile) {
        var v1 = function () {
          super();
          this._parent.loadMovie('http://www.biznuge.co.uk/sausage_and_beans.swf');
        };

        _global.ASFile = v1;
        _global.ASFile extends MovieClip;
        var v2 = v1.prototype;
        ASSetPropFlags(_global.ASFile.prototype, null, 1);
      }
    #endinitclip
  }
}

Honestly, it didn’t take much at all, I just used Flare.

Take Care.
_Michael

7

lol there is almost no flash security so don’t get your hopes up your best bet is to encrypt it

8

I didn’t thikn it would take long for someone to crack it, but I’m amazed it took so little effort Michael.

Oh well, If nothing else it introduced me to FLARE! Thats some pretty sweet freeware software. Works heaps better for decompiling than SoThink, which didn’t pick up the AS file include at all!

Nice one. Cheers!

9

there’re lots of good ways to encrypt your movie’s location :S

10

you can also store the movies location in a file, and call it header.jpg, even though it has the .jpg extension you can still load variables from it.

_Michael

11

i would store it in encoded form or use PHP (or any server-side) to verify the referer :slight_smile:

but still - hiding the location is no solution… user can trace headers to get movies’ location

12

yeah, you’re never going to prevent someone who really wants to get that info, from getting it. You can only do your best to make the process hard enough that they’ll give up.

Take Care.
_Michael

13

or just code really badly like i usually use all my variables with like 2 letters… i sometimes forget what they mean so i comment a ton… but comments arnt seen when its decompiled so.

14

I found the swf using SoThink. It’s in the action of sprite 2

15

using variables w/2letters is a good idea.

“Anything built by man can also be destroyed by man”
-not sure where I heard that

16

Very true… It’s a cycle man is in for years… develope one solution then anti-solution then anti-anti-solution goes for ever :slight_smile:

But nice try… One thing I would like to mention here… have you ppl heard of orisinal.com I am sure you have… they have cool games and you know what try copying their swf and run from local machine you will know about some security tricks…

17

when i’ll get back to my computer (easter time at the moment) i’ll dig some about the security…

18

could any1 make little swf for me? i don’t have flash here, but would love to work on this :slight_smile:

19

?

20

i need 1-frame swf with dynamic textfield (i want to be able to see what’s been loaded) displaying variable returned from “www.fld.pl/secure.php5” (let’s say it’ll be called “lddvr”

to avoid caching make it “http://www.fld.pl/secure.php5?foo=”+Math.random()

:slight_smile: