Active

JarLens

JarLens is a quick static analysis of any .jar file to spot blatant malware or other malicious code. It should be used along with a compiler as it does not deobsfucate stuff which is where malware can hide.

Download View source

SCAN COMPLETE
SHA-256     calculated locally
Archive     Minecraft plugin jar
Execution   never performed
Upload      never performed

FINDINGS
  metadata extracted
  nested jars inspected
  rule evidence attached

RISK
  Review findings before running

What It Checks

Known indicatorsRules cover token loggers, session stealers, credential paths, IP grabbers, loaders, and process execution.

Jar structureReads manifests, plugin metadata, nested jars, printable class strings, and SHA-256 fingerprints.

Explainable findingsEvery result includes severity, category, explanation, and the evidence that triggered it.

Private by defaultScans run locally. JarLens does not execute or upload the jar being inspected.

Important Limitation

JarLens is a triage tool, not a guarantee that a jar is safe. Static analysis catches many common stealers and loaders, but heavily obfuscated or staged malware can require manual reverse engineering or an isolated sandbox. TLDR don't get lazy and do your own analysis.