09-27-2014 08:45 PM - edited 10-31-2014 06:16 PM
>This link no longer works. Where to download?
The above blog was completely removed.
Unfortunately none of the links here show any new locations.
10-28-2014 01:40 PM - edited 10-29-2014 05:39 AM
Any update on this? The tool doesn't seem to be available anywhere I'm looking...
Edit: I should probably note that I get an access denied message for the blog link that was provided.
01-09-2015 06:41 AM
SWFScan is many years old (2009) and was a one-off, proof-of-concept freebie at the time of WebInspect 7.7. Fortify Support might be able to track down an installer if requested, but the HP WebInspect product (currently version 10.30) includes SWFScan on its Tools menu. Due to this bundlig, the SWFScan tool there identifies itself as being version 10.30 but has largely remained the same as ever in function.
Shortly after SWFScan was released (2010?), its functionality was folded inside the WebInspect dynamic scanner, and the tool itself was added to the Tools menu inside WebInspect. So since that time, the WebInspect scan runs the SWFScan engine behind the scenes on any SWF files encountered during the dynamic scan. The SWF file is downloaded and decompiled in real-time and any static Flash vulnerabilities found are included in the scan's results. This is the source of several of the WebInspect checks named with "Flash" that you may find after a scan or inside the Policy Manager tool's Search function.
As an olive branch, I have added the last SWFScan MSI file that I have (1.0) plus some of the documentation that came out with its release.
-- Habeas Data
01-22-2015 06:13 PM
There is a newer version apparently from 2012 (HP SwfScan 184.108.40.206), however, I can't seem to find the download link to it.
Hope someone from HP can share the link?
Or someone could please attach the newer install zip here?