The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

Often, Java applets are packed up as JAR (Java ARchive) files, which

contain multiple class files and other resources such as sounds and images. 

JAR files are really just ZIP archives with the 

.jar

file extension. You can

unpack and repack them using standard archive readers like WinRar or WinZip,

and also using the Jar tool, which is included in Sun’s Java SDK.

T I P

Other useful tools for analyzing and manipulating Java applets are Jode

(a decompiler and bytecode obfuscator) and JSwat (a Java debugger).

116

Chapter 5 

■

Bypassing Client-Side Controls

70779c05.qxd:WileyRed  9/16/07  5:14 PM  Page 116

---

HACK STEPS

■

Review all calls made to an applet’s methods, and determine whether