Solution:

1.Write a annotation processor as the DEP_FILE
2.Use the annotation on source code, then javac will call up the DEP_FILE on compilation.
3.Do your job on compilation.

Original writeup (https://r3kapig.com/writeup/20220125-rwctf4/#secured-java).