ioactive/jdwp-shellifier

jdwp-shellifier's Issues

Possible to get the command ouput

Hello @hugsy,

I wondered whether it would even be possible to grab the command output, as going blind is sometimes tricky.

I don't know if it is possible as a loop has to be defined to grab the buffer stream...
This kind of stuff works (but for 1 line only), maybe you'll figure out how grab an output:

In a jdb session:

$ print new java.io.BufferedReader( new java.io.InputStreamReader( new java.lang.Runtime().exec("whoami").getInputStream())).readLine()

...
 new java.io.BufferedReader( new java.io.InputStreamReader( new java.lang.Runtime().exec("whoami").getInputStream())).readLine() = "root"

By the way, I took the liberty to bundle your original script for Windows in order to easily drop it on internal compromised machines: I obviously put a link to your repo, tell me if anything bothers.

Cheers.

⚠️⚠️ THIS REPOSITORY IS UNMAINTAINED ⚠️⚠️

The maintained version is available here:

https://github.com/hugsy/jdwp-shellifier

No LICENSE

I would like to borrow some of your code, but there's no LICENSE permitting me to do so.

If you wouldn't mind releasing this project with an open-source license, I'd suggest the MIT license.

You can find more info here: http://choosealicense.com/

Thanks, @hugsy!

Waiting for an event on 'java.net.ServerSocket.accept'

Waiting for an event on 'java.net.ServerSocket.accept'

Wrong Statement

line 150 should be print ("Error")
line 581 should be print ("[-] Failed to invoke Runtime.getRuntime()")
it does not have the () now so it is python 2

Question of server or client?

we normally use java -Xdebug -Xrunjdwp:transport=dt_socket,address=port,server=y,suspend=y,but weather it is possible to hack server when it start up ,add -Xdebug -Xrunjdwp:transport=dt_socket,address=ipv4\ipv6:port,server=n,suspend=y
as the client mode to connected to server? like a reverse shell?