Skip to content

jni

This module requires ZombieFC2 to be active. The compromised process must be running under a Java environment. Most-to-all these functions is just a wrapper for jni.h. They are called the same way, and behave the same way.

Therefore, if you are looking for a Description of a specific function, you would need to use the Java documentation. The function names are the same as found in JNI. The difference is styling. For example: find_class in FC2, would be FindClass in JNI.

init

Type

function

Description

This calibrates ZombieFC2 with the Java environment. This is automatically called already by parallactic2.lua, which is pre-installed inside Parallactic2. The only practical usage of this is if you plan to use this module with Universe4.

Returns

  • boolean

exit

Type

function

Description

This makes ZombieFC2 remove any data left inside the Java environment. There isn't a practical usage for this unless you plan to remove traces of Zombie from the compromised process.

Returns

  • boolean

find_class

Type

function

Parameters

  • string

Returns

  • address

get_static_field_id

Type

function

Parameters

  • address
  • string
  • string

Returns

  • address

get_method_id

Type

function

Parameters

  • address
  • string
  • string

Returns

  • address

get_static_object_field

Type

function

Parameters

  • address
  • address

Returns

  • address

new_global_ref

Type

function

Parameters

  • address

Returns

  • address

delete_local_ref

Type

function

Parameters

  • address

new_string

Type

function

Parameters

  • string

Returns

  • address

call_object_method

Type

function

Parameters

  • address
  • address
  • MEM_TYPE
  • boolean/string/number/nil (optional)

Returns

  • address

call_bool_method

Type

function

Parameters

  • address
  • address
  • MEM_TYPE
  • boolean/string/number/nil (optional)

Returns

  • boolean

call_double_method

Type

function

Parameters

  • address
  • address
  • MEM_TYPE
  • boolean/string/number/nil (optional)

Returns

  • number

call_float_method

Type

function

Parameters

  • address
  • address
  • MEM_TYPE
  • boolean/string/number/nil (optional)

Returns

  • number

call_int_method

Type

function

Parameters

  • address
  • address
  • MEM_TYPE
  • boolean/string/number/nil (optional)

Returns

  • number

call_long_method

Type

function

Parameters

  • address
  • address
  • MEM_TYPE
  • boolean/string/number/nil (optional)

Returns

  • number

call_void_method

Type

function

Parameters

  • address
  • address
  • MEM_TYPE
  • boolean/string/number/nil (optional)

get_static_method_id

Type

function

Parameters

  • address
  • string
  • string

Returns

  • address

get_static_object_method

Type

function

Parameters

  • address
  • string
  • string

Returns

  • address

get_field_id

Type

function

Parameters

  • address
  • string
  • string

Returns

  • address

get_object_field

Type

function

Parameters

  • address
  • address

Returns

  • address

set_field

Type

function

Parameters

  • address
  • address
  • MEM_TYPE
  • boolean/string/number

get_field

Type

function

Parameters

  • address
  • address
  • MEM_TYPE
  • boolean/string/number default_value

Returns

  • boolean/string/number

get_array_length

Type

function

Parameters

  • address

Returns

  • number

get_object_array_element

Type

function

Parameters

  • address
  • position

Returns

  • address

get_byte_array_elements

Type

function

Parameters

  • address

Returns

  • string

get_object_class

Type

function

Parameters

  • address

Returns

  • address