It can be used to break out from the intended program by running non-interactive system commands.
Can be used to execute already-compiled Java code. malicious-agent
is a local file which has somehow found its way onto the server that javac
is running, and is a compiled Java runtime. See DU_CTF2022 for more information about this.
javac -d output.jar -J-malicious-agent