Table of Contents:
Introduction:
Usage:
Disclaimer:
Screenshots:
Spoiler (Click to View)
Download:
- Introduction,
- usage,
- disclaimer,
- screenshots.
Introduction:
- Recently, I've made a native injector that supports injecting any non-already-defined Java class. Class re-transformation is supported, but currently isn't implemented.
It gives you the ability to inject any valid (compiled) Java class file which hasn't been defined yet, into any Java Virtual Machine (JVM).
You must know how to compile Java classes, and use an injector in order to use this.
Usage:
- The DLL has to be injected into the JVM process of your choice. You may use any injector.
All injection methods can be practiced, however I advise using LoadLibrary - the only supported, and tested injection method.
An example class that makes use of the constructed instrumentation implementation is included in the archive.
Further instructions are provided within the screenshots section.
Disclaimer:
- Supported platforms: Windows
Supported architectures: x64
Classes are injected via the native system class loader; meaning: unless you figure out how to manage memory unsafely, you can't unload the class without some Java magic.
Instances of the original bytecode (from the class file on disk) are removed once the just in time compiler (JIT) compiles the injected class. However, an instance of the original bytecode is kept in memory by the JVM.
The DLL is packed. All detections made by anti-malware tools are false positives.
There is no protection, nor does the code ever create a socket (connect to the internet).
VirusTotal analysis: here
SHA1 (Java Injector x64.dll): A90845D2ED0551022C28DB78DD38EC918BBE24EE
Screenshots:
Spoiler (Click to View)
Download:
![[Image: Y5SK7U7.png]](https://i.imgur.com/Y5SK7U7.png)
