This is a compilation of a study on analyzing the possible behavior of a malicious developer...

1. Encoder: \uxxxx unicode encoding & decoding of java code pieces
2. Dumper: Base64 encoding of an upload java class file
3. Loader: Dynamic loading of Base64 encoded class file
4. Unicode: A simple example of a unicode encoded jsp backdoor
5. Compile: Dynamic compilation and loading of a java class source
6. Analyze: Byte Code Analysis of an uploaded java class file

Inspired by Jeff Williams's Work