Metasploit cross-platform Java Exploit (CVE-2011-3544) Demonstration

[ZomgGuitarz1234]

Damn script kiddies *shakes fist*

[dubmega]

how do you remove it?

[gameyguy123]

Which version is patched?

[guidodobboletta]

Mine stays in "Sending Applet.jar to 192.168.20.103:1079" It loads the java applet on the victim machine but does nothing else. Won't work on armitage nor msfconsole

[DashnineMedia]

@guidodobboletta It's likely that your victim machine has an updated JVM. This attack was recently patched.

[guidodobboletta]

@DashnineMedia Yes, it is fully updated. Mine is Version 6 update 29. The video i saw was with version 6 update 26. Up to which version does it work? Should i reinstall an older version of java on my VM to try it? Thanks for everything, keep it up with armitage!

[madman5578]

dude i have a real ip on my adsl router how could i use this ip and hack people from out side (internet)?

[PhiberOptics]

Second to comment on this nice release great share keep up the good work all you pentesters that discover theses exploit and release them.

[pspm8]

fuck yea!

[DashnineMedia]

@pspm8 I feel the same way about this attack.

[pspm8]

@DashnineMedia lol