After recently looking into how Adobe flash player does cross site requests I noticed that there was a shocking lack of tools to demonstrate crossdomain.xml insecurities. It seems like a pretty easy proof of concept to build so why isn’t there a tool to test this? Naturally I Googled around and couldn’t find anything so I decided to build my own over the weekend.
more here.....http://thehackerblog.com/crossdomain-xml-proof-of-concept-tool/
more here.....http://thehackerblog.com/crossdomain-xml-proof-of-concept-tool/