Adobe Labs
 
 

cap bottom

Adobe SWF Investigator

Perform quick, comprehensive, analysis of SWF applications

Adobe® SWF Investigator is the only comprehensive, cross-platform, GUI-based set of tools, which enables quality engineers, developers and security researchers to quickly analyze SWF files to improve the quality and security of their applications. With SWF Investigator, you can perform both static and dynamic analysis of SWF applications with just one toolset. SWF Investigator lets you quickly inspect every aspect of a SWF file from viewing the individual bits all the way through to dynamically interacting with a running SWF.


SWF Investigator Features

From a static perspective, you can disassemble ActionScript 2 (AS2) and ActionScript 3 (AS3) SWFs, view SWF tags and make binary changes to SWF files. SWF Investigator also lets you view associated information, including local shared objects (LSOs) and per site settings.

From a dynamic perspective, you can call functions within the SWF, load the SWF in various contexts, communicate via local connections and send messages to Action Message Format (AMF) endpoints in order to test more effectively.

SWF Investigator contains an extensible fuzzer for SWF applications and AMF services, so you can search for common Web application attacks. This toolset also provides a variety of utilities including encoders and decoders for SWF data, as well as a basic compiler for testing small pieces of ActionScript code.

Additional Benefits

  • SWF Investigator is the only application of its kind that's built on Adobe AIR – a versatile runtime that supports ActionScript, the language used to create SWF applications.  This allows for native interaction between the SWF Investigator and the SWF application. Using ActionScript also makes the source code of the tool more intuitive for SWF developers.
  • SWF Investigator has the ability to auto-update, so you don't need to worry about whether or not you have the most current version.
  • Since it's an open source AIR application, SWF Investigator can be modified to fit your environment, and it is cross-platform.

Read the Introducing Adobe SWF Investigator article for additional information

Getting Started

Follow these steps to get started with SWF Investigator:

  1. Read Introducing Adobe SWF Investigator in the Adobe Developer Connection
  2. Download the SWF Investigator preview
  3. View the source code on Open@Adobe
  4. Ask questions or share your feedback in the SWF Investigator forum

    Please note that your submission of comments, ideas, feature requests and techniques on this and other Adobe maintained forums, as well as Adobe's right to use such materials, is governed by the Adobe.com Terms of Use.

Community

Below you'll find references and links to help you participate in the SWF Investigator community.

Online Forum

Ask questions and discuss ideas with other SWF Investigator users in the Labs forum.

Visit the SWF Investigator discussion forum

Please note that your submission of comments, ideas, feature requests and techniques on this and other Adobe maintained forums, as well as Adobe's right to use such materials, is governed by the Adobe.com Terms of Use.

Adobe Developer Connection

Learn more about security topics in the Adobe Developer Connection.

Resources

If you want to learn more about releases on Labs as well as other Adobe technologies, visiting a user group or connecting with an Adobe Community Professional is a great place to start.

Product Details

FAQ

What is SWF Investigator?
Adobe SWF Investigator is a comprehensive, cross-platform, GUI-based set of tools, which enables quality engineers, developers and security researchers to quickly analyze SWF files to help ensure the quality and security of their applications.
What is the target audience for SWF Investigator?
SWF Investigator was developed for quality engineers, developers and security researchers.
Can end-users/consumers use SWF Investigator?
SWF Investigator is not a tool for end-users/consumers. The tool was developed specifically for quality engineers, developers and security researchers looking for a first-line tool to help them examine SWF files in an effort to improve the quality and security of their SWF applications.
Is SWF Investigator a proprietary or an open source tool?
Yes. SWF Investigator is an open-source tool.
Which platforms are supported by SWF Investigator?
SWF Investigator supports both Windows and Macintosh platforms. See the system requirements.
Does SWF Investigator eliminate the need for additional or separate tools currently being leveraged to improve the quality and security of SWF applications?
No. SWF Investigator is a comprehensive, cross-platform, GUI-based set of tools, which enables quality engineers, developers and security researchers to quickly analyze SWF files to help ensure the quality and security of their applications. Depending on the results, a quality engineer, developer or security researcher may decide to use additional tools for further, more detailed analysis.

System Requirements

Mac OS

  • Intel Core™ Duo 1.83GHz or faster processor
  • Mac OS X v10.6 or above
  • 512MB of RAM (1GB recommended)

Windows

  • Minimum: Intel® Pentium® III 1GHz or faster processor Recommended: Pentium 4 2GHz or faster
  • Microsoft® Windows® XP Home, Professional, or Tablet PC Edition with Service Pack 2 or 3 (including 64 bit editions), Windows Server® 2003, Windows Vista® Home Premium, Business, Ultimate, or Enterprise (including 64-bit editions) with Service Pack 1, or Windows 7 (including 64 bit editions)
  • 512MB of RAM (1GB recommended)

Release Notes

The SWF Investigator beta is designed for evaluation purposes only. We do not recommend that this release be used on production systems or for any mission-critical work.

Top Technologies


Technology Groups