Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
flash-xdomain-xploit — ActionScript Proof of Concept to perform cross-domain reads | Kitploit
Tools/GitHubGitHub/gursev/flash-xdomain-xploit
ExploitationWeb Application ExploitationData ExfiltrationInformation GatheringWeb SecurityMisconfiguration
GitHubgursev/flash-xdomain-xploit

flash-xdomain-xploit

ActionScript Proof of Concept to perform cross-domain reads

View Repository
441212 years agoReviewed by Kitploit

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Author: Gursev Singh Kalra ([email protected])

Bypassing Same Origin Policy with Flash and Insecure crossdomain.xml

Compiling and deploying the Proof of Concept ActionScript code

  1. Download and install Apache Flex SDK. It comes with an ActionScript compiler.
  2. Copy the ActionScript code to your local directory and name it XDomainXploit.as.
  3. Change the values of readFrom and sendTo parameters to appropriate values as per your needs.
  4. Compile the code with the mxmlc compiler to a Flash file by running the following command. The mxmlc compiler is shipped with Apache Flex. mxmlc XDomainXploit.as
  5. Deploy the generated Swf and the provided HTML(xdm.html) files to enjoy the Flash goodness.
Download Tool