Inspired by Rafal Los' talk at AppSec DC I started taking a look at SWFScan.
A good description here so I don't have to plagiarize
Did a quick search for login.swf and found one (actually lots). Let's fire up SWFScan and see what we can see.
Open it and decompile the .swf. We see a hardcoded password.
Just to be sure that it actually does any checking
Ok its working. They're not letting just anyone in there!
Because the code just jams the username and password box together we can just throw the whole thing in the username block or mix it up however you want.
Just to make sure it wasnt beginner's luck...
Additional Info can be found on the pdc #172 show notes:
Link to Blackhat talk