Re: Why doesn't SWFScan recognize my SWF? (442 Views)
Reply
Occasional Visitor
shadedecho
Posts: 1
Registered: ‎03-25-2009
Message 1 of 2 (442 Views)

Why doesn't SWFScan recognize my SWF?

I run a project called flXHR ( http://flxhr.flensed.com ) which is a flash proxy for client side, cross-domain Ajax calls. When I tried to open my flXHR.swf file with your tool, it complains about malformed headers and not being able to open it.


However, this SWF works just fine, it's used all over the place on my site and by others.  What's wrong?

Please use plain text.
Frequent Collector
pjagdale
Posts: 7
Registered: ‎03-20-2009
Message 2 of 2 (442 Views)

Re: Why doesn't SWFScan recognize my SWF?

 HP SWFScan has certain controls in place that allows it to identify malicious/malformed SWFs. In case of "flXHR.swf", the tool could not successfully validate the SWF header format and hence delivered the error message: "Malformed data in SWF Header". Since the header could not be validated, the SWF was not decompiled.

 

One suggestion would be to reduce the frame size of the SWF and try decompiling again.

Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation