{ "ml": { "v": "7", "eng": "2.0.1-rc.1", "lvl": 0, "conf": 100, "mods": [ { "cls": 0, "raw": 0.000025480986, "rte": "az", "prob": 0.000025480986 }, { "cls": 0, "raw": 0.8453379, "rte": "az/source", "prob": 0.8453379 }, { "cls": 2, "raw": 0.94047666, "rte": "az/java", "prob": 0.94047666 } ], "prob": 0.94047666, "files": [ { "id": 0, "lvl": 0, "conf": 100, "prob": 0.940476655960083, "type": "java" } ], "version": "v18.18", "analyzed_at": "2026-06-15T09:52:20Z" }, "path": "UndertowListenerInjectorTpl.java", "raw": { "v": "7", "tv": "061e3", "files": [ { "id": 0, "ctx": [ { "a": 131, "b": "x(d*cA=-BsvrM6iy*?i]e]\u003eJny?m9#e\u003efL^y?bQ", "l": 6 }, { "a": 163, "b": "x(d*cA=-BsvrM6iy*?i]e]\u003eJny?m9#e\u003eG@7z!0i$x(v(*vrc0(BvyB:wPh:9z/dS", "l": 7 }, { "a": 215, "b": "x(d*cA=-BsvrM6iy*?i]e]\u003eJny?m9#e\u003e]]0xM4Ay", "l": 8, "n": [ { "c": 3, "d": "Java dynamic code loading pattern extended", "i": "objectives/anti-static/obfuscation/reflection/class::java-dynamic-code-loading-extended", "o": 222, "z": 24 } ] }, { "a": 248, "b": "x(d*cA=-BsvrM6iB-.tle\u003cTI#vr\u003eKXB96F", "l": 9 }, { "a": 276, "b": "x(d*cA=-BsvrM6iB-.tle\u003e/#2Buo", "l": 10 }, { "a": 382, "b": "", "l": 15 }, { "a": 383, "b": "", "l": 16 }, { "a": 384, "b": "arR^HAckSax\u003e5n:BAh8kxcp?#Bvf\u003eMB8$8+zdLaAaBs", "l": 17, "n": [ { "c": 1, "d": "Validation vocabulary string", "i": "metadata/file/text/format::vocab-string", "o": 395, "z": 6 } ] }, { "a": 419, "b": "arR^HarR^HA+funA=90zb0b", "l": 18 }, { "a": 438, "b": "arR^HEe", "l": 19 }, { "a": 591, "b": "arR^HAckSax\u003e5n=zE^s0Bz(v%x(!xczE)\u0026WzFA-)Bz(h0Abl{KaBs", "l": 29 }, { "a": 634, "b": "arR^HarR^HBAhTHDJ", "l": 30 }, { "a": 648, "b": "arR^HarR^HarR^HoLFM\u0026jwPB3wN/*Cay/tcBy/YsB09Q*xjVfLz/fVdCYUt.i@", "l": 31, "n": [ { "c": 1, "d": "Validation vocabulary object", "i": "metadata/file/text/format::vocab-object", "o": 665, "z": 6 } ] }, { "a": 698, "b": "arR^HarR^HarR^Hw]zYjc@jq!wN/*8v@DmbwQ5qtiV}{JzGGDmBAn(NDJ", "l": 32, "n": [ { "c": 2, "d": "English language detection", "i": "micro-behaviors/data/text/language::lang-english", "o": 710, "z": 3 } ] }, { "a": 744, "b": "arR^HarR^HarR^HarR^HpHX6Iv@@\u0026fx(!xczE)\u0026hjS[xGBwcy\u0026By/u3AWUBozGGDmBsxo", "l": 33 }, { "a": 800, "b": "arR^HarR^HarR^HarR^HvpS[xx(!xczE)\u0026pv@DmbwQ5qFaz++kBy/u3AW:6", "l": 34 }, { "a": 1175, "b": "arR^HarR^Hw]zYjc#0Nvazz@Yatt(1x=]IXBzbYavpTBiy?mG%Bz9-Ux!7X.aBs", "l": 45 }, { "a": 1226, "b": "arR^HarR^HarR^HBAhTHDJ", "l": 46 }, { "a": 1244, "b": "arR^HarR^HarR^HarR^HpHX6Iv@@\u0026lwPq\u003c7B96=/zGGDmBrAZ?x(n9jyH{jKBzbP6d0fcywNPa\u003ctwmv}xjVfLz/fVdCYVq?vrlG-z^^f/AWSv?y\u0026r-)lU{gLB0@kDz.ufIwmY!6z*9*PwPz%gwPPLrvqYQ(wPz\u0026Aq!o#)y?mY^wPq\u003c7B96=/zGGDmBrSd+ar\u003errA=L-eBrSd}", "l": 47, "n": [ { "c": 3, "d": "Java reflection class loading", "i": "objectives/anti-static/obfuscation/reflection/class::java-reflection", "o": 1318, "z": 11 }, { "c": 1, "d": "Java loadClass", "i": "objectives/anti-static/obfuscation/reflection/class::java-loadclass", "o": 1332, "z": 9 } ] }, { "a": 1409, "b": "arR^HarR^HarR^HarR^HpHX6Iv@@\u0026mwPz%gwPQpTzGGDmBrAZ?x(n9jyH{jKBzbP6c#@)sB.bSolVl\u003c:wQ5qFar\u003eDfBvgg\u003eA+fcgq!o#)y?mYQz/fVdCYUbUi@", "l": 48 }, { "a": 1507, "b": "arR^HarR^HarR^HarR^Hx\u003ewFoB7Gxny?mYQz/fVdCYU5KjS[S+y?$Kyv@DmbwQ5rre[5p3d05%uC5g-ilVl\u003c:wQ5qCi@", "l": 49 }, { "a": 2173, "b": "arR^HarR^HlU{gLB4*HXwmY^7v@bN{B4*HXwmY^7jS[xGBxr3.l2Z^gy*?yaoMauIwPxhez/fVdCYUw@", "l": 67 }, { "a": 2238, "b": "arR^HarR^HBAhTHDJ", "l": 68 }, { "a": 2252, "b": "arR^HarR^HarR^Hy?W%jwO#71auZ\u0026Sy*?yaoMauIwPxztz^^fzy*?yac$^aklU{gLB53dXwHF#Re]ClAnP5P\u003evqYN^c[dj", "l": 69, "n": [ { "c": 1, "d": "Java newInstance", "i": "objectives/anti-static/obfuscation/reflection/class::java-newinstance", "o": 2313, "z": 11 } ] }, { "a": 2328, "b": "arR^HarR^HEir3dByO#bc}ew\u003cwPh:9z/cXediJ%", "l": 70 }, { "a": 2360, "b": "arR^HarR^HarR^HBAhTHDJ", "l": 71 }, { "a": 2378, "b": "arR^HarR^HarR^HarR^HvTi6btu@vYy*?Tolv0V:auZ\u0026WDtds^wN/T}Ab]JhB0$Ngv@C)?lsB}Dhz=*{wPQmEB7El^q/)4]zF7vDdjEs", "l": 72 }, { "a": 2462, "b": "arR^HarR^HarR^HarR^Ho\u003ewAWz!6#3wObT]wKyoxB8@D!avx%NB8$2[vpS}\u0026e[nZaB8@%DwPQsKv@bN]wN[IDBzbP6c)Ahkw[=c]lU{gLB0rdTvTi6btu@\u003c\u003ey*?yaefFUABs}6tvrlGvazC.ne[nZaB8@=(", "l": 73, "n": [ { "c": 1, "d": "Java defineClass reflective load", "i": "micro-behaviors/data/source/dynamic/reflect::java-defineclass", "o": 2485, "z": 11 } ] }, { "a": 2587, "b": "arR^HarR^HarR^HarR^HwmYv!zE(gKvrlGxB7GCVv}f7\u003eB7]91wHIUvB.90-", "l": 74 }, { "a": 2636, "b": "arR^HarR^HarR^HarR^HlU{gLB0a$evs0kxjS(duy*?yadiJejw[=c]lU{gLB1RfAC5Iecc$v74B8$2[vpS}\u0026efFCsvs0k^D30QGattt?v@bO1Do#[0wId!gzFa68dlv", "l": 75 }, { "a": 2873, "b": "arR^HEe", "l": 81 }, { "a": 2879, "b": "", "l": 82 }, { "a": 2880, "b": "arR^Hfe1EgX4y:VPYR=3\u003e9p-Bx(tRDzE^s0Bz(vQB7Gxny?mYvv@Dy0e\u003cTC}y?Wx/BzkVhoLFM\u0026wO#71B1Q)iwk3YUBy/u3AS", "l": 83, "n": [ { "c": 3, "d": "Chinese text detection (Mandarin/Yue)", "i": "micro-behaviors/data/text/language::lang-chinese", "o": 2887, "z": 12 } ] }, { "a": 2958, "b": "arR^Hfe1EgX4y:VPYRPl\u003e9p-Bx(tRDzE^s0Bz(vQB7Gxny?mYvvq]{kl$HsNz*uhhzGFD/w]xqgwmOwFB97#hwPv", "l": 84 }, { "a": 3029, "b": "arR^HAckSax\u003e5oez!S-8vpS[xx(!xczE)\u0026ppHX6Iv@@\u00266z/fVdCYUFVpHX6Iv@@\u0026fx(!xczE)\u0026qaBs", "l": 85 }, { "a": 3176, "b": "arR^HarR^HarR^HarR^HA+funA=9@", "l": 88 }, { "a": 3200, "b": "arR^HarR^HarR^HEe", "l": 89 }, { "a": 3214, "b": "arR^HarR^HarR^HlU{gLB0bpkB97#hwPyvWw]y4MvrlGjjS)advrlGxw]zY+vqPN7b57%FB-7-3A==kze]$PAC5g-ie[5Zke\u003e/#2By/u3A.gdXzZ3R(", "l": 90, "n": [ { "c": 1, "d": "Java Class.forName", "i": "objectives/anti-static/obfuscation/reflection/class::java-class-forname", "o": 3252, "z": 13 } ] }, { "a": 3307, "b": "arR^HarR^HarR^HpHX6Iv@@\u0026fx(!xczE)\u0026WzF0/fjS[MPB97#hwPyvWw]y4MvrlGxxjVfLz/fSrA=\u003e(lz/Nl[y*?yae[nZaB8@=.zE[2-zGx]dzEWlay?W%jwO#71e[X:qlU{gLB0@E^i@", "l": 91 }, { "a": 3421, "b": "arR^HarR^HarR^HpHX6Iv@@\u00267wPhE7D2mbgBv*s*y-\u003e\u003e-xjVfOrW.D@zGGDmBsXKUwmYZ@z*uhhzGE6Ki@", "l": 92 }, { "a": 3487, "b": "arR^HarR^HarR^HpHX6Iv@@\u00264AbYScv{%E[z/el.B97#hwPz\u0026mjS[xGBvGpVwmYZ@z*uhhzGFD!Abm6Fb4kCfy?Wx/BzkVhoLFM\u0026wO#71B0r4{", "l": 93 }, { "a": 3576, "b": "arR^HarR^HarR^HlU{gLB0bsdzEEf?wk3YUBy/u3AZKUKB8@D!avx%NB8@%Cz/OPYzdLatx(tRDzE^s0Bz(vQB7Gxny?mYvv@Dy0e\u003e]+(vp%dZoLFM\u0026wO#71a$kO", "l": 94 }, { "a": 3676, "b": "arR^HarR^HarR^HpHX6Iv@@\u0026gvqYH^wN[FGB97#hwPw[Raz\u003eL8vp%dZoLFM\u0026wO#71lU{gLB1R9pBvf$:B98CBv@#Tfc#rQsBy/u3A.gdXz:OtHB8@(PvScg3wNPEev@bN{B15.VwP{Z-B97\u0026dv}v68x(!xczE)\u0026WzF0/raARTDwHPX", "l": 95, "n": [ { "c": 1, "d": "Validation vocabulary boolean", "i": "metadata/file/text/format::vocab-boolean", "o": 3768, "z": 7 } ] }, { "a": 3816, "b": "arR^HarR^HarR^Hx(n9jyH{jKBzbP6c$d7ly?Wx/BzkVhoLFM\u0026wO#71B1wBTvpS[xx(!xczE)\u0026jefF?wCoxm?vrlG]u3*A%zEEf?wk3YUBy/u3AZKUKB8#:Xaz$+mawVDYwN/*^u3*A%zEEf?wk3YUBy/u3A^Yw#", "l": 96 }, { "a": 3945, "b": "arR^HarR^HEir3dByO#bc@:(2z*bS0y?j-2diJ%", "l": 97 }, { "a": 4774, "b": "arR^HarR^HarR^HA+funA=90FvTi6btu@W2wmYm?wmY^Gy*?yae[X:qo\u003ewAWz!7muwmYm?wmX8Iw[CQ{a$K\u003cnBAh8kxd^XgvrlGse[]iDz!\u0026]jwmYm?wmY^Gy*?yae]ClAnP5P\u003evqYN^c[cX\u0026vQTs?hz!uOAW:6", "l": 117 }, { "a": 4902, "b": "arR^HarR^HEir3dByO#bc}ew\u003cwPh:9z/cXixkRTdwN)kjDJ", "l": 118 }, { "a": 4940, "b": "arR^HarR^HarR^HwmYm?wmY^Gy*?yaauZ\u0026my*?yae[P3xpgn0Jc)AzmC401CBzkLzlsB}Dhz=Qbi@", "l": 119, "n": [ { "c": 2, "d": "base64 encoding keyword", "i": "micro-behaviors/data/text/encoded::base64-token", "o": 4992, "z": 6 } ] }, { "a": 5002, "b": "arR^HarR^HarR^HpHX6Iv@@\u00267wN/T?wPw[Ray]4[z!9B1lU{gLB1R9pBwls*xM4Afb4\u003eFel$G\u003eDwmY^9dk2sLC5Iecc#Kfzy:?B", "l": 120 }, { "a": 5082, "b": "arR^HarR^HarR^HA+funA=90FvTi6btu@W2wmYm?wmY^lxjVfLy*?yac[c=YwPQTTBzbP6c)Ahkv@C)?a$K\u003cnBAh8kxd^XgvrlGse[]iDz!\u0026]jwmYm?wmY^jayX=2wI#wzBAe/(", "l": 121 } ], "mol": "O(As)H(Db)", "sha": "ef285e9163331265503ff75457b98f9b3608848f0fd74a032668bf081801feb2", "fact": { "id": "java", "imp": [ [ "", "getContext" ], [ "", "getListener" ], [ "", "addListener" ], [ "", "invokeMethod" ], [ "", "invokeMethod" ], [ "", "invokeMethod" ], [ "", "contexts" ], [ "", "invokeMethod" ], [ "", "getFV" ], [ "", "invokeMethod" ], [ "", "getWebAppClassLoader" ], [ "", "classLoader" ], [ "", "classLoader" ], [ "", "getClassName" ], [ "", "gzipDecompress" ], [ "", "decodeBase64" ], [ "", "getBase64String" ], [ "", "defineClass" ], [ "", "defineClass" ], [ "", "clazz" ], [ "", "isInjected" ], [ "", "listener" ], [ "", "listener" ], [ "", "Class" ], [ "", "listenerInfoClass" ], [ "", "listenerInfoClass" ], [ "", "listener" ], [ "", "getFV" ], [ "", "getFV" ], [ "", "Class" ], [ "", "managedListenerClass" ], [ "", "managedListenerClass" ], [ "", "invokeMethod" ], [ "", "getFV" ], [ "", "getFV" ], [ "", "getFV" ], [ "", "allListeners" ], [ "", "getFV" ], [ "", "getFV" ], [ "", "allListeners" ], [ "", "listener" ], [ "", "listener" ], [ "", "Class" ], [ "", "decoderClass" ], [ "", "decoderClass" ], [ "", "decoderClass" ], [ "", "Class" ], [ "", "decoderClass" ], [ "", "decoderClass" ], [ "", "decoder" ], [ "", "decoder" ], [ "", "decoder" ], [ "", "ungzip" ], [ "", "out" ], [ "", "out" ], [ "", "getF" ], [ "", "getF" ], [ "", "getF" ], [ "", "field" ], [ "", "field" ], [ "", "obj" ], [ "", "clazz" ], [ "", "field" ], [ "", "clazz" ], [ "", "invokeMethod" ], [ "", "obj" ], [ "", "tempClass" ], [ "", "tempClass" ], [ "", "tempClass" ], [ "", "method" ], [ "", "method" ], [ "", "method" ], [ "", "java.io.ByteArrayInputStream" ], [ "", "java.io.ByteArrayOutputStream" ], [ "", "java.io.IOException" ], [ "", "java.lang.reflect.Field" ], [ "", "java.lang.reflect.InvocationTargetException" ], [ "", "java.lang.reflect.Method" ], [ "", "java.util.ArrayList" ], [ "", "java.util.List" ], [ "", "java.util.zip.GZIPInputStream" ] ], "mbr": [ "clazzByte.length", "getParameterTypes().length", "methods.length", "threads.length" ], "met": { "ast": { "op.eq": 4.0, "op.ge": 1.0, "op.lt": 3.0, "op.ne": 3.0, "op.land": 2.0, "max_depth": 20.0, "bind_count": 44.0, "call_count": 89.0, "node_count": 2155.0, "member_count": 4.0, "op_density.eq": 0.0, "op_density.ge": 0.0, "op_density.lt": 0.0, "op_density.ne": 0.0, "op_density.land": 0.0, "identifier_count": 104.0, "member_depth_max": 2.0, "string_literal_count": 25.0, "array_literal_max_length": 1.0 }, "file": { "size": 8500.0, "entropy": 4.62, "size_bytes": 8500.0 }, "text": { "digit_ratio": 0.01, "space_count": 2206.0, "total_lines": 207.0, "char_entropy": 4.62, "unique_chars": 84.0, "lines_over_200": 1.0, "string_density": 0.12, "avg_line_length": 40.06, "high_byte_ratio": 0.0, "max_line_length": 211.0, "non_ascii_ratio": 0.0, "empty_line_ratio": 0.12, "last_line_length": 1.0, "long_token_count": 1.0, "whitespace_ratio": 0.28, "most_common_ratio": 0.08, "identifier_density": 1.59, "line_length_stddev": 37.44, "encoded_string_ratio": 0.12, "normalized_string_count": 1.74, "repeated_char_sequences": 77.0, "most_common_char_is_null": 0.0, "suspicious_comment_ratio": 1.0, "max_inline_whitespace_run": 1.0, "most_common_char_codepoint": 101.0, "suspicious_identifier_ratio": 0.08, "normalized_unique_identifiers": 13.52 }, "binds": { "count": 44.0 }, "calls": { "count": 89.0 }, "binary": { "overall_entropy": 4.62 }, "source": { "class_count": 1.0, "function_count": 14.0 }, "imports": { "count": 9.0, "unique_modules": 9.0, "third_party_count": 9.0, "third_party_ratio": 1.0 }, "members": { "count": 4.0 }, "strings": { "total": 25.0, "avg_length": 15.76, "max_length": 50.0, "avg_entropy": 3.25, "empty_count": 2.0, "total_bytes": 394.0, "entropy_stddev": 0.47, "base64_candidates": 3.0 }, "comments": { "chars": 173.0, "lines": 3.0, "total": 3.0, "to_code_ratio": 0.01, "base64_in_comments": 1.0, "high_entropy_comments": 2.0 }, "functions": { "count": 15.0, "avg_params": 1.4, "max_params": 4.0, "length_stddev": 9.17, "avg_name_length": 12.0, "no_params_count": 4.0, "avg_length_lines": 11.2, "max_length_lines": 41.0, "min_length_lines": 3.0, "high_entropy_names": 3.0, "avg_param_name_length": 7.48, "density_per_100_lines": 7.25, "code_in_functions_ratio": 0.81 }, "identifiers": { "count": 104.0, "total": 330.0, "avg_length": 9.29, "max_length": 27.0, "min_length": 1.0, "avg_entropy": 2.58, "reuse_ratio": 0.32, "unique_count": 104.0, "length_stddev": 5.54, "has_digit_ratio": 0.05, "sequential_names": 5.0, "base64_like_names": 3.0, "single_char_count": 3.0, "single_char_ratio": 0.03, "high_entropy_count": 9.0, "high_entropy_ratio": 0.09, "all_lowercase_ratio": 0.38, "numeric_suffix_count": 3.0 } }, "str": [ [ 1160, "u8", "getThreads" ], [ 1161, "u8", "getThreads" ], [ 1196, "10", "0" ], [ 1342, "u8", "io.undertow.servlet.handlers.ServletRequestContext" ], [ 1343, "u8", "io.undertow.servlet.handlers.ServletRequestContext" ], [ 1397, "u8", "current" ], [ 1398, "u8", "current" ], [ 1478, "u8", "getCurrentServletContext" ], [ 1479, "u8", "getCurrentServletContext" ], [ 1829, "u8", "getClassLoader" ], [ 1830, "u8", "getClassLoader" ], [ 1944, "u8", "deploymentInfo" ], [ 1945, "u8", "deploymentInfo" ], [ 2026, "u8", "getClassLoader" ], [ 2027, "u8", "getClassLoader" ], [ 2535, "u8", "defineClass" ], [ 2536, "u8", "defineClass" ], [ 2717, "10", "0" ], [ 3266, "u8", "io.undertow.servlet.api.ListenerInfo" ], [ 3267, "u8", "io.undertow.servlet.api.ListenerInfo" ], [ 3472, "u8", "deployment" ], [ 3473, "u8", "deployment" ], [ 3551, "u8", "applicationListeners" ], [ 3552, "u8", "applicationListeners" ], [ 3631, "u8", "io.undertow.servlet.core.ManagedListener" ], [ 3632, "u8", "io.undertow.servlet.core.ManagedListener" ], [ 3863, "u8", "addListener" ], [ 3864, "u8", "addListener" ], [ 4143, "u8", "deployment" ], [ 4144, "u8", "deployment" ], [ 4158, "u8", "applicationListeners" ], [ 4159, "u8", "applicationListeners" ], [ 4183, "u8", "allListeners" ], [ 4184, "u8", "allListeners" ], [ 4221, "10", "0" ], [ 4326, "u8", "listenerInfo" ], [ 4327, "u8", "listenerInfo" ], [ 4343, "u8", "listenerClass" ], [ 4344, "u8", "listenerClass" ], [ 4747, "u8", "sun.misc.BASE64Decoder" ], [ 4748, "u8", "sun.misc.BASE64Decoder" ], [ 4825, "u8", "decodeBuffer" ], [ 4826, "u8", "decodeBuffer" ], [ 4981, "u8", "java.util.Base64" ], [ 4982, "u8", "java.util.Base64" ], [ 5054, "u8", "getDecoder" ], [ 5055, "u8", "getDecoder" ], [ 5139, "u8", "decode" ], [ 5140, "u8", "decode" ], [ 5524, "10", "256" ], [ 5589, "10", "0" ], [ 5624, "10", "0" ], [ 6723, "10", "0" ], [ 6738, "10", "0" ], [ 7382, "10", "0" ], [ 7524, "10", "0" ] ], "tgt": [ "ByteArrayInputStream", "ByteArrayOutputStream", "GZIPInputStream", "NoSuchFieldException", "NoSuchMethodException", "RuntimeException", "UndertowListenerInjectorTpl", "add", "addListener", "contains", "decodeBase64", "equals", "forName", "get", "getBase64String", "getClass", "getClassName", "getConstructor", "getContext", "getContextClassLoader", "getDeclaredField", "getDeclaredMethod", "getDeclaredMethods", "getF", "getFV", "getListener", "getMessage", "getMethod", "getName", "getParameterTypes", "getSuperclass", "getWebAppClassLoader", "gzipDecompress", "invoke", "invokeMethod", "isInjected", "loadClass", "newInstance", "read", "set", "setAccessible", "size", "toByteArray", "write" ], "val": { "file.stem": "UndertowListenerInjectorTpl", "file.basename": "UndertowListenerInjectorTpl.java", "source.language": "java", "source.imports[0]": "Class", "source.imports[1]": "addListener", "source.imports[2]": "allListeners", "source.imports[3]": "classLoader", "source.imports[4]": "clazz", "source.imports[5]": "contexts", "source.imports[6]": "decodeBase64", "source.imports[7]": "decoder", "source.imports[8]": "decoderClass", "source.imports[9]": "defineClass", "source.strings[0]": "addListener", "source.strings[1]": "allListeners", "source.strings[2]": "applicationListeners", "source.strings[3]": "current", "source.strings[4]": "decode", "source.strings[5]": "decodeBuffer", "source.strings[6]": "defineClass", "source.strings[7]": "deployment", "source.strings[8]": "deploymentInfo", "source.strings[9]": "getClassLoader", "source.has_imports": true, "source.imports[10]": "field", "source.imports[11]": "getBase64String", "source.imports[12]": "getClassName", "source.imports[13]": "getContext", "source.imports[14]": "getF", "source.imports[15]": "getFV", "source.imports[16]": "getListener", "source.imports[17]": "getWebAppClassLoader", "source.imports[18]": "gzipDecompress", "source.imports[19]": "invokeMethod", "source.imports[20]": "isInjected", "source.imports[21]": "java.io.ByteArrayInputStream", "source.imports[22]": "java.io.ByteArrayOutputStream", "source.imports[23]": "java.io.IOException", "source.imports[24]": "java.lang.reflect.Field", "source.imports[25]": "java.lang.reflect.InvocationTargetException", "source.imports[26]": "java.lang.reflect.Method", "source.imports[27]": "java.util.ArrayList", "source.imports[28]": "java.util.List", "source.imports[29]": "java.util.zip.GZIPInputStream", "source.imports[30]": "listener", "source.imports[31]": "listenerInfoClass", "source.imports[32]": "managedListenerClass", "source.imports[33]": "method", "source.imports[34]": "obj", "source.imports[35]": "out", "source.imports[36]": "tempClass", "source.imports[37]": "ungzip", "source.strings[10]": "getCurrentServletContext", "source.strings[11]": "getDecoder", "source.strings[12]": "getThreads", "source.strings[13]": "io.undertow.servlet.api.ListenerInfo", "source.strings[14]": "io.undertow.servlet.core.ManagedListener", "source.strings[15]": "io.undertow.servlet.handlers.ServletRequestContext", "source.strings[16]": "java.util.Base64", "source.strings[17]": "listenerClass", "source.strings[18]": "listenerInfo", "source.strings[19]": "sun.misc.BASE64Decoder", "source.functions[0]": "UndertowListenerInjectorTpl", "source.functions[1]": "addListener", "source.functions[2]": "decodeBase64", "source.functions[3]": "getBase64String", "source.functions[4]": "getClassName", "source.functions[5]": "getContext", "source.functions[6]": "getF", "source.functions[7]": "getFV", "source.functions[8]": "getListener", "source.functions[9]": "getWebAppClassLoader", "source.functions[10]": "gzipDecompress", "source.functions[11]": "invokeMethod", "source.functions[12]": "isInjected", "source.functions[13]": "setFV" } }, "find": [ { "id": "objectives/anti-static/obfuscation/reflection/class::java-classloader", "conf": 1.0, "crit": 1, "desc": "Java ClassLoader" }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-reflective-method", "atk": "T1140", "mbc": "E1202", "conf": 0.8500000238418579, "crit": 1, "desc": "Java reflective method invocation" }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-newinstance", "conf": 1.0, "crit": 1, "desc": "Java newInstance" }, { "id": "micro-behaviors/data/source/dynamic/reflect::java-defineclass", "conf": 0.8799999952316284, "crit": 1, "desc": "Java defineClass reflective load" }, { "id": "metadata/file/text/format::vocab-string", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary string" }, { "id": "metadata/file/text/format::vocab-boolean", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary boolean" }, { "id": "micro-behaviors/data/text/language::lang-chinese", "conf": 0.800000011920929, "crit": 3, "desc": "Chinese text detection (Mandarin/Yue)" }, { "id": "metadata/file/text/format::vocab-object", "conf": 0.9700000286102295, "crit": 1, "desc": "Validation vocabulary object" }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-class-forname", "conf": 1.0, "crit": 1, "desc": "Java Class.forName" }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-loadclass", "conf": 1.0, "crit": 1, "desc": "Java loadClass" }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-dynamic-code-loading-extended", "atk": "T1140", "mbc": "E1202", "conf": 0.9200000166893005, "crit": 3, "desc": "Java dynamic code loading pattern extended" }, { "id": "objectives/anti-static/obfuscation/reflection/class::java-reflection", "conf": 0.8500000238418579, "crit": 3, "desc": "Java reflection class loading" } ], "path": "UndertowListenerInjectorTpl.java", "risk": 2, "size": 8500, "type": "java" } ] } }