Skip to content
Bharadwaj Machiraju edited this page Jul 25, 2014 · 9 revisions

How to use Flashbang?

Flashbang is still in alpha stadium so things might be a bit edgy there and where. Here's how to setup and run Flashbang (no worries, it takes about 5 minutes to get it running):

  • Clone the repo using the --recursive flag, so that all necessary submodules are cloned as well
  • Ideally clone it into an Apache web-root (or any other web server)
  • Prepare the environment for Shumway to work properly Instructions.
  • Visit the URL Flashbang/src/flashbang.html in Chrome (Firefox has a bug right now, we're on it).
  • Console to logging is enabled by default. So ideally keep developer tools open.
  • Run a file by clicking "Open SWF"
  • Flashbang will then show you the flashVars and you can start testing for XSS or alike

Clone this wiki locally