JavaSecurity

From: r s (richard.scottat_private)
Date: Tue Mar 12 2002 - 11:14:44 PST

  • Next message: Dave Ahmad: "Re: DOCSIS vulnerability"

    
     ('binary' encoding is not supported, stored as-is)
    I am trying to replace a class in Java's runtime rt.jar 
    file.
    
    I compiled the rogue class, placed it in the extracted 
    jar file with zero compression.
    
    now when I compile code aginst it I get:
    
    C:\>javac -classpath ../../.. String.java
    Error occurred during initialization of VM
    java/lang/NoClassDefFoundError: java/lang/Object
    
    This "exploit" was tailored around what Scott Oaks 
    mentioned in his book JavaSecurity.
    
    however, I seem not to be able to exploit it.
    
    Any tips?
    



    This archive was generated by hypermail 2b30 : Tue Mar 12 2002 - 12:32:52 PST