There are tons of applications that require Java to work.
This is why Java runtime environment is installed on almost every computer, according to Oracle, 97
percent of enterprise desktops run Java.
Eighty nine percent of desktops or computers in the USA run Java, three billion mobile phones run Java,
100 percent of Blu ray disk players ship with Java.
And 125 million TV devices run Java.
In the 2010s, there was several numbers of exploitable Java vulnerabilities found, most of them were
allowing the attackers to execute remote codes in the victim's systems because almost every IT system
has Java.
And several critical zero day vulnerabilities have been found in the recent years.
Exploiting Java vulnerabilities on the client side is quite popular.
When you search for Java in Métis Point framework, you find a lot of exploit written for Java vulnerabilities.
Some of them are seen in the slide.
Let's see one of them in detail, the exploit module displayed in the slide abuses the Jambox classes
from a Java applet to an arbitrary Java code.
Additionally, this module bypasses default security settings introduced in Java seven update 10 to
run unsigned applets without displaying any warning to the user.
To use the exploit run, use command with the full exploit name.
Set the options of the exploit and run it using exploit or run command, same as the Firefox add on
exploit, it starts to serve an application on the server.
Salvy host at the Port S.V. Port with a path given in the You are ipass option.
At the same time, it starts a reverse TCP handler to collect the captured session on the same system
with Salvy host at the Port 44 44.
Did you notice that we didn't set a payload for the exploit by default, the exploit uses Java slash
interpreter slash reverse underscore TCP payload.