Covert Java : Techniques for Decompiling, Patching, and Reverse Engineering

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

ISBN: 9780672326387 | 0672326388
Cover: Paperback
Copyright: 1/1/2004

Sorry, this item is currently not available.

-The only book covering decompiling, patching, and reverse engineering techniques to solve difficult problems found on many Java projects.-Developers will save hours of time and effort with these techniques.-Author has refined these techniques developing WebCream, a Java tool for converting client applications into Web applications.

Introduction

(88)

1 Getting Started

(8)

Techniques Overview-When and Why to Use Each Method

(2)

Improving Productivity with File Managers

(4)

FAR and Total Commander

(2)

Java IDEs

(1)

Sample Application Functionality and Structure

(1)

Quick Quiz

(1)

In Brief

(1)

2 Decompiling Classes

(14)

Determining When to Decompile

(1)

Knowing the Best Decompilers

(2)

Decompiling a Class

(6)

What Makes Decompiling Possible?

(1)

Potential Problems with Decompiled Code

(2)

Quick Quiz

(1)

In Brief

(2)

3 Obfuscating Classes

(16)

Protecting the Ideas Behind Your Code

(1)

Obfuscation As a Protection of Intellectual Property

(1)

Transformations Performed by Obfuscators

(4)

Stripping Out Debug Information

(1)

Name Mangling

(1)

Encoding Java Strings

(1)

Changing Control Flow

(1)

Inserting Corrupt Code

(1)

Eliminating Unused Code (Shrinking)

(1)

Optimizing Bytecode

(1)

Knowing the Best Obfuscators

(1)

Potential Problems and Common Solutions

(2)

Dynamic Class Loading

(1)

Reflection

(1)

Serialization

(1)

Naming Conventions Violation

(1)

Maintenance Difficulties

(1)

Using Zelix Klass Master to Obfuscate a Chat Application

(4)

Cracking Obfuscated Code

(1)

Quick Quiz

(1)

In Brief

(2)

4 Hacking Non-Public Methods and Variables of a Class

(8)

Accessing Packages and Protected Class Members

(2)

Accessing Private Class Members

(3)

Quick Quiz

(1)

In Brief

(2)

5 Replacing and Patching Application Classes

(12)

What Do We Do When We Have Tried Every Road but Failed?

(2)

Finding the Class That Has to Be Patched

(2)

The General Approach

(1)

Searching for Text Strings

(1)

Working with Obfuscated Code

(1)

A Sample Scenario That Requires Patching

(3)

Using the Class Name

(1)

Searching for Text Strings

(1)

Using the Call Stack to Navigate Application Logic

(1)

Patching a Class to Provide New Logic

(1)

Reconfiguring the Application to Load and Use the Patched Class

(1)

Patching Sealed Packages

(1)

Quick Quiz

(1)

In Brief

(2)

6 Using Effective Tracing

(6)

Introduction to Tracing

(2)

Tracing As an Effective Method of Learning the Software

(1)

Tracing and Logging Tools and APIs

(1)

Tracing Do's and Don'ts

(1)

Tracing Do's

(1)

Tracing Don'ts

(1)

Quick Quiz

(1)

In Brief

(1)

7 Manipulating Java Security

(6)

Java Security Overview

(2)

Bypassing Security Checks

(2)

The Security Manager Is Not Installed

(1)

The Security Manager Is Installed with a Default Policy

(1)

The Security Manager Is Installed with a Custom Policy

(1)

Quick Quiz

(1)

In Brief

(1)

8 Snooping the Runtime Environment

(6)

The Value of Understanding the Runtime Environment

(1)

System Properties

(1)

System Information

(1)

Memory Information

(1)

Network Information

(1)

Accessing Environment Variables

(1)

Quick Quiz

(1)

In Brief

(1)

9 Cracking Code with Unorthodox Debuggers

(8)

Understanding the Internals of Unknown Applications

(1)

Conventional Debuggers and Their Limitations

(1)

Hacking with an Omniscient Debugger

(5)

Recording Chat Execution

(1)

Navigating the Message Processing Code

(2)

Using ODB to Crack the Obfuscated Version of Chat

(1)

Quick Quiz

(1)

In Brief

(2)

10 Using Profilers for Application Runtime Analysis

(16)

Why and When You Should Use Profiling

(1)

The Best Profilers for Java

(1)

Investigating Heap Usage and Garbage Collection Frequency to Improve the Performance

(2)

Browsing Object Allocation and References to Find and Fix Memory Leaks

(4)

Investigating Thread Allocation and Synchronization

(4)

Identifying Expensive Methods to Improve Performance

100

(1)

Investigating an Application at Runtime Using a Thread Dump

101

(1)

Quick Quiz

102

(1)

In Brief

103

(2)

11 Load-Testing to Find and Fix Scalability Problems

105

(16)

The Importance of Load-Testing

105

(2)

Load-Testing RMI-Based Servers with JUnit

107

(3)

Load-Testing with JMeter

110

(9)

JMeter Overview

111

(1)

WebCream Overview

112

(1)

Creating a Web Test Plan

113

(6)

Quick Quiz

119

(1)

In Brief

120

(1)

12 Reverse Engineering Applications

121

(6)

User Interface Elements and Resources

121

(1)

Hacking Text

122

(1)

Hacking Images

123

(2)

Hacking Configuration Files

125

(1)

Quick Quiz

125

(1)

In Brief

126

(1)

13 Eavesdropping Techniques

127

(12)

Eavesdropping Defined

127

(1)

Eavesdropping on HTTP

128

(5)

Using a Tunnel to Capture the HTTP Message Exchange

128

(2)

Using a Network Sniffer to Capture the HTTP Message Exchange

130

(2)

Protecting Web Applications from Eavesdropping

132

(1)

Eavesdropping on the RMI Protocol

133

(2)

The RMI Transport Protocol

133

(1)

Using a Network Sniffer to Intercept RMI Messages

133

(2)

Protecting RMI Applications from Eavesdropping

135

(1)

Eavesdropping on JDBC Driver and SQL Statements

135

(2)

Quick Quiz

137

(1)

In Brief

138

(1)

14 Controlling Class Loading

139

(10)

JVM Internals from a Class Loading Perspective

139

(4)

Writing a Custom Class Loader

143

(4)

Quick Quiz

147

(1)

In Brief

147

(2)

15 Replacing and Patching Core Java Classes

149

(6)

Why Bother?

149

(1)

Patching Core Java Classes Using the Boot Class Path

150

(1)

Example of Patching java.lang.Integer

151

(2)

Quick Quiz

153

(1)

In Brief

153

(2)

16 Intercepting Control Flow

155

(10)

Control Flow Defined

155

(1)

Intercepting System Errors

155

(1)

Intercepting System Streams

156

(2)

Intercepting a Call to System.exit

158

(2)

Reacting to a JVM Shutdown Using Hooks

160

(1)

Intercepting Methods with a Dynamic Proxy

160

(3)

The Java Virtual Machine Profiler Interface

163

(1)

Quick Quiz

164

(1)

In Brief

164

(1)

17 Understanding and Tweaking Bytecode

165

(20)

Bytecode Fundamentals

165

(1)

Viewing Class Files Using the jClassLib Bytecode Viewer

166

(1)

The JVM Instruction Set

167

(1)

Class File Format

168

(6)

Field and Method Descriptors

168

(2)

Class File Structure

170

(3)

Attributes

173

(1)

Bytecode Verification

173

(1)

Instrumenting and Generating Bytecode

174

(8)

BOEL Overview

174

(1)

Instrumenting Methods

175

(4)

Generating Classes

179

(2)

ASM Library

181

(1)

Bytecode Tweaking Compared with AOP and Dynamic Proxies

182

(1)

Quick Quiz

183

(1)

In Brief

183

(2)

18 Total Control with Native Code Patching

185

(16)

Why and When to Patch Native Code

185

(1)

Native Code Usage In the Java Virtual Machine

186

(4)

JNI Overview

186

(2)

JNI Implementation Example

188

(2)

Generic Approaches to Patching Native Methods

190

(1)

Patching a Java Method Declaration

190

(1)

Substituting Native Libraries

190

(1)

Patching Native Code

191

(1)

Patching Native Code on the Windows Platform

191

(7)

Portable Executable Format

191

(3)

Patching a Native Function Using the Function Replacer Utility

194

(2)

Manual Patching Using Microsoft Detours Library

196

(2)

Patching Native Code on Unix Platforms

198

(1)

Quick Quiz

199

(1)

In Brief

200

(1)

19 Protecting Commercial Applications from Hacking

201

(26)

Setting Goals for Application Protection

201

(1)

Securing Data with Java Cryptography Architecture

202

(6)

Java Cryptography Architecture Overview

204

(1)

Securing Chat Messages with JCA

204

(4)

Protecting Application Distribution from Hacking

208

(8)

Protecting Bytecode from Decompiling

208

(1)

Protecting Bytecode from Hacking

209

(3)

Protecting Application Content from Hacking

212

(4)

Implementing Licensing to Unlock Application Features

216

(9)

Modern Software Licensing Models

216

(1)

Implementing Licensing to Unlock Commercial Features

217

(7)

Web Activation and License Registration

224

(1)

Quick Quiz

225

(1)

In Brief

225

(2)

A Commercial Software License

227

(6)

B Resources

233

(6)

Utilities and Tools

233

(1)

Decompiling

233

(1)

Obfuscating

234

(1)

Tracing and Logging

234

(1)

Debugging

235

(1)

Profiling

235

(1)

Load-Testing

235

(1)

Eavesdropping

236

(1)

Bytecode Tweaking

237

(1)

Native Code Patching

237

(1)

Protection from Hacking

238

(1)

C Quiz Answers

239

(10)

Chapter 1

239

(1)

Chapter 2

239

(1)

Chapter 3

240

(1)

Chapter 4

240

(1)

Chapter 5

240

(1)

Chapter 6

241

(1)

Chapter 7

241

(1)

Chapter 8

241

(1)

Chapter 9

242

(1)

Chapter 10

242

(1)

Chapter 11

243

(1)

Chapter 12

243

(1)

Chapter 13

244

(1)

Chapter 14

244

(1)

Chapter 15

245

(1)

Chapter 16

245

(1)

Chapter 17

245

(1)

Chapter 18

246

(1)

Chapter 19

247

(2)

Index

249

Please wait while the item is added to your bag...

FREE SHIPPING

Amazon no longer offers textbook rentals. We do!

Covert Java : Techniques for Decompiling, Patching, and Reverse Engineering

Summary

Table of Contents

Supplemental Materials