CVE-2025-34078

This exploit demonstrates a privilege escalation vulnerability in NSClient++ 0.5.2.35 by reading the cleartext web administrator password from the configuration file, enabling external script execution, and scheduling a malicious script to run as Local System.

This Metasploit module exploits CVE-2025-34078 in NSClient++ 0.5.2.35 by leveraging the ExternalScripts feature and a cleartext admin password in the config file to achieve privilege escalation via a crafted PowerShell payload.

This exploit leverages authenticated access to NSClient++'s external scripts feature to achieve remote code execution (RCE) by adding a malicious script, saving the configuration, and triggering execution. The exploit handles authentication, configuration updates, and application reloads to ensure payload execution.