Metasploit mailing list archives

HTTP Tunneling + Java Applet Proxy Auth


From: Ty Miller <tyronmiller () gmail com>
Date: Fri, 8 Jul 2011 16:58:57 +1000

Hey guys,

I have been using the HTTP tunnelling payload with the Java applet exploit
for social engineering.

When the applet is run on the system, it attempts to connect over the proxy.
At this point we get a Java authentication prompt from the proxy (since I
assume the applet doesn't pick up on the integrated AD authentication). Once
the username and password are entered, nothing else happens.

I am assuming that the payload failed due to the authentication prompt.

Any thoughts on getting around this?

Thx,
Ty
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework

Current thread: