Good tutorial. If they do have the username/password hardcoded in you could also use a tool like Action Script Viewer . I find, however, that many sites that you would want to get into would not hardcode username and password.