Flash Exploit Tutorials

From M-Gate Labs Wiki

Flash Exploit is a complicated program, you will need all the help you can get.

Contents 1 Basic Tutorials 1.1 Screen Layout 1.1.1 A: Object List 1.1.2 B: Display List 1.1.3 C: Frame Preview 1.1.4 D: Frame Control 1.2 Opening a Movie 1.3 Viewing a Shape 1.4 Running Flash Exploit From the Command Line 2 Advanced Tutorials 2.1 FECL 2.1.1 Converting a Frame to SVG 2.1.2 Dumping all Shapes to SVG 2.2 Frame Hacking 2.3 Block Editing 2.3.1 Opening a Flash File 2.3.2 Altering The Background 2.3.3 Changing A Shape

Basic Tutorials

Screen Layout

A: Object List

B: Display List

Image:FlashExploit Display List.jpg

Use this window to

• See how the Frame was made
  • Object layers
  • Clipping Paths
  • Matrixs

Alternative Uses

• Movie Options
  • Double Click to Set the Preview to that Movie Clip
  • Right Click to
    • Alter Frame
    • Toggle Visibility

C: Frame Preview

Use this window to

• Preview Frames

Window Options

• Toggle Scaling
  • By Default the Frame Preview will Scale to Fit the Window
• Toggle Gradients
  • Turing off Gradients will improve Speed
• Toggle Quality
  • Speed Improvement
• Toggle Dragging
  • Once Enabled click and drag to move the screen contents.

D: Frame Control

Opening a Movie

Viewing a Shape

Running Flash Exploit From the Command Line

With the release of 1.21.0 the start up command has changed, all previous versions will still function, but for 1.21.0 the class loader stopped working correctly. So now instead of executing a jar file containing the Executable the the Jar file is added to the class path and then executed.

To Run Flash Exploit with 64 MB ran.

 java -cp .;./FlashExploit.jar Runner

To Run Flash Exploit's Block Editor with 64 MB ran

 java -cp .;./FlashExploit.jar Runner -block

To Increase the About of ram used by Flash Exploit

• 128 MB

 java -Xmx128M -cp .;./FlashExploit.jar Runner

• 256 MB

 java -Xmx256M -cp .;./FlashExploit.jar Runner

• 512 MB

 java -Xmx512M -cp .;./FlashExploit.jar Runner

Advanced Tutorials

FECL

Converting a Frame to SVG

 java -jar FECL.jar -i input_swf_file -o output_svg_file -mode frame -f frame_number

Dumping all Shapes to SVG

 java -jar FECL.jar -i input_swf_file -o path_to_folder -mode dump

Frame Hacking

Block Editing

Opening a Flash File

1. Open the Block Editor
2. Select the Menu File->Open
3. Select the Appropriate Flash File and click open

Altering The Background

1. Open the Block Editor
2. Open the Flash File
3. Double click on the SetBackground block
4. Select the new background color of your choice
5. Save your work

Changing A Shape

Note: This operation will take some time, but follow the instructions and you will be able to modify any flash movies contents.

Required Software

• Adobe Flash 8
• Flash Exploit

Optional Software

• Adobe illustrator CS

1. Open Flash Exploit Twice
   1. Second Flash Exploit should be the "Block" editor.
2. Open the Target flash file in both flash exploits.
3. In the normal flash exploit find a frame of the movie or sprite that you want to change.
4. Click the Update Display List button in the Frame control window.
5. Go through each item on the Display List, right click and select "Toggle Visibility".
   1. When you object you want to replace disappears then you clicked on the right object. Take note of its ID.
6. Double Click on that object and look at its preview, because its most likely centered aligned.
7. If you have adobe illustrator
   1. Export the object to SVG, Click Export->to SVG (Frame)
   2. Open the SVG with Adobe Illustrator
   3. Remove any excess shapes
      1. Flash Exploit always Exports a background layer.
   4. Export from Adobe Illustrator to SWF
   5. Open the exported SF file in Flash
8. If you don't have Illustrator
   1. Make a new movie in Flash
   2. Create a new MovieClip
   3. Draw Something
9. Modify the Shape inside of the MovieClip and align it like it was shown in Flash Exploit.
10. Export you Movie to SWF.
    1. Make sure you export to the correct version, if the target movie is version 6 then you will want to export to version 6.
11. Open the new movie with Flash Exploit and take not of the ID you just made.
12. Open your new movie in the Block Editor
13. Locate the New Shape, Based on its ID
14. Click on the Shape, then click Block->Export->Block
15. Name the Export Something you would remember.
    1. its not a complete swf, so don't use the SWF extension.
16. Open the Original SWF that you want to modify.
17. Locate the Shape you want to replace.
18. Click on the Shape you want to replace and then click Block->Replace.
19. The Shape has now been replaced, but its ID will be wrong.
20. Click on the Shape again and then click Block->Change Object ID and enter the ID of the original shape.
21. Save and see what you have done.
22. If the shape isn't aligned right then you will need to go back to flash, modify the shape, re-export and repeat the process again.

Just Keep Toggling Visibility until the shape you want disappears. Then double click on the shape to select it.

The Shape will look wrong, usually out of frame, but thats OK, its just nor Top-Left Aligned. You will want to remember this because when you want to replace the shape it has to be aligned correctly.