The Metasploit Framework provides different mixins you can use to develop a browser exploit, mainly they are [[Msf::Exploit::Remote::HttpServer|./How-to-write-a ...

Functional tests run against a closed boxed running version of the application. This means we are unable to stub out http requests at the code level. Requiring us to use mock http servers. There are ...