JavaJournal

Presented at REcon 2016, June 17, 2016, 3 p.m. (30 minutes).

Despite the multitude of Java decompilers available, we often have the need to debug or trace malicious or obfuscated Java bytecode. Existing Java debuggers and tracers are mostly targeted towards Java developers, are closed-source, and are not meant to handle malicious or obfuscated targets. We present a new open-source cross-platform framework for debugging Java, written completely in Python, designed specifically for reverse engineering. We also present a Java method call tracer as a sample Python application that utilizes this framework.

Presenters:

• Jason Geffner

Links:

• https://recon.cx/2016/talks/JavaJournal.html
• https://infocon.org/cons/REcon/REcon 2016/REcon 2016 videos/jason-geffner-JavaJournal.mp4

Similar Presentations:

• DEF CON 21 (2013) / Java Every-Days: Exploiting Software Running on 3 Billion Devices
• Black Hat USA 2013 / Java Every-Days: Exploiting Software Running on 3 Billion Devices
• Black Hat USA 2012 / Recent Java Exploitation Trends and Malware