As a penetration tester, I have come across an open JDWP port. I can connect to it with Eclipse and browse the threads and memory, but I don't have the source code for the application. I'd like to inject my own Java code, perhaps as an Exception handler, in order to return a shell. How can I modify the running/suspended Java application over JDWP, preferably using Eclipse as my debugger?
How can I run my own java code in the JVM that I am debugging remotely with JDWP?
509 views Asked by bonsaiviking At
1
There are 1 answers
Related Questions in JAVA
- Add image to JCheckBoxMenuItem
- How to access invisible Unordered List element with Selenium WebDriver using Java
- Inheritance in Java, apparent type vs actual type
- Java catch the ball Game
- Access objects variable & method by name
- GridBagLayout is displaying JTextField and JTextArea as short, vertical lines
- Perform a task each interval
- Compound classes stored in an array are not accessible in selenium java
- How to avoid concurrent access to a resource?
- Why does processing goes slower on implementing try catch block in java?
Related Questions in ECLIPSE
- Set log4j.properties for GWT
- Compound classes stored in an array are not accessible in selenium java
- Eclipse color highlighting broken
- Eclipse Luna with Nodeclipse hangs when navigating a .js file with the Outline view
- Java Heap Space error on Layout xml: GC overhead limit exceeded
- Eclipse, how to find how many attributes defined in a class?
- Eclipse and Windows Headers
- Eclipse find source file from library
- mingw-64 conflicting declarations when cross-compiling
- String.split() not behaving in android
Related Questions in REMOTE-DEBUGGING
- What is the principle of IntelliJ IDEA's remote debug?
- Error: Cannot find module '/usr/lib/node_modules/node-inspector/lib/InjectorServer.js'
- Xdebug doesn't stop on breakpoints even when it logs a break, but says it is connected to client
- How to use jmap remotelly without SSL?
- PyCharm add remote Python interpreter inside the Docker
- Remote debugging Flume's custom source and logging
- Debug functional tests from IntelliJ
- Remote debugging tomcat with OpenShift
- Visual Studio in debug mode restarts automatically after an exception is thrown (C++)
- If x and y then construction
Related Questions in PENETRATION-TESTING
- DVWA database connection is not working
- Penetration testing - It is recommended that access to this portal is prevented via the Internet
- Difference between Dynamic Code Analysis and Penetration Testing?
- Use App Scripts to open form and make a selection
- Nessus No host data is available for this scan error
- Using USB security dongle of an appliance in VM machine
- Enable stack canaries in ios swift
- How to receive SQL syntax error using SQL injection?
- Programming/Hacking
- how to ping guest xp from host ubuntu in virtualbox?
Related Questions in JDWP
- Eclipse JDWP error when trying to debug
- How do check if someone is connected to debug port, or is actively debugging
- How can I run my own java code in the JVM that I am debugging remotely with JDWP?
- Enabling debugging for a Node in Weblogic Cluster
- Is using TCP ACK required for JDWP?
- Coldfusion server not starting after reboot, error is "JDWP unable to get necessary JVMTI capabilities". Anyone seen this?
- Flutter release apk on Google Play fails with 'not starting debugger since process cannot load the jdwp agent'
- Issue with event request ids in jdwp
- Using JDWP and JVMTI to obtain information of the running Java application
- Enabling jdwp on a jdk 14 app results in Address family not supported by protocol error
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
Popular Tags
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
I found the answer to my question: JavaPayload by Michael 'mihi' Schierl lets you load Java payloads through JDWP, among others.