Custom Flex client with differents AMFv3 fields

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Custom Flex client with differents AMFv3 fields

Alexandre DELOUP
Hello,

I'm currently writing a custom Flex client with PyAMF to send AMFv3
messages to a server without using the Flash application.
I wrote a client that send messages to the remote server based on this
tutorial :
http://blog.gdssecurity.com/labs/2009/11/11/pentesting-adobe-flex-applications-with-a-custom-amf-client.html
, to match a message format like that :
http://virtualabs.fr/IMG/jpg/flex-sample-1.jpg .
The code used to set the values is like this :
>request = RemotingMessage(operation="findEmployeesByName",
>                          destination="runtime-employee-ro",
>                          messageID=str(uuid.uuid4()).upper(),
>                          body=['Marcin'],
>                          clientId=None,
>                          headers={'DSId': str(uuid.uuid4()).upper(),
>                                   'DSEndpoint': 'my-amf',},
>                         )
I can match the fields "operation", "destination", etc...

The problem is that the AMF message I have to send doesn't have this
fields. I extracted the format of the AMF messages with BurpSuite and I
got this fields ( https://quack1.no-ip.org/?attachment_id=487 ) that are
not the same.

So, have you a way for me to send my messages, by modifying my code,
rewriting a class like RemotingMessage, or something like that ?

Thank you for all, it's pretty important for me to do that...

Alexandre DELOUP

--
Unix is user-friendly. It's just very selective about who its friends are.
PGP public key ID : 0xA26B95CD


_______________________________________________
PyAMF users mailing list - [hidden email]
http://lists.pyamf.org/mailman/listinfo/users

signature.asc (501 bytes) Download Attachment
Loading...