CVE-2018-6849

This Metasploit module exploits a WebRTC vulnerability (CVE-2018-6849) to leak private IP addresses by tricking browsers into revealing local network IPs via STUN requests. It sets up an HTTP server to deliver malicious JavaScript and collect leaked IPs via POST requests.

This Metasploit module exploits WebRTC to gather LAN IP addresses from a browser by leveraging STUN server requests and ICE candidate parsing. It serves a malicious HTML page that extracts the client's internal IP and sends it back to the attacker.