[Alan Turing]

Hello.

I've implemented the CVE-2013-2460 which allows an attacker to leverage permission within an unsigned Java applet through webpage.

Everything is working but Java is showing this window before executing it :
[img]http://img15.hostingpics.net/pics/596853silent.png[/img]

Is it "normal"? Anyone had implemented the CVE-2013-2460?
So, all JDB sellers saying "silent JDB" are lying? :p

[Ben121]

What version of java are you running?

[clrlslwi]

That looks like it's just a security manager bypass. I think you're actually looking for this.

[Alan Turing]

What version of java are you running?

I'm running java 7u21 obviously. I don't think that's problem because my exploit is doing what I want (but after the window).

---

That looks like it's just a security manager bypass. I think you're actually looking for this.

Hum, interesting. I think CVE-2013-2423 is much more what I need : security warning bypass. Thank you.

[clrlslwi]

Hum, interesting. I think CVE-2013-2423 is much more what I need : security warning bypass. Thank you.

You'll probably need to combine the exploit you're using now with that. Otherwise the security manager might throw a fit.

Have fun (;

[Skorp]

You are using the wrong exploit XD unless you want that messagebox to pop up. Hahaha.