Reflash: practical ActionScript3 instrumentation with RABCDAsm

Adobe Flash has been announced dead for almost ten years now. But it is still here, installed on almost every computing device on Earth, and it is getting more attention because of the alarming rate of zero-day vulnerabilities we have been witnessing over the past few years. Even though the Flash platform is such wide spread, it is still lacking comprehensive binary analysis tools.

In this paper we try to address this shortcoming with a set of tools and techniques for dynamic ActionScript3 (AS3) instrumentation and analysis. The techinques described in the paper covers generic AS3 opcode instrumentation and stack trace generation, and finally a toolchain to operate generated data outside the AS3 execution environment is presented.

Fill in the form to download this whitepaper

Whitepaper Reflash: practical ActionScript