CVE-2013-2347

This Metasploit module exploits CVE-2013-2347 in HP Data Protector's Backup Client Service (OmniInet.exe) via the EXEC_BAR operation to achieve remote code execution. It supports both VBScript CMDStager and PowerShell payloads, targeting Windows systems.

This exploit targets HP Data Protector's omniinet service (port 5555) via a malicious EXEC_BAR packet (opcode 11) to achieve remote command execution. It creates a new Windows administrator account by leveraging the service's argument parser to pass commands to CreateProcessW.

This Metasploit module exploits a remote code execution vulnerability in HP Data Protector's Backup Client Service (OmniInet.exe) via the EXEC_BAR operation. It supports both VBScript and PowerShell payload delivery methods, targeting Windows systems.