Detects exposed JDWP (Java Debug Wire Protocol) services on ports 5005/8000/8787/5050. Performs protocol handshake and reports as VULN since an exposed debug port allows remote code execution.