Remote Code Execution in HP SiteScope SOAP Feature

This repository contains a single Metasploit module targeting HP SiteScope 11.20 (tested on Windows 2003 SP2 and Linux CentOS 6.3) for remote code execution. The exploit leverages two vulnerabilities (CVE-2012-3260 and CVE-2012-3261): an authentication bypass in the APIPreferenceImpl AXIS service to create a new user with empty credentials, and then abuses the UploadManagerServlet to upload a malicious JSP payload. The module is written in Ruby and is structured as a standard Metasploit exploit, using the HttpClient and EXE mixins. The main attack vector is network-based, targeting HTTP endpoints exposed by the SiteScope application (notably /SiteScope/services/APIPreferenceImpl, /SiteScope/servlet/Main, and /SiteScope/j_security_check). Upon successful exploitation, the attacker gains remote code execution on the target server via the uploaded JSP payload. The module includes cleanup routines to remove artifacts after exploitation. The code is operational and provides a working exploit with customizable payloads through the Metasploit framework.