-2

I need help decoding a URL found in a class inside a Java Archive (JAR), this might be malicious and want to see where it leads.

protected URLConnection openConnection(final URL paramURL)
throws IOException
{
new URLConnection(paramURL)
{
public InputStream getInputStream()
{
return (InputStream)Q5910778.1.this.val$Q53053143.Q8136909(paramURL);
}

There is also other classes in the JAR if it's needed. How would I go about doing this?

infosec
  • 39
  • 6
  • And where's the url? And where's the code of the class ``Q53053143`` thats mentioned in your code? – f1sh Jan 03 '17 at 16:43
  • Not my downvote, but I believe the only way you could see a URL in a decompiled binary JAR would be if it were a constant of some sort, which the code above does not imply. – Tim Biegeleisen Jan 03 '17 at 16:43
  • @f1sh That class wasn't included in the jar. – infosec Jan 03 '17 at 16:50

1 Answers1

0

The easiest way would be to use fiddler to trace exactly what site the app is trying to reach. You can set up a dummy proxy server to keep it from actually reaching anywhere if you're truly concerned.

John Kuhns
  • 506
  • 4
  • 20