CVE-2009-3999

This Metasploit module exploits a stack-based buffer overflow in HP Power Manager's 'formExportDataLogs' via a malformed 'fileName' parameter, leading to arbitrary remote code execution under the context of 'SYSTEM'. It uses an egghunter technique to locate and execute the payload.

This repository contains a functional exploit for CVE-2009-3999, targeting a buffer overflow in HP Power Manager 4.2 (Build 7). The exploit uses a reverse shell payload generated via msfvenom and leverages an egghunter to locate the shellcode in memory.

This Metasploit module exploits a stack-based buffer overflow in HP Power Manager's 'formExportDataLogs' via a malformed 'fileName' parameter, leading to arbitrary remote code execution under the context of 'SYSTEM'. It uses an egghunter technique to locate and execute the payload.