CVE-2012-1723

This Metasploit module exploits a vulnerability in the HotSpot bytecode verifier (CVE-2012-1723) to escape the JRE sandbox and execute arbitrary code. It delivers a malicious Java applet via an HTTP server to achieve remote code execution.

This PoC exploits CVE-2012-1723, a Java Applet sandbox escape vulnerability, by manipulating ClassLoader references to bypass security restrictions and execute arbitrary commands. The exploit chain involves confusing the ClassLoader, defining a malicious class with elevated permissions, and executing a payload.

This Metasploit module exploits a vulnerability in the HotSpot bytecode verifier (CVE-2012-1723) to escape the JRE sandbox and execute arbitrary code. It uses a malicious Java applet to deliver a payload, supporting multiple platforms and architectures.