CODEWITHSUNDEEP
javaeclipseremote-debuggingpenetration-testingjdwp
bonsaiviking
bonsaiviking

Reputation: 5995

How can I run my own java code in the JVM that I am debugging remotely with JDWP?

As a penetration tester, I have come across an open JDWP port. I can connect to it with Eclipse and browse the threads and memory, but I don't have the source code for the application. I'd like to inject my own Java code, perhaps as an Exception handler, in order to return a shell. How can I modify the running/suspended Java application over JDWP, preferably using Eclipse as my debugger?

Upvotes: 1

Views: 454

Answers (1)

bonsaiviking
bonsaiviking

Reputation: 5995

I found the answer to my question: JavaPayload by Michael 'mihi' Schierl lets you load Java payloads through JDWP, among others.

Upvotes: 2

Related Questions