Dear All
On the subject of reverse engineering, does anyone know of a piece of
software to reverse byte code back into source files?
Thanks very much
Nick.
-----Original Message-----
From: Jackson Ching [mailto:[EMAIL PROTECTED]]
Sent: 14 June 2000 09:05
To: [EMAIL PROTECTED]
Subject: Re: Reverse Engineering
Craig McClanahan,
>
>Being able to decompile a class file presumes that you can read the
bytecodes of the class file, right?
>
Assumming the hacker was able to get the class file and wish to
decompile.
>The recommended placement for class files in a web application is the
WEB-INF/classes or WEB-INF/lib directory in a web application based on the
servlet 2.2 or later specification. There is an additional
>requirement in this spec -- the servlet container is not allowed to serve
any file under WEB-INF in response to a client request. Therefore, your
putative hacker cannot get ahold of the bytecodes of your
>servlets (unless you happen to store them someplace else in your document
root, which would be a "bad thing"), and they can therefore not decompile
your classes.
On what platform and what web-server does WEB-INF located? where do
i get more information on this? Thanks
Jack
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
***************************************************************
The contents of this Email and any files transmitted with it
are confidential and intended solely for the use of the
individual or entity to whom it is addressed. The views stated
herein do not necessarily represent the view of the company.
If you are not the intended recipient of this Email you may not
copy, forward, disclose or otherwise use it or any part of it
in any form whatsoever. If you have received this mail in
error please Email the sender.
***************************************************************
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
