13. Conditions and principle of the BCEL exploitation chain; have you traced the underlying code? How is it invoked?

Attack Method

Apache‑BCEL creates an object and then calls the loadClass method. After calling the createClass method, the data is decoded. The Tomcat dependency tomcat-dbcp needs to be imported.