#Java hacking group?
1 messages · Page 1 of 1 (latest)
<@&987246399047479336> please have a look, thanks.
Here is an AI assisted attempt to answer your question 🤖. Maybe it helps! In any case, a human is on the way 👍. To continue talking to the AI, you can use </chatgpt:1108714622413963314>.
Java is less common in malware compared to C++ or C because it runs on a virtual machine and typically has more restrictions, making it less ideal for low-level system exploits or rootkits. However, Java can still be used for hacking-related purposes, particularly in cross-platform attack tools, botnets, or malicious apps targeting environments where Java is prevalent (e.g., enterprise systems).
A hacking group looking for Java developers might want to:
- Develop cross-platform malware or ransomware that can run on any OS with a JVM.
- Create exploits or tools targeting Java applications or servers with vulnerable code.
- Craft malicious payloads embedded in Java applets or applications distributed on corporate networks.
- Build command-and-control (C2) infrastructure with Java backend systems.
- Automate hacking workflows or develop advanced persistence mechanisms.
In short, though Java isn’t the typical choice for malware, its portability and wide adoption make it useful in certain cyberattack scenarios.
Useful links:
Maybe looking for people knowing a lot about JVM stuff to exploit java applications instead
Oh
Isnt it illegal? And what would someone get out of doing that?
Because as far as I am aware, they hack russian corps/gov and belarusian gov
and thats it
when hacking apks (was fixing an error where the video player crashed) i rememebered having a little bit of java knowledge helped me
to answer this q, hacking anything is fun
hacker are just parasite, the goal of any group like this is identify people who identify as hacker.
hacking is a really broad term
it is a meta play
theyve done a lot and been in the news
for many hacks that you typically only see in movies
How are they not getting arrested?
its one my dreams to get a cease and desist 🙏
most "hacking" in real life isnt the typical stuff u have in mind
but for example learning about how the rest api of amazon works that the app communicates to
and then finding mistakes or oversights in that
and calling that rest api directly urself to exploit sth
and writing such a "hack" is a totally normal software, one where langs like java are a good fit for
u have to get away from this idea of what hacking is that u got from social media and all
its an extremely broad field
sure, u likely wont reverse engineer the assembly in photoshop.exe and edit it to remove the part with the license to crack it in java
and thats indeed also a valid area of "hacking"
but theres plenty of other areas where java is a strong fit
the vast majority of backend systems out there are java spring based. and those are the systems people want to breach into (or defend them against breaches)
so naturally u need to be an expert on that ecosystem in order to do that job
like, how do u think anyone is able to look at a companies java-spring code in order to find weakspots in it without being expert on java-spring
u need to be expert on the kind of tech and infrastructure the target is using
otherwise u wont find exploits
💯
Because they get noobs like you to do the illegal parts for them. There is some kind of allure to these people because I used to do it when I started out and that was before the movie War Games. It was decidedly much much easier back then but the there was a constant worry about getting caught (whether you did it for good or evil.) My advice is to steer clear of these people, they play a social engineering game that you won't be able to compete against.
just do it legally. there are plenty of companies with a security department/team. same topic but totally legal. and usually also better paid
You can also legally hack various open source projects, provided that you responsibly disclose any findings (responsible disclosure means that you privately contact the maintainers of the project through proper channels, giving them time to fix the issue before it's publicly disclosed). You can even get some money for it if the project has a bug bounty program (although right now many of those are being shut down due to AI)