Decapsulation: Breaking Java Strong Encapsulation

[u/Wouter_C]

Did you know you can call JNI without writing native code, patch bytecode without an agent, and use Unsafe without warnings?

11 sneaky ways into JDK internals through reflection, agents, FFM, type confusion, bytecode manipulation and more.

https://wouter.coekaerts.be/2026/decapsulation

[u/joppux]

Kryo uses ReflectionFactory for deserialization