Java Data Wrapper

3. Java (Runtime, ProcessBuilder, Java Reflection)

Wrapper/Technique Description Example Exploit
Runtime.exec() Executes shell commands. Runtime.getRuntime().exec("whoami")
ProcessBuilder Builds system command execution. new ProcessBuilder("cmd.exe", "/c", "dir").start();
Java Reflection Dynamically calls methods at runtime. Class.forName("java.lang.Runtime").getMethod("exec", String.class).invoke(null, "whoami");