HotSpotter is a dynamic reverse engineering tool for the Java Virtual Machine (JVM). The goal is to provide a powerful GUI for attaching to running JVMs, inspecting classes, setting low-level hooks, and patching code? and data at runtime.
- run
./make_fonts.shinclient\externalto generate the font header files required by the project. cmake -S . -B buildin project root directory to configure the build directory.cmake --build build --config Debugorcmake --build build --config Releaseto compile the project.
| Layer | Technology |
|---|---|
| Language | C++ |
| GUI | Dear ImGui |
| JVM Interface | JVMTI, JNI |
| Build | CMake |
- Attach to running JVMs
- Display JVM/process info
- Enumerate all loaded classes
- Hook to class load event
- Class hierarchy navigation
- View class details: classinfo, fields, methods (PARTIAL)
- Dump classes to disk
- Select class/method/field in UI to set specific hooks
- Set and filter for:
- Method Entry events (all/class/method-specific)
- Native Method Bind (all/class/method-specific)
- Field Access/Modification (all/class/field-specific)
- Display live events, filter by selection
- Select class tab to:
- View full class info
- View decompiled output (integrate decompiler)
- View raw class bytecode
- List all instances of a class
- Select instance to view/patch fields
- Patch fields (value, access modifiers)
- Patch/replace method bytecode (if technically possible)
- Scripting or Plugins (Python or Lua)
- Seperate core and frontend, so both can easly be replaced by custom solutions (maybe kernel mode core + web frontend if you want to be fancy)