Главная
Study mode:
on
1
Intro
2
DISCLAIMER
3
ABOUT ME
4
OUTLINE
5
JDK VERSION HISTORY
6
HOW DID I FIND THESE TOOLS?
7
JRUNSCRIPT - WHAT IS IT?
8
JRUNSCRIPT - SYNTAX
9
JRUNSCRIPT - EVAL GLOBAL FUNCTIONS
10
JRUNSCRIPT & JJS - FILE LOCATION
11
SCRIPTING SYNTAX
12
EXTENDING THE JAVA PROGRAMMING LANGUAGE
13
DOWNLOADING FILES
14
EXECUTE SYSTEM COMMANDS
15
LOADING & RUNNING LOCAL SCRIPTS
16
LOADING & RUNNING REMOTE SCRIPTS
17
BASE64 ENCODED ONE-LINER REVERSE SHELL
18
ADVANTAGES & DISADVANTAGES FOR OFFENSE
19
DETECTION & PREVENTION
20
DETECTION - FULL COMMAND LINE LOGGING
21
DETECTION - USER AGENT STRING MONITORING
22
DETECTION - PROCESS MONITORING
23
PREVENTION - APPLICATION WHITELISTING
24
PREVENTION - UNINSTALL JDK
25
QUESTIONS?
Description:
Explore code execution techniques using JDK scripting tools and the Nashorn Javascript Engine in this BSides Cleveland 2018 conference talk. Delve into the history of JDK versions, discover jrunscript and its syntax, and learn how to extend Java programming capabilities. Gain insights on downloading files, executing system commands, and running local and remote scripts. Examine the advantages and disadvantages for offensive operations, including a demonstration of a base64 encoded one-liner reverse shell. Understand detection methods such as command line logging, user agent string monitoring, and process monitoring. Discover prevention strategies like application whitelisting and JDK uninstallation. Enhance your knowledge of both offensive and defensive aspects of JDK scripting tools in this comprehensive security presentation.

Code Execution with JDK Scripting Tools Nashorn Javascript Engine

Add to list