2010-01-13 21:46:48 +00:00
|
|
|
##
|
2014-10-17 16:47:33 +00:00
|
|
|
# This module requires Metasploit: http://metasploit.com/download
|
2013-10-15 18:50:46 +00:00
|
|
|
# Current source: https://github.com/rapid7/metasploit-framework
|
2010-01-13 21:46:48 +00:00
|
|
|
##
|
|
|
|
|
|
|
|
require 'msf/core'
|
|
|
|
|
2016-03-08 13:02:44 +00:00
|
|
|
class MetasploitModule < Msf::Auxiliary
|
2010-01-13 21:46:48 +00:00
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
include Msf::Exploit::Remote::Telnet
|
|
|
|
include Msf::Auxiliary::Scanner
|
|
|
|
include Msf::Auxiliary::Report
|
2010-01-13 21:46:48 +00:00
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
def initialize
|
|
|
|
super(
|
|
|
|
'Name' => 'Telnet Service Banner Detection',
|
|
|
|
'Description' => 'Detect telnet services',
|
|
|
|
'Author' => 'hdm',
|
|
|
|
'License' => MSF_LICENSE
|
|
|
|
)
|
|
|
|
register_options(
|
|
|
|
[
|
|
|
|
Opt::RPORT(23),
|
|
|
|
OptInt.new('TIMEOUT', [true, 'Timeout for the Telnet probe', 30])
|
|
|
|
], self.class)
|
|
|
|
end
|
2010-09-18 03:00:19 +00:00
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
def to
|
|
|
|
return 30 if datastore['TIMEOUT'].to_i.zero?
|
|
|
|
datastore['TIMEOUT'].to_i
|
|
|
|
end
|
2010-01-13 21:46:48 +00:00
|
|
|
|
2013-08-30 21:28:54 +00:00
|
|
|
def run_host(ip)
|
|
|
|
begin
|
|
|
|
::Timeout.timeout(to) do
|
|
|
|
res = connect
|
|
|
|
# This makes db_services look a lot nicer.
|
|
|
|
banner_santized = Rex::Text.to_hex_ascii(banner.to_s)
|
|
|
|
print_status("#{ip}:#{rport} TELNET #{banner_santized}")
|
|
|
|
report_service(:host => rhost, :port => rport, :name => "telnet", :info => banner_santized)
|
|
|
|
end
|
2017-03-15 21:33:37 +00:00
|
|
|
rescue ::Rex::ConnectionError, ::Errno::ECONNRESET => e
|
|
|
|
print_error("A network issue has occurred: #{e.message}")
|
|
|
|
elog("#{e.class} #{e.message}\n#{e.backtrace * "\n"}")
|
|
|
|
rescue Timeout::Error => e
|
2013-08-30 21:28:54 +00:00
|
|
|
print_error("#{target_host}:#{rport}, Server timed out after #{to} seconds. Skipping.")
|
2017-03-15 21:33:37 +00:00
|
|
|
elog("#{e.class} #{e.message}\n#{e.backtrace * "\n"}")
|
2013-08-30 21:28:54 +00:00
|
|
|
rescue ::Exception => e
|
|
|
|
print_error("#{e} #{e.backtrace}")
|
2017-03-15 21:33:37 +00:00
|
|
|
elog("#{e.class} #{e.message}\n#{e.backtrace * "\n"}")
|
2013-08-30 21:28:54 +00:00
|
|
|
end
|
|
|
|
end
|
2010-01-13 21:46:48 +00:00
|
|
|
end
|