RCE in Cisco WebEx browser extensions API response parser (Windows)

This repository contains a single Metasploit module targeting CVE-2017-3823, a remote code execution vulnerability in the Cisco WebEx Chrome Extension version 1.0.1 on Windows. The exploit works by serving a malicious HTML page that interacts with the vulnerable extension, causing it to execute arbitrary PowerShell commands. The PowerShell command downloads a payload EXE from the attacker's server (over HTTPS) and executes it on the victim's machine. The module leverages Metasploit's HTTP server capabilities to deliver both the exploit HTML and the payload. The main file is written in Ruby, with embedded JavaScript and PowerShell used for the client-side and payload delivery. The attack vector is browser-based, requiring user interaction (visiting a malicious page). The exploit is operational, providing a working payload delivery mechanism, but payload customization is handled through Metasploit's standard payload options.