rapid7/metasploit-framework — pull request #3656 by jvennix-r7 (2014-08-15 21:40:53+00:00)
Title: Add javascript injection exploit for firefox 15-23

Been sitting on this for almost a year now, but it required the user to bring up the Web Console prompt manually, so was user-assisted and meh. Today I thought of a way to get this exploit working without the user-assisted bit! So here is an exploit that will get you shells on any version of firefox on any OS between versions 15 and 23.

#### Verification

- [ ] Download a version of firefox 15-23, any OS is fine
- [ ] Configure your payload and run the module

msf> use exploit/multi/browser/firefox_tostring_injection
msf> set LHOST 0.0.0.0

- [ ] Browse to the displayed URL, get that shell
- [ ] Run autopwn, you should get a shell as well