CVE-2011-0807

This Metasploit module exploits an authenticated code execution vulnerability in Oracle/Sun GlassFish Server by deploying a malicious WAR file. It supports multiple versions (2.x, 3.x, 4.x, and 9.x) and includes auto-targeting based on detected platform and architecture.

This Metasploit module is a brute-force utility for GlassFish admin console authentication, checking for weak credentials and an older authentication bypass vulnerability. It does not contain offensive payloads but scans for valid login combinations.

This Metasploit module exploits CVE-2011-0807 by authenticating to a vulnerable GlassFish Server instance and deploying a malicious WAR file to achieve remote code execution. It supports multiple versions of GlassFish and Sun Java System Application Server, with options for both authenticated and unauthenticated exploitation via HTTP verb manipulation.