3.6 KB · ⇊ 3 parts · ⤓ Micron 3.6 KB · ⤓ HTML 10.9 KB

top

In computing, the Java Debug Wire Protocol (JDWP) is a communication protocol which is part of the Java Platform Debugger Architecture.cite-ref-1[1] It is used for communication between a debugger and the Java Virtual Machine, which it debugs. It allows to debug processes on a different computer. It can work over a network socket or through shared memory.

The protocol is implemented in the software library libjdwp.cite-ref-2[2] It can be activated using the -Xrunjdwp parameter of Java.

Metasploit includes a module for JDWP. It can exploit it using various scripts, which have functions such as injecting a Java class that executes a shell command, returns operating system details or injects an arbitrary class.

• References

• External links

cite-note-11. ↑ Software visualization: international seminar, Dagstuhl Castle, Germany, May 20-25, 2001 : revised papers. Stephan Diehl. Berlin: Springer. 2002. p. 185. ISBN 978-3-540-45875-3. OCLC 50589687.{{cite book}}: CS1 maint: others (link)

cite-note-22. ↑ citereftopley2002Topley, Kim (2002). J2ME in a nutshell: a desktop quick reference (1st ed.). Beijing: O'Reilly. p. 235. ISBN 9780596002534. OCLC 52355507.

• Java Debug Wire Protocol - Java SE Documentation

• Hacking the Java Debug Wire Protocol by IOActive

• Patent US20110138359A1 - Modified implementation of java debug wire protocol

• JDWP Misconfiguration in Container Images and K8s