{"id":13755045,"url":"https://github.com/kasperskylab/actionscript3","last_synced_at":"2025-10-30T03:25:26.975Z","repository":{"id":107847376,"uuid":"151112047","full_name":"KasperskyLab/ActionScript3","owner":"KasperskyLab","description":"Tools for static and dynamic analysis of ActionScript3 SWF files.","archived":false,"fork":false,"pushed_at":"2018-10-05T20:36:52.000Z","size":208,"stargazers_count":46,"open_issues_count":0,"forks_count":14,"subscribers_count":7,"default_branch":"master","last_synced_at":"2025-04-13T01:55:50.601Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/KasperskyLab.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null}},"created_at":"2018-10-01T15:31:10.000Z","updated_at":"2025-02-26T05:48:14.000Z","dependencies_parsed_at":"2024-01-13T03:00:48.992Z","dependency_job_id":"a9bdf745-de54-450b-872e-f0143d788df6","html_url":"https://github.com/KasperskyLab/ActionScript3","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KasperskyLab%2FActionScript3","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KasperskyLab%2FActionScript3/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KasperskyLab%2FActionScript3/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/KasperskyLab%2FActionScript3/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/KasperskyLab","download_url":"https://codeload.github.com/KasperskyLab/ActionScript3/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248654050,"owners_count":21140235,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-03T10:00:41.605Z","updated_at":"2025-10-30T03:25:26.891Z","avatar_url":"https://github.com/KasperskyLab.png","language":"Python","funding_links":[],"categories":["\u003ca id=\"004c199e1dbf71769fbafcd8e58d1ead\"\u003e\u003c/a\u003e针对特定分析目标"],"sub_categories":["\u003ca id=\"7d0681efba2cf3adaba2780330cd923a\"\u003e\u003c/a\u003eFlash\u0026\u0026SWF"],"readme":"## ActionScript3 IDA Pro\n\n# [Hex-Rays IDA Pro Plug-In Contest 2018](https://www.hex-rays.com/contests/2018/index.shtml)\n\nAuthor: [Boris Larin](https://twitter.com/oct0xor)\n\nThis repository contains the SWF Loader, ActionScript3 processor module, and a debugger assist plugin named KLFDB.\n\n\u003cdiv align=\"center\"\u003e\n    \u003cimg src =\"/imgs/img0.png\"/\u003e\n\u003c/div\u003e\n\n# Requirements\n\nIDA Pro 7.1 (Tested with IDA Pro 7.1.180227)\n\n# Installation\n\nCopy files into the IDA Pro directory: \n* 'swf.py' to 'loaders' subfolder\n* 'klfdb.py' to 'plugins' subfolder\n* 'as3.py' to 'procs' subfolder\n\n# Usage\n\nDrag and drop the SWF file to IDA Pro and select the Shockwave Flash loader.\n\n\u003cdiv align=\"center\"\u003e\n    \u003cimg src =\"/imgs/img1.png\"/\u003e\n\u003c/div\u003e\n\nUse 'File' -\u003e 'Produce file' -\u003e 'Create MAP file...' to generate a map file for use with KLFDB.\n\n\u003cdiv align=\"center\"\u003e\n    \u003cimg src =\"/imgs/img2.png\"/\u003e\n\u003c/div\u003e\n\nKLFDB is written to work with 32-bit versions of Stand Alone Flash and with Flash for Browsers (Internet Explorer is currently supported). \n\nTo debug the SWF file with Internet Explorer, load the Adobe Flash module (e.g. c:\\Windows\\System32\\Macromed\\Flash\\Flash32_*_*_*_*.ocx) into IDA Pro.\n\nUse 'Edit' -\u003e 'Klfdb' -\u003e 'Load new map file' to load the generated map file.\n\nFrom this point, it is possible to use 'Edit' -\u003e 'Klfdb' -\u003e 'Set breakpoints on ...' to set breakpoints on methods.\n\n\u003cdiv align=\"center\"\u003e\n    \u003cimg src =\"/imgs/img4.png\"/\u003e\n\u003c/div\u003e\n\nAfter setting breakpoints, attach to the Internet Explorer process that is about to start the SWF file and use 'Edit' -\u003e 'Klfdb' -\u003e 'Run'. After that, allow the Flash file to execute.\n\n\u003cdiv align=\"center\"\u003e\n    \u003cimg src =\"/imgs/img5.png\"/\u003e\n\u003c/div\u003e\n\nThe plugin will suspend execution of Adobe Flash after the breakpoint hit and will transparently fill just-in-time compiled native code with useful comments about the original bytecode.\n\n\u003cdiv align=\"center\"\u003e\n    \u003cimg src =\"/imgs/img6.png\"/\u003e\n\u003c/div\u003e\n\n# Acknowledgements\n- [RABCDAsm](https://github.com/CyberShadow/RABCDAsm)\n- [JPEXS Free Flash Decompiler](https://github.com/jindrapetrik/jpexs-decompiler/)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkasperskylab%2Factionscript3","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkasperskylab%2Factionscript3","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkasperskylab%2Factionscript3/lists"}