CVE-2016-1542

This Metasploit module exploits a weak access control vulnerability in BMC Server Automation RSCD agent (CVE-2016-1543) to execute arbitrary commands without authentication. It supports multiple platforms (Windows, Linux, Unix) and includes auto-targeting based on platform detection.

This exploit leverages CVE-2016-1543 to achieve remote code execution on BMC BladeLogic RSCD agent via XMLRPC. It establishes a TLS connection and sends crafted XMLRPC requests to execute arbitrary commands.

This repository contains functional Python scripts that exploit CVE-2016-1542, an unauthorized password change vulnerability in BMC BladeLogic RSCD agent v8.6.01.66. The scripts demonstrate password changes and user enumeration via crafted XML-RPC requests over TLS.

This repository contains a functional exploit for CVE-2016-1542, targeting BMC BladeLogic RSCD agents. It includes a custom transport adapter to handle the TLSRPC protocol and XML-RPC commands to retrieve system users.

This Metasploit module exploits a weak access control vulnerability in BMC Server Automation RSCD agent (CVE-2016-1542, CVE-2016-1543) to execute arbitrary commands without authentication. It supports multiple platforms (Windows, Unix/Linux) and includes auto-target detection.