‫There are tens of applications that require Java to work.
‫This is why Java runtime environment is installed on almost every computer, according to Oracle, 97
‫percent of enterprise desktops run Java.
‫Eighty nine percent of desktops or computers in the USA run Java, three billion mobile phones run Java,
‫100 percent of Blu ray disk players ship with Java.
‫And 125 million TV devices run Java.
‫In the 2010s, there was several numbers of exploitable Java vulnerabilities found, most of them were
‫allowing the attackers to execute remote codes in the victim's systems because almost every IT system
‫has Java.
‫And several critical zero day vulnerabilities have been found in the recent years.
‫Exploiting Java vulnerabilities on the client side is quite popular.
‫When you search for Java in Métis Point framework, you find a lot of exploit written for Java vulnerabilities.
‫Some of them are seen in the slide.
‫Let's see one of them in detail, the exploit module displayed in the slide abuses the Genex classes
‫from a Java applet to an arbitrary Java code.
‫Additionally, this module bypasses default security settings introduced in Java seven update 10 to
‫run unsigned applets without displaying any warning to the user.
‫To use the exploit run, use command with the full exploit name.
‫Set the options of the exploit and run it using exploit or run command, same as the Firefox add on
‫exploit, it starts to serve an application on the server S.V. host at the Port S.V. Port with a path
‫given in the You are ipass option.
‫At the same time, it starts a reverse TCP handler to collect the captured session on the same system
‫with S.V. host at the Port 44 44.
‫Did you notice that we didn't set a payload for the exploit by default, the exploit uses Java slash
‫interpreter slash reverse underscore TCP payload.