
Java-based tool to detect Adobe Flex SWF files vulnerable to CVE-2011-2461, usable as a command-line utility or Burp Suite passive scanner plugin.
ParrotNG is a tool capable of identifying Adobe Flex applications (SWF) vulnerable to CVE-2011-2461. For more details, please refer to the slides of our Troopers 2015 talk.
Download the latest release from HERE.
##Features
##How To Use - Command Line
$ java -jar parrotng_v0.2.jar <SWF File | Directory>
The tool accepts a single SWF file or an entire directory.
##How To Use - Burp Pro Passive Scanner Plugin