Showing results for 
Search instead for 
Do you mean 

SWFSCAN

Occasional Contributor

SWFSCAN

Hi,

 

The SWFSCAN download link on HP site seems to be broken. Where can I download another copy?

 

Cheers,

Shanker

6 REPLIES
Highlighted
Esteemed Contributor

Re: SWFSCAN

One of our bloggers reposted it here as well:  http://h30499.www3.hp.com/t5/Following-the-White-Rabbit-A/SWFScan-FREE-Flash-decompiler/ba-p/5440167


-- Habeas Data
HP Fortify Customers-Only Forums – https://protect724.hp.com/community/fortify
Occasional Visitor

Re: SWFSCAN

This link no longer works. Where to download?

Acclaimed Contributor Acclaimed Contributor

Re: SWFSCAN

[ Edited ]
Regular Visitor

Re: SWFSCAN

[ Edited ]

Any update on this?  The tool doesn't seem to be available anywhere I'm looking...

 

Edit: I should probably note that I get an access denied message for the blog link that was provided.

Esteemed Contributor

Re: SWFSCAN

SWFScan is many years old (2009) and was a one-off, proof-of-concept freebie at the time of WebInspect 7.7.  Fortify Support might be able to track down an installer if requested, but the HP WebInspect product (currently version 10.30) includes SWFScan on its Tools menu.  Due to this bundlig, the SWFScan tool there identifies itself as being version 10.30 but has largely remained the same as ever in function.

 

Shortly after SWFScan was released (2010?), its functionality was folded inside the WebInspect dynamic scanner, and the tool itself was added to the Tools menu inside WebInspect.  So since that time, the WebInspect scan runs the SWFScan engine behind the scenes on any SWF files encountered during the dynamic scan.  The SWF file is downloaded and decompiled in real-time and any static Flash vulnerabilities found are included in the scan's results.  This is the source of several of the WebInspect checks named with "Flash" that you may find after a scan or inside the Policy Manager tool's Search function.

 

As an olive branch, I have added the last SWFScan MSI file that I have (1.0) plus some of the documentation that came out with its release.


-- Habeas Data
HP Fortify Customers-Only Forums – https://protect724.hp.com/community/fortify
Occasional Visitor

Re: SWFSCAN

There is a newer version apparently from 2012 (HP SwfScan 1.0.71.2), however, I can't seem to find the download link to it.

 

Hope someone from HP can share the link?

 

Or someone could please attach the newer install zip here?

 

Thanks