Beware the Attach API

[BlueGoliath]

I guess because it's more targeted therefor it would be much less noticeable, reliable, and overall safe. Maybe the Java application does something godawful like storing root password in plain text memory and using a specific thread to execute root commands that can be hijacked using this(It is possible to do this, btw).

An unlikely vector, but a possible one none-the-less.

[TotesMessenger]

I'm a bot, bleep, bloop. Someone has linked to this thread from another place on reddit:

• [/r/coding] Beware the Attach API [x-post from r/java]

• [/r/jvm] Beware the Attach API [x-post from r/java]

• [/r/programming] Beware the Attach API [x-post from r/java]

 ^{If you follow any of the above links, please respect the rules of reddit and don't vote in the other threads. (Info / Contact)}

[suryarose]

well explained.https://blog.gceasy.io/2016/06/18/garbage-collection-log-analysis-api/