2012-02-23 23:22:32 +00:00
|
|
|
##
|
|
|
|
# $Id$
|
|
|
|
##
|
|
|
|
|
|
|
|
##
|
|
|
|
# This file is part of the Metasploit Framework and may be subject to
|
|
|
|
# redistribution and commercial restrictions. Please see the Metasploit
|
|
|
|
# web site for more information on licensing and terms of use.
|
|
|
|
# http://metasploit.com/
|
|
|
|
##
|
|
|
|
|
|
|
|
require 'msf/core'
|
|
|
|
|
|
|
|
class Metasploit3 < Msf::Auxiliary
|
|
|
|
|
|
|
|
include Msf::Exploit::Remote::Telnet
|
|
|
|
include Msf::Auxiliary::Scanner
|
|
|
|
include Msf::Auxiliary::Report
|
|
|
|
|
|
|
|
def initialize
|
|
|
|
super(
|
|
|
|
'Name' => 'Lantronix Telnet Service Banner Detection',
|
|
|
|
'Version' => '$Revision$',
|
|
|
|
'Description' => 'Detect Lantronix telnet services',
|
|
|
|
'Author' => ['TheLightCosine <thelightcosine[at]metasploit.com>', 'hdm'],
|
|
|
|
'License' => MSF_LICENSE
|
|
|
|
)
|
|
|
|
register_options(
|
|
|
|
[
|
|
|
|
Opt::RPORT(9999),
|
|
|
|
OptInt.new('TIMEOUT', [true, 'Timeout for the Telnet probe', 30])
|
|
|
|
], self.class)
|
2012-02-29 16:41:38 +00:00
|
|
|
|
2012-02-23 23:22:32 +00:00
|
|
|
deregister_options('USERNAME','PASSWORD')
|
|
|
|
end
|
|
|
|
|
|
|
|
def to
|
|
|
|
return 30 if datastore['TIMEOUT'].to_i.zero?
|
|
|
|
datastore['TIMEOUT'].to_i
|
|
|
|
end
|
|
|
|
|
|
|
|
def run_host(ip)
|
|
|
|
begin
|
|
|
|
::Timeout.timeout(to) do
|
|
|
|
res = connect
|
|
|
|
if banner.start_with? "MAC address"
|
2012-04-21 19:51:20 +00:00
|
|
|
print_status("#{ip}:#{rport} TELNET: #{banner}")
|
2012-02-23 23:22:32 +00:00
|
|
|
version = banner.match(/Software version [\w\.]+ \(\d+\) \w*$/)[0]
|
2012-04-21 19:51:20 +00:00
|
|
|
report_service(:host => rhost, :port => rport, :name => "telnet", :info => "Lantronix Version: #{version}" )
|
2012-02-23 23:22:32 +00:00
|
|
|
end
|
|
|
|
end
|
|
|
|
rescue ::Rex::ConnectionError
|
|
|
|
rescue Timeout::Error
|
|
|
|
print_error("#{target_host}:#{rport}, Server timed out after #{to} seconds. Skipping.")
|
|
|
|
rescue ::Exception => e
|
|
|
|
print_error("#{e} #{e.backtrace}")
|
|
|
|
end
|
|
|
|
end
|
|
|
|
end
|