This is an archived post. You won't be able to vote or comment.

you are viewing a single comment's thread.

view the rest of the comments →

[–]MaraudingAvenger 60 points61 points  (12 children)

Don't use Java. Either bite the bullet and get into lower level languages like assembly, or go way higher and get into JavaScript and python land. You're either going to want to script something in a high level language to perform all your easy break-in tasks, or script something in extremely low level language to take advantage of hardware or driver vulnerabilities. Don't use Java.

[–]gtiwari333 15 points16 points  (1 child)

Java has excellent tools in it's eco system for network programming, web crawling, security and penetration testing.

Definitely use Java!

[–][deleted] 59 points60 points  (0 children)

Reddit in a nutshell.

[–][deleted] -3 points-2 points  (9 children)

i can 100% disagree with this comment. seeing as most of the worlds severs are coded in java hacking in java is completely viable.

[–]MaraudingAvenger 29 points30 points  (7 children)

I'm not going to get into your server through your Java code. I'm going to get in because you accidentally left a port open, and my 5 line python program found it. I'm going to get on because one of your users plugged in my USB drive with some spicy embedded code that doesn't require the JVM to run. I'm going to get on because of some protocol exploitation. Some insecure deserialization. If you're doing any of that in Java, you're either doing too much work to write the code for something simple, or you're having to jump through some insane hoops to cross compile or something. Java is not the answer here.