Thread

Main.java

public class Main {

  public static void main(String argv[]) {
    Thread t = new Thread() {
      public void run() {
        vulnerableMethod();
      }
    };

    t.start();
  }

  static void vulnerableMethod() {
    System.out.println("ur powned");
  }
}

Soot returns:

Main$1;->run() might be called by:
 - Main;->main(java.lang.String[])
 - java.util.concurrent.ThreadPoolExecutor$DiscardOldestPolicy;->rejectedExecution(java.lang.Runnable, java.util.concurrent.ThreadPoolExecutor)
 - java.util.concurrent.ThreadPoolExecutor$CallerRunsPolicy;->rejectedExecution(java.lang.Runnable, java.util.concurrent.ThreadPoolExecutor)
 - java.util.concurrent.ThreadPoolExecutor;->addWorker(java.lang.Runnable, boolean)
 - java.lang.ref.Finalizer$1;->run()
 - sun.nio.ch.AsynchronousChannelGroupImpl$2;->run()
 - sun.net.www.http.KeepAliveCache$1;->run()
 - sun.net.www.http.KeepAliveStream$1;->run()
 - sun.nio.ch.AsynchronousChannelGroupImpl$4$1;->run()
 - java.util.concurrent.Executors$DelegatedExecutorService;->execute(java.lang.Runnable)
 - java.util.concurrent.Executors$PrivilegedThreadFactory$1$1;->run()
 - sun.security.provider.SeedGenerator$ThreadedSeedGenerator;-><init>()
 - sun.nio.ch.AsynchronousChannelGroupImpl;->executeOnPooledThread(java.lang.Runnable)
 - sun.nio.ch.AsynchronousChannelGroupImpl;->threadExit(java.lang.Runnable, boolean)
 - java.util.concurrent.ThreadPoolExecutor;->runWorker(java.util.concurrent.ThreadPoolExecutor$Worker)
 - java.util.concurrent.Executors$RunnableAdapter;->call()
 - sun.misc.Cleaner;->clean()
 - java.lang.ApplicationShutdownHooks;->runHooks()
 - sun.security.provider.SeedGenerator$ThreadedSeedGenerator;->run()
 - sun.nio.ch.KQueuePort$EventHandlerTask;->run()
 - sun.nio.ch.SolarisEventPort$EventHandlerTask;->run()
 - sun.nio.ch.EPollPort$EventHandlerTask;->run()
 - sun.nio.ch.AsynchronousChannelGroupImpl$1;->run()
 - java.lang.Thread;->run()
 - java.lang.Shutdown;->runHooks()