Crafted ZIP Buffer Overflow in TurboPower Abbrevia

This repository contains a single Metasploit exploit module targeting a stack-based buffer overflow vulnerability (CVE-2011-4535) in ScadaTEC ScadaPhone version 5.3.11.1230 for Windows. The exploit generates a malicious ZIP file (default name: msf.zip) that, when opened by a victim in ScadaPhone, triggers a buffer overflow and executes arbitrary code as the victim user. The module uses an egghunter technique to deliver a customizable payload (up to 700 bytes, avoiding certain bad characters). The attack vector is local, requiring user interaction to open the crafted file. The repository is structured as a typical Metasploit module, written in Ruby, and leverages Metasploit's file format exploitation and payload generation capabilities. No network endpoints are targeted; the main fingerprintable endpoint is the malicious ZIP file itself.