search for "java decompiler" in search machines or software archives.
Dietmar
__________________________________________________________
Dietmar Scharf
* phone +49 89 9221 - 4803
or +49 173 9435404 (mobile)
fax +49 89 636 718 819
> -----Urspr�ngliche Nachricht-----
> Von: Nick McKenna [mailto:[EMAIL PROTECTED]]
> Gesendet: Mittwoch, 14. Juni 2000 10:30
> An: [EMAIL PROTECTED]
> Betreff: Re: Reverse Engineering
>
>
> Dear All
>
> On the subject of reverse engineering, does anyone know of a piece of
> software to reverse byte code back into source files?
>
> Thanks very much
>
> Nick.
>
> -----Original Message-----
> From: Jackson Ching [mailto:[EMAIL PROTECTED]]
> Sent: 14 June 2000 09:05
> To: [EMAIL PROTECTED]
> Subject: Re: Reverse Engineering
>
>
> Craig McClanahan,
>
> >
> >Being able to decompile a class file presumes that you can read the
> bytecodes of the class file, right?
> >
> Assumming the hacker was able to get the class file
> and wish to
> decompile.
>
> >The recommended placement for class files in a web application is the
> WEB-INF/classes or WEB-INF/lib directory in a web application
> based on the
> servlet 2.2 or later specification. There is an additional
> >requirement in this spec -- the servlet container is not
> allowed to serve
> any file under WEB-INF in response to a client request.
> Therefore, your
> putative hacker cannot get ahold of the bytecodes of your
> >servlets (unless you happen to store them someplace else in
> your document
> root, which would be a "bad thing"), and they can therefore
> not decompile
> your classes.
>
> On what platform and what web-server does WEB-INF
> located? where do
> i get more information on this? Thanks
>
> Jack
>
> ______________________________________________________________
> _____________
> To unsubscribe, send email to [EMAIL PROTECTED] and
> include in the body
> of the message "signoff SERVLET-INTEREST".
>
> Archives: http://archives.java.sun.com/archives/servlet-interest.html
> Resources:
> http://java.sun.com/products/servlet/external-resources.html
> LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
>
>
> ***************************************************************
> The contents of this Email and any files transmitted with it
> are confidential and intended solely for the use of the
> individual or entity to whom it is addressed. The views stated
> herein do not necessarily represent the view of the company.
> If you are not the intended recipient of this Email you may not
> copy, forward, disclose or otherwise use it or any part of it
> in any form whatsoever. If you have received this mail in
> error please Email the sender.
> ***************************************************************
>
> ______________________________________________________________
> _____________
> To unsubscribe, send email to [EMAIL PROTECTED] and
> include in the body
> of the message "signoff SERVLET-INTEREST".
>
> Archives: http://archives.java.sun.com/archives/servlet-interest.html
> Resources:
> http://java.sun.com/products/servlet/external-resources.html
> LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
>
___________________________________________________________________________
To unsubscribe, send email to [EMAIL PROTECTED] and include in the body
of the message "signoff SERVLET-INTEREST".
Archives: http://archives.java.sun.com/archives/servlet-interest.html
Resources: http://java.sun.com/products/servlet/external-resources.html
LISTSERV Help: http://www.lsoft.com/manuals/user/user.html
