pen testing flash games.

[zimblyzuper@gmail.com]

Dear all
I am doing a pentest on a gaming website which has mostly online flash games. 
There are known vulnerabilities in flash but i dont know how to execute them. 
In the website, there are also some downloadable games which have to be 
purchased after downloading. Theese games also send info such as high scores to 
the server. Can somebody tell me how to exploit the vulnerabilities of flash? 
and is there any intercepting proxy which can trap requests and responses of 
applications such as games, media players, gtalk etc.

Please advice.

------------------------------------------------------------------------
This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!

http://www.cenzic.com/c/2020
------------------------------------------------------------------------