The Complete Metasploit Guide

The technology behind the browser autopwn attack

The autopwn refers to the automatic exploitation of the target. The autopwn module sets up most of the browser-based exploits in listening mode by automatically configuring them one after the other. On an incoming request from a particular browser, it launches the set of matching exploits. Therefore, irrespective of the browser a victim is using, if there are vulnerabilities in the browser, the autopwn script attacks it automatically with the matching exploit modules.

Let's understand the workings of this attack vector in detail using the following diagram:

In the preceding scenario, an exploit ...