beefproject/beef — Issue #276: Malicious Java Applet module is not working on Windows systems
Author: passbe
Created: 2011-12-10 22:27:17+00:00
State: open

The Malicious Java Applet module is not working on Windows systems.

It is not working on Windows Vista with Java 1.6.0_29 in all major browsers.

It is reportedly not working on Windows XP SP2/SP3.

It is unconfirmed whether it works on Linux/UNIX systems.

It is reportedly working fine on Mac OSX.

The module returns successfully however the shell is never received by the JavaPayload stager and the following client-side Java errors are thrown:

java.security.AccessControlException: access denied (java.lang.RuntimePermission createClassLoader)
at java.security.AccessControlContext.checkPermission(Unknown Source)
at java.security.AccessController.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkPermission(Unknown Source)
at java.lang.SecurityManager.checkCreateClassLoader(Unknown Source)
at java.lang.ClassLoader.checkCreateClassLoader(Unknown Source)
at java.lang.ClassLoader.<init>(Unknown Source)
at javapayload.stager.Stager.<init>(Stager.java:48)
at javapayload.stager.ReverseTCP.<init>(ReverseTCP.java:39)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(Unknown Source)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(Unknown Source)
at java.lang.reflect.Constructor.newInstance(Unknown Source)
at java.lang.Class.newInstance0(Unknown Source)
at java.lang.Class.newInstance(Unknown Source)
at javapayload.loader.AppletLoader.init(AppletLoader.java:48)
at sun.applet.AppletPanel.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

java.lang.ClassFormatError: Incompatible magic value 1347093252 in class file javapayload/loader/AppletLoader
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClassCond(Unknown Source)
at java.lang.ClassLoader.defineClass(Unknown Source)
at java.security.SecureClassLoader.defineClass(Unknown Source)
at sun.applet.AppletClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.applet.AppletClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.applet.AppletClassLoader.loadCode(Unknown Source)
at sun.applet.AppletPanel.createApplet(Unknown Source)
at sun.plugin.AppletViewer.createApplet(Unknown Source)
at sun.applet.AppletPanel.runLoader(Unknown Source)
at sun.applet.AppletPanel.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

Google Code Issue: http://code.google.com/p/beef/issues/detail?id=555