Metasploit cross-platform Java Exploit (CVE-2011-3544) Demonstration
This video uses Armitage and Metasploit to demonstrate, multi/browser/java_rhino, a new cross-platform Java exploit. This exploit uses a loophole in the Java API to execute a payload outside of Java's security sandbox without requiring a user to approve some action. This works in Firefox, Internet Explorer, and Safari on Windows, MacOS X, and presumably Linux. Java 1.6.0u27, Java 1.7.0, and older versions are vulnerable.