Thanks, will do shortly!
Please provide an example. If you're talking about using reflection, that's understandable. I will be adding "signatures" to the next version to detect reflection.
1) Find a Java program that you are suspicious of.
2) Goto http://www.github.com/DMoneigh/JScanner and download the Jar or compile and execute yourself.
3) Click "Scan" and select what you're scanning.
- For class and Jar files click "Application" and select them.
- For Applets click "Applet" and supply the URL to the applet.
- If you would like to list all class and Jar files on your computer click the "Computer" menu item.
4) Read your scan results and determine if the Java program is malicious.
Thank you, currently working on the virtualization function. (Called emulation by accident in my video.) This will allow JScanner to "attack" the selected file and then run it in a sandbox environment (VM), so that it can get more information about what the Jar file is doing.
No problem, please send me some feedback.
People do use Java. You're using this bot aren't you? Millions of people play Minecraft, have played Runescape, and others games that use Java. Browsing the web can make you a victim of a JDB attack.