40 matches found
bytecode-viewer
Bytecode Viewer Bytecode Viewer - 軽量でユーザーフレンドリーなJava/Androidバイトコードビューア、デコンパイラ、その他 新機能 宣言へジャンプ ドラッグ可能なタブ パッチ適用済み CVE-2022-21675 v2.11.X にアップグレードしてください デフォルトでダークモード、複数のテーマ対応 30以上の言語に翻訳: アラビア語、ドイツ語、日本語、中国語(標準)、ロシア語、スペイン語など プラグインライター - BCV内から外部プラグインを作成・編集 Javaおよびバイトコードの編集/コンパイルを修正 タブ付きプラグインコンソール...
fernflower
Fernflower Fernflowerは、Java向けの最初の実際に動作する解析型逆コンパイラであり、おそらく高水準プログラミング言語全般としても最初のものです。 リリースは、Intellij Communityリポジトリ で公開されています。 バグ報告や機能リクエストは、issue tracker(サブシステムJava. Decompiler. Engine)へお送りください。 IntelliJでの使用法 FernflowerはIntelliJ IDEAにバンドルされており、主にデバッグ中やクラスファイルを参照する際にJavaコードを表示するために使用されます。...
apkx
apkx - 懒人专用Android APK反编译工具 一个Python封装,整合了流行的免费dex转换器和Java反编译器。可直接从APK中提取Java源代码。便于尝试不同的转换器/反编译器,无需担心类路径设置和命令行参数。 安装 $ git clone https://github.com/b-mueller/apkx $ cd apkx $ sudo ./install.sh 注意事项: JRE需已安装且在PATH中 enjarify需要Python 3 用法 在命令行传入APK文件名: $ apkx HelloWorld.apk 正在将 HelloWord.apk 提取到...
Decompiler_Tools
DecompilerTools 0x01 默认的 IDEA 反编译器 Mac OS 目录 /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib /Applications/IntelliJ IDEA.app/Contents/plugins/java-decompiler/lib -rw-r--r--@ 1 xxx xxx 1.4M 4 8 22:19 java-decompiler.jar java-decompiler.jar: Java archive data JAR 设置 zsh /.zshrc...
fernflower
fernflower 快速在终端反编译class文件 usage: Usage: java -jar fernflower.jar -= + Example: java -jar fernflower.jar -dgs=true c:\my\source\ c:\my.jar d:\decompiled\ Ps: 再也不需要jd-gui了,比jd-gui强大...
ddc
ddc — DEX → Java 反编译器(Rust) English | 简体中文 ddc 把 Android DEX 字节码反编译回可读的 Java —— 真实 App 级别的速度、 可以像数据库一样查询,并且经过 javac 验证 :七个真实 APK 共 909,689 个输出文件全部零语法错误。 特性 快 —— 226MB/20 dex 的 weibo(9.8 万个类)全量反编译 5.0s , 398MB 的飞书 5.5s ;病态类跑在带截止期的受控线程上,不会拖死 整个运行。 能编译 —— 七个基准...
Arbitrary Command Injection
Overview @idachev/mcp-javadc is a Model Context Protocol MCP server for Java decompilation Affected versions of this package are vulnerable to Arbitrary Command Injection via the HTTP Interface component when processing the jarFilePath argument. An attacker can execute arbitrary operating system...
MCP Java Decompiler Server 操作系统命令注入漏洞
MCP Java Decompiler Server is a Java bytecode decompilation server developed by Ivan Dachev. Versions of MCP Java Decompiler Server 1.2.4 and earlier had a vulnerability related to operating system command injection. This vulnerability stemmed from the handling of the parameter jarFilePath in the...
EUVD-2017-18947
JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying overly long input that exceeds buffer boundaries. Attackers can craft malicious input passed to the jad command to overflow the stack and...
CVE-2017-20227
The CVE covers JAD Java Decompiler 1.5.8e-1kali1 and earlier with a stack-based buffer overflow in the jad command. Attackers can supply overly long input that overflows the stack to execute a return-oriented programming chain and spawn a shell. No exploitation details or mitigations are provided...
CVE-2017-20227 JAD 1.5.8e-1kali1 Stack-Based Buffer Overflow
JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying overly long input that exceeds buffer boundaries. Attackers can craft malicious input passed to the jad command to overflow the stack and...
CVE-2016-20049 JAD 1.5.8e-1kali1 Stack-Based Buffer Overflow Remote Code Execution
JAD 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying oversized input that exceeds buffer boundaries. Attackers can craft malicious input strings exceeding 8150 bytes to overflow the stack, overwrite return...
CVE-2017-20227: Out-of-bounds Write
JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying overly long input that exceeds buffer boundaries. Attackers can craft malicious input passed to the jad command to overflow the stack and...
PT-2026-28233
JAD Java Decompiler 1.5.8e-1kali1 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying overly long input that exceeds buffer boundaries. Attackers can craft malicious input passed to the jad command to overflow the stack and...
Varaneckas JAD Java Decompiler 缓冲区错误漏洞
Varaneckas JAD Java Decompiler is a tool developed by Varaneckas Corporation that decompiles Java bytecode into readable source code. Versions of Varaneckas JAD Java Decompiler 1.5.8e-1kali1 and earlier contained a buffer error vulnerability. This vulnerability stemmed from a stack buffer overflo...
Varaneckas JAD Java Decompiler 缓冲区错误漏洞
Varaneckas JAD Java Decompiler is a tool developed by Varaneckas Corporation that decompiles Java bytecode into readable source code. Versions of Varaneckas JAD Java Decompiler 1.5.8e-1kali1 and earlier contained a buffer error vulnerability. This vulnerability stemmed from a stack buffer overflo...
EUVD-2024-30446
Malicious code in bioql PyPI...
CVE-2024-32653 Insufficient input filtering of "package name" allows command execution in the device with shell privileges
jadx is a Dex to Java decompiler. Prior to version 1.5.0, the package name is not filtered before concatenation. This can be exploited to inject arbitrary code into the package name. The vulnerability allows an attacker to execute commands with shell privileges. Version 1.5.0 contains a patch for...
Fedora: Security Advisory for fernflower (FEDORA-2024-129d8ca6fc)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...