CVE-2011-3230

This Metasploit module exploits a file:// URL policy vulnerability in Apple Safari 5.1 on macOS, allowing arbitrary code execution by serving a malicious payload via FTP and triggering its execution through a crafted HTML page. The exploit leverages the victim's browser to execute a payload from a remote share or local directory.

This Metasploit module exploits a policy issue in Apple Safari (CVE-2011-3230) to achieve arbitrary code execution via file:// URLs. It sets up an FTP and HTTP server to deliver a payload (either a .jar or .sh file) to the victim's machine, leveraging automount or directory traversal to execute the payload.