Take the 2-minute tour ×

Is it possible to brute force a flash login with hydra?

If not, what is a good tool to pen test a flash login?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

You could use Burp Intruder. This is only in the paid version of Burp, but it's not that expensive.

You would first capture a manual login using the proxy, then use Intruder to fuzz for valid passwords.

share|improve this answer
So it's like setting up a MITM? –  Jeff Apr 10 at 19:46
@Jeff - yeah, that's exactly how Burp works. You can do the MITM proxy with the free version, it's just Intruder you need a pro license for. You may be able to do this for free with Zap; I don't know if Zap supports the flash protocols (AMF, etc.) as well as Burp (which does it quite well). –  paj28 Apr 10 at 21:00

Your Answer


