vadage / jvm-classloader-hook Goto Github PK

Hi, I'm the maintainer of the detour fork!

I just renamed the repo/crate, so it's going to break your project, I'm really sorry about that.
But it's now on crates.io now here, so you can add it to your Cargo.toml!

retour = "0.1.0"

Figured I send out issues to the repos using it to avoid any confusion/frustration. Again, sorry about that, but this makes things a lot easier going forward.

Happy hacking! 😄

The ClassLoader should use an algorithm which is stronger than simple XOR with a single value.
Decryption keys should get baked in via environment variable when compiling, in order to support workflows without exposing any secrets.

Reason

When hooking into the same export, a threat actor can read the decrypted bytes.
The method DefineClass can be utilised to make it harder to obtain the contents, as it results in the same as jvm_define_class_common.

Implementation

Create a new byte array for the decrypted class bytes and use this then to pass to env.define_class.

See JNI DefineClass for reference.