CVE-2016-2004

This Metasploit module exploits CVE-2016-2004 in HP Data Protector by establishing an encrypted communication channel and executing a PowerShell payload for remote code execution. It targets versions A.09.00 and earlier, leveraging TLS/SSL for encryption.

This exploit demonstrates unauthenticated encrypted communication with HP Data Protector agents, leveraging a known vulnerability to execute arbitrary commands. It bypasses encryption security by exploiting lack of authentication, allowing RCE via a crafted payload.

This repository contains a functional Python exploit for CVE-2016-2004, which targets HP Data Protector to achieve arbitrary remote command execution via a crafted packet sent to a vulnerable service. The exploit leverages the 'perl.exe' interpreter installed with HP Data Protector to execute commands on the target system.

This Metasploit module exploits CVE-2016-2004, a remote code execution vulnerability in HP Data Protector. It establishes an encrypted communication channel with the target and executes a PowerShell payload to achieve RCE on Windows systems.