CVE-2012-4681

This Metasploit module exploits a Java 7 vulnerability (CVE-2012-0547) to achieve remote code execution by delivering a malicious JAR file via an HTML page with an embedded applet. The exploit bypasses the Java sandbox and has been tested across multiple browsers and platforms.

This repository contains a working proof-of-concept exploit for CVE-2012-4681, a Java vulnerability that bypasses security restrictions to execute arbitrary commands. The exploit uses reflection and Java beans to disable the security manager and execute 'calc.exe' as a demonstration.

This PoC exploits CVE-2012-4681, a Java sandbox bypass vulnerability in JDK7u6, by manipulating the AccessControlContext to disable the SecurityManager. It demonstrates how to reset the Java sandbox using reflection and the `sun.awt.SunToolkit` class.

This Metasploit module exploits CVE-2012-4681, a vulnerability in Java 7 that allows remote code execution by bypassing the Security Manager via ClassFinder and MethodFinder.findMethod(). It delivers a malicious JAR file through an HTML page with an embedded applet.