‫There are tens of applications that require Java to work.
‫This is why Java runtime environment is installed on almost every computer, according to Oracle, 97
‫percent of enterprise desktops run Java.
‫89 percent of desktops or computers in the USA run Java.
‫Three billion mobile phones run Java.
‫100 percent of Blu ray disc players ship with Java.
‫And 125 million TV devices run Java.
‫In the 2010s, there were several numbers of exploitable Java vulnerabilities found.
‫Most of them were allowing the attackers to execute remote codes in the victim's systems because almost
‫every I.T. system has Java and several critical zero day vulnerabilities have been found in the recent
‫years.
‫Exploiting Java vulnerabilities on the client side is quite popular.
‫When you search for Java in Metasploit Framework, you find a lot of exploit written for Java vulnerabilities.
‫Some of them are seen in the slide.
‫Let's see one of them in detail.
‫The exploit module displayed in the slide abuses the Gen-X classes from a Java applet to run arbitrary
‫Java code.
‫Additionally, this module bypasses default security settings introduced in Java seven.
‫Update 10 to run unsigned applets without displaying any warning to the user.
‫To use the exploit run use command with the full exploit name.
‫Set the options of the exploit and run it using exploit or run command.
‫Same as the Firefox add on exploit.
‫It starts to serve an application on the server as savvy host at the port as SA V Port, with a path
‫given in the U R II path option.
‫At the same time, it starts a reverse TCP handler to collect the captured session on the same system
‫with savvy hosted at the Port 44 44.
‫Did you notice that we didn't set a payload for the exploit by default?
‫The exploit uses Java slash from interpreter slash reverse underscored TCP payload.