A Technique to Bypass RASP Protection in Java

RASP has become an important means of detection and defense for applications due to its ability to integrate with the application. In Java, RASP protection is generally implemented using the Instrumentation API. After an attacker has gained command execution privileges, certain methods (e.g., methods that execute system commands) can be disabled by RASP to prevent the attacker from executing them. This article aims to explore one possibility to bypass this restriction. We also explore the defenses and bypasses of this bypass method, and discuss the cost-effectiveness of this method.