|
The BeanShell provides a convenient means of inspecting and manipulating a Java application during execution. This allows the security tester to bypass security controls on the client and verify the security controls on the server.
It also allows for the automation of tedious tests such as brute force testing. The BeanShell can be inserted into a new application in a few simple steps. If the source code is not available, the BeanShell can be inserted by extending the class that acts as the entry point into the application. These techniques apply equally to full blown Java applications as well as applets. |
Assessing Java Clients with the BeanShell
New Update