the.bytecode.club.bytecodeviewer.plugins

Class MaliciousCodeScanner

java.lang.Object

java.lang.Thread

the.bytecode.club.bytecodeviewer.api.Plugin

the.bytecode.club.bytecodeviewer.plugins.MaliciousCodeScanner

All Implemented Interfaces:

java.lang.Runnable

public class MaliciousCodeScanner
extends Plugin

The idea/core was based off of J-RET's Malicious Code Searcher I improved it, and added more stuff to search for.

Author:

Konloch, Adrianherrera, WaterWolf

Nested Class Summary

Nested classes/interfaces inherited from class java.lang.Thread

java.lang.Thread.State, java.lang.Thread.UncaughtExceptionHandler

Field Summary

Fields

Modifier and Type	Field and Description
boolean	LHS
boolean	LHT
boolean	LIP
boolean	LWW
boolean	NSM
boolean	OIO
boolean	ONE
boolean	ORE
boolean	ORU
boolean	ROB

Fields inherited from class java.lang.Thread

MAX_PRIORITY, MIN_PRIORITY, NORM_PRIORITY

Constructor Summary

Constructors

Constructor and Description
MaliciousCodeScanner(boolean reflect, boolean runtime, boolean net, boolean io, boolean www, boolean http, boolean https, boolean ip, boolean nullSecMan, boolean robot)

Method Summary

Modifier and Type	Method and Description
void	execute(java.util.ArrayList<org.objectweb.asm.tree.ClassNode> classNodeList) Whenever the plugin is started, this method is called

Methods inherited from class the.bytecode.club.bytecodeviewer.api.Plugin

isFinished, run, setFinished

Methods inherited from class java.lang.Thread

activeCount, checkAccess, countStackFrames, currentThread, destroy, dumpStack, enumerate, getAllStackTraces, getContextClassLoader, getDefaultUncaughtExceptionHandler, getId, getName, getPriority, getStackTrace, getState, getThreadGroup, getUncaughtExceptionHandler, holdsLock, interrupt, interrupted, isAlive, isDaemon, isInterrupted, join, join, join, resume, setContextClassLoader, setDaemon, setDefaultUncaughtExceptionHandler, setName, setPriority, setUncaughtExceptionHandler, sleep, sleep, start, stop, stop, suspend, toString, yield

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

ORE

public boolean ORE

ONE

public boolean ONE

ORU

public boolean ORU

OIO

public boolean OIO

LWW

public boolean LWW

LHT

public boolean LHT

LHS

public boolean LHS

LIP

public boolean LIP

NSM

public boolean NSM

ROB

public boolean ROB

Constructor Detail

MaliciousCodeScanner

public MaliciousCodeScanner(boolean reflect,
                            boolean runtime,
                            boolean net,
                            boolean io,
                            boolean www,
                            boolean http,
                            boolean https,
                            boolean ip,
                            boolean nullSecMan,
                            boolean robot)

Method Detail

execute

public void execute(java.util.ArrayList<org.objectweb.asm.tree.ClassNode> classNodeList)

Description copied from class: Plugin

Whenever the plugin is started, this method is called

Specified by:

execute in class Plugin

Parameters:

classNodeList - all of the loaded classes for easy access.