A Complete Noobs Exploration of JDWP and JDI

Intro Recently on a penetration test my team and I discovered several JDWP ports open. The Java Debug Wire Protocol (JDWP) is "[&hellip;] used for communication between a debugger and the Java virtual machine (VM) which it debugs." So tl;dr: You can connect to a remote or local JVM over various protocols, break/suspend threads, and run code in the context of the suspended thread(s). Public tooling…